Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4cfa9528-28aa-363d-a6f6-1158b8868311.roa
File:                     4cfa9528-28aa-363d-a6f6-1158b8868311.roa (raw, json)
Hash identifier:          jYhctLP/x7SU+hIo3GYotfCmWAsOFoCNLzR/VuA/UH8=
Subject key identifier:   33:49:6F:AF:3D:DB:83:D5:29:F1:9C:3A:CD:0B:11:80:08:CD:90:CD
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A963699F4776E68B6CEFA00E0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4cfa9528-28aa-363d-a6f6-1158b8868311.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     401152
IP address blocks:        50.114.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:99:f4:77:6e:68:b6:ce:fa:00:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=3f1e67b3-33ee-4d63-a145-1e29638f66f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:24:e1:2c:cd:a9:fe:f1:9a:45:43:d7:af:55:
                    cb:24:3a:f2:46:1e:61:00:3e:0c:af:cf:2f:c1:f0:
                    76:1b:83:0c:d2:cd:f5:a5:e3:16:65:eb:92:13:33:
                    24:48:d7:f6:0b:31:31:f4:0d:1e:48:6c:3f:22:73:
                    d1:12:1f:a6:c3:a1:7a:ed:1b:48:31:39:6c:cc:18:
                    de:91:34:5f:04:7f:23:a8:a8:0a:72:62:56:81:14:
                    cd:ea:09:1a:9c:5e:cb:13:ba:90:af:59:29:b6:01:
                    0e:b4:b3:29:6d:f0:69:90:ac:11:a3:fc:f5:78:f5:
                    da:4c:01:d8:b3:b2:76:52:59:16:cc:4d:fe:dd:20:
                    c9:39:1a:a4:a5:61:32:d1:73:92:94:78:36:98:9d:
                    e4:59:20:cd:a3:77:f5:93:51:bf:96:f7:16:ce:5d:
                    58:e2:ef:0b:7e:18:c8:b3:37:16:65:bb:6e:91:9a:
                    06:04:68:74:f1:d2:36:86:0d:07:8c:58:ba:40:f2:
                    e3:b5:85:55:93:60:50:1f:d6:73:25:1b:56:8b:5d:
                    93:93:17:e9:9d:32:36:90:9a:b5:6b:c4:03:aa:7e:
                    2f:71:e3:76:f3:5f:05:98:9c:ed:06:ad:67:22:9a:
                    8a:8d:5f:6d:72:24:3d:ae:55:2f:b7:ac:df:3e:94:
                    e1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:49:6F:AF:3D:DB:83:D5:29:F1:9C:3A:CD:0B:11:80:08:CD:90:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4cfa9528-28aa-363d-a6f6-1158b8868311.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:b5:dd:74:0c:70:b9:8b:00:0f:81:79:85:0c:ac:03:90:81:
         63:b1:38:2f:12:c6:5c:33:58:e9:de:a6:b4:48:a9:aa:02:20:
         78:73:2a:e0:4f:d5:97:4a:bc:18:f2:86:26:cc:6e:77:a1:ae:
         a7:12:6e:30:d1:80:c5:46:f8:ba:1e:6c:4d:fb:e5:21:54:dd:
         23:ab:f7:de:dc:c0:9d:8c:a7:04:1d:3b:e5:68:95:77:fd:6c:
         fe:18:81:21:85:27:a9:0b:6c:c8:09:f2:14:06:cb:8c:d3:7e:
         1c:f7:86:76:cc:9d:d0:aa:d8:04:3a:d8:c3:e2:f2:6b:0e:36:
         e4:1a:57:62:b8:17:94:d6:51:01:e0:db:c5:96:c5:74:cc:a0:
         06:39:35:5e:c2:69:e0:16:96:6c:27:f1:ce:0f:f9:14:68:2a:
         3b:02:8d:47:e0:09:8e:e2:9a:13:76:69:62:aa:b8:02:8c:55:
         a9:c0:18:f9:73:be:5b:f5:82:20:f0:f9:78:72:2d:1f:54:f4:
         76:5e:db:5c:45:a3:e0:be:6a:4d:98:ab:33:fa:f0:eb:86:48:
         52:30:d5:b4:32:57:b7:ec:cd:e8:86:5c:07:70:47:db:dd:05:
         ec:15:5d:d3:b0:9d:a5:d4:9e:18:22:2d:ac:c5:9c:34:57:d1:
         25:64:9b:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNpn0d25ots76AOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk
M2YxZTY3YjMtMzNlZS00ZDYzLWExNDUtMWUyOTYzOGY2NmYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiThLM2p/vGaRUPXr1XLJDryRh5hAD4Mr88v
wfB2G4MM0s31peMWZeuSEzMkSNf2CzEx9A0eSGw/InPREh+mw6F67RtIMTlszBje
kTRfBH8jqKgKcmJWgRTN6gkanF7LE7qQr1kptgEOtLMpbfBpkKwRo/z1ePXaTAHY
s7J2UlkWzE3+3SDJORqkpWEy0XOSlHg2mJ3kWSDNo3f1k1G/lvcWzl1Y4u8LfhjI
szcWZbtukZoGBGh08dI2hg0HjFi6QPLjtYVVk2BQH9ZzJRtWi12TkxfpnTI2kJq1
a8QDqn4vceN2818FmJztBq1nIpqKjV9tciQ9rlUvt6zfPpThtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDNJb68924PVKfGcOs0LEYAIzZDNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNGNmYTk1MjgtMjhhYS0z
NjNkLWE2ZjYtMTE1OGI4ODY4MzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnJuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACK13XQMcLmLAA+BeYUMrAOQgWOxOC8SxlwzWOneprRIqaoCIHhzKuBP
1ZdKvBjyhibMbnehrqcSbjDRgMVG+LoebE375SFU3SOr997cwJ2MpwQdO+VolXf9
bP4YgSGFJ6kLbMgJ8hQGy4zTfhz3hnbMndCq2AQ62MPi8msONuQaV2K4F5TWUQHg
28WWxXTMoAY5NV7CaeAWlmwn8c4P+RRoKjsCjUfgCY7imhN2aWKquAKMVanAGPlz
vlv1giDw+XhyLR9U9HZe21xFo+C+ak2YqzP68OuGSFIw1bQyV7fszeiGXAdwR9vd
BewVXdOwnaXUnhgiLazFnDRX0SVkm3Q=
-----END CERTIFICATE-----
Generated at Wed Aug 20 13:19:30 2025 by rpki-client