Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/58860439-f95b-3dd4-a5a7-2629b6400112.roa
File:                     58860439-f95b-3dd4-a5a7-2629b6400112.roa (raw, json)
Hash identifier:          8zrvrWQ5yqzjsTW2ojrm4YYUPbmTh+mSbkPrAMXAcxA=
Subject key identifier:   78:0C:BA:FA:3E:9F:3C:96:2F:BB:01:8F:9B:50:22:DE:83:81:4F:BE
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584AE63B3B7AEAE7F8815BA394C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/58860439-f95b-3dd4-a5a7-2629b6400112.roa
Signing time:             Mon 18 Aug 2025 16:56:02 +0000
ROA not before:           Mon 18 Aug 2025 16:56:02 +0000
ROA not after:            Sun 16 Nov 2025 17:56:02 +0000
asID:                     7385
IP address blocks:        50.114.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e6:3b:3b:7a:ea:e7:f8:81:5b:a3:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 18 16:56:02 2025 GMT
            Not After : Nov 16 17:56:02 2025 GMT
        Subject: CN=20786b8b-de8a-449a-b2d6-b3df1ac126d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b5:75:b0:55:13:00:bd:a5:b0:dc:da:ba:4d:
                    07:70:ab:b8:08:d7:4f:e1:59:48:3e:be:76:68:55:
                    10:28:11:ad:6a:3f:31:af:62:a5:57:60:f6:61:a6:
                    69:4c:35:4d:5e:cc:85:dc:ce:98:dc:8d:95:07:93:
                    cd:c9:b2:1e:74:89:b5:00:8f:a2:58:95:09:33:fb:
                    e8:36:fb:68:33:dc:28:e1:8b:fa:cf:c6:5d:37:cc:
                    c2:3c:4c:df:b1:51:e1:02:ae:31:c7:f8:bc:42:39:
                    85:56:ed:16:6e:07:84:c4:05:5f:48:ed:8e:5f:ec:
                    ac:25:28:e1:2d:9c:c0:9e:c7:ad:5c:25:25:a1:93:
                    23:05:2b:85:e9:19:c0:7c:d0:61:36:b8:b2:ce:0d:
                    20:3a:b0:c6:d3:e5:d1:58:11:67:09:85:c5:c1:3b:
                    ef:51:fe:11:20:6d:07:0b:de:7f:2c:34:e1:46:b4:
                    2a:f2:57:f7:b2:25:d1:d6:33:d3:06:ef:bf:fc:26:
                    20:98:3c:0f:79:2b:7f:4c:4d:2d:f4:33:62:43:f8:
                    94:11:a7:f2:5a:66:6d:6b:cc:74:8f:f2:5d:41:24:
                    e0:69:37:68:60:54:48:92:e3:db:79:d3:06:ab:d8:
                    2e:49:4f:94:f1:87:08:e1:d8:9d:7a:d6:0f:d4:0e:
                    a1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:0C:BA:FA:3E:9F:3C:96:2F:BB:01:8F:9B:50:22:DE:83:81:4F:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/58860439-f95b-3dd4-a5a7-2629b6400112.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:60:44:9b:60:0a:0d:97:ba:b5:91:75:30:bf:4f:5f:3a:02:
         d9:3f:00:21:b4:94:b9:5d:e7:01:68:54:87:fe:4c:ce:e8:85:
         e3:1a:e4:63:b2:1a:79:80:96:9c:70:54:9d:7b:79:43:71:fb:
         f6:23:02:e0:34:db:e1:33:e5:a1:96:04:a0:d2:2c:f6:75:99:
         ef:10:0b:4b:9d:eb:00:16:82:ca:fc:a3:aa:4a:8d:f1:fe:f1:
         f8:ee:40:f7:46:0b:e4:35:5e:40:41:09:d4:a1:cf:21:9f:18:
         05:06:d4:d3:e6:68:7e:44:84:48:07:c7:fc:7a:f4:7a:23:54:
         29:4b:cf:3a:1f:2e:a3:e5:f6:d4:68:ac:cd:28:54:ff:05:8e:
         ea:9a:13:c7:dc:93:8c:b3:62:6b:34:9d:f0:e0:4e:bd:80:72:
         9c:c0:75:7e:7a:18:59:66:19:ec:63:0d:94:88:3f:0d:fc:6d:
         32:93:88:a8:5b:82:29:37:82:d4:81:4e:e3:34:ec:c7:bd:e4:
         64:25:6b:81:80:31:57:5e:84:5e:f7:ea:da:f1:47:a7:2f:71:
         11:c6:d2:e4:8c:db:67:05:3f:78:df:d6:dd:b3:d7:7b:b3:6d:
         ff:d7:fb:fa:ab:8d:fb:77:90:d4:fd:2b:ca:0d:f0:b3:a0:98:
         36:38:0d:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErmOzt66uf4gVujlMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDgxODE2NTYwMloXDTI1MTExNjE3NTYwMlowLzEtMCsGA1UEAxMk
MjA3ODZiOGItZGU4YS00NDlhLWIyZDYtYjNkZjFhYzEyNmQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37V1sFUTAL2lsNzauk0HcKu4CNdP4VlIPr52
aFUQKBGtaj8xr2KlV2D2YaZpTDVNXsyF3M6Y3I2VB5PNybIedIm1AI+iWJUJM/vo
NvtoM9wo4Yv6z8ZdN8zCPEzfsVHhAq4xx/i8QjmFVu0WbgeExAVfSO2OX+ysJSjh
LZzAnsetXCUloZMjBSuF6RnAfNBhNriyzg0gOrDG0+XRWBFnCYXFwTvvUf4RIG0H
C95/LDThRrQq8lf3siXR1jPTBu+//CYgmDwPeSt/TE0t9DNiQ/iUEafyWmZta8x0
j/JdQSTgaTdoYFRIkuPbedMGq9guSU+U8YcI4didetYP1A6hwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHgMuvo+nzyWL7sBj5tQIt6DgU++MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNTg4NjA0MzktZjk1Yi0z
ZGQ0LWE1YTctMjYyOWI2NDAwMTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnIBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACRgRJtgCg2XurWRdTC/T186Atk/ACG0lLld5wFoVIf+TM7oheMa5GOy
GnmAlpxwVJ17eUNx+/YjAuA02+Ez5aGWBKDSLPZ1me8QC0ud6wAWgsr8o6pKjfH+
8fjuQPdGC+Q1XkBBCdShzyGfGAUG1NPmaH5EhEgHx/x69HojVClLzzofLqPl9tRo
rM0oVP8FjuqaE8fck4yzYms0nfDgTr2AcpzAdX56GFlmGexjDZSIPw38bTKTiKhb
gik3gtSBTuM07Me95GQla4GAMVdehF736trxR6cvcRHG0uSM22cFP3jf1t2z13uz
bf/X+/qrjft3kNT9K8oN8LOgmDY4DRg=
-----END CERTIFICATE-----
Generated at Wed Aug 20 13:13:41 2025 by rpki-client