Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/67e5086f-19ee-309c-a914-5ede9d5b3d2c.roa
File:                     67e5086f-19ee-309c-a914-5ede9d5b3d2c.roa (raw, json)
Hash identifier:          ogN2MIQdp5UtSNrDhIkxBUW0GuGdeJ+r7mLsnVNGRKw=
Subject key identifier:   8F:A9:C1:90:DD:0D:CD:15:74:85:BF:B7:91:46:39:A4:4A:1C:97:CC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849CFFF788244150D7C096A6800
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/67e5086f-19ee-309c-a914-5ede9d5b3d2c.roa
Signing time:             Sun 11 May 2025 01:00:47 +0000
ROA not before:           Sun 11 May 2025 01:00:47 +0000
ROA not after:            Sat 09 Aug 2025 01:00:47 +0000
asID:                     44477
IP address blocks:        50.114.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cf:ff:78:82:44:15:0d:7c:09:6a:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 11 01:00:47 2025 GMT
            Not After : Aug  9 01:00:47 2025 GMT
        Subject: CN=0689735d-1155-466e-934a-118b8ad021de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:29:df:ad:9f:07:d8:ad:bc:08:ca:67:d6:b0:
                    93:19:ca:b8:31:22:51:4b:8b:a5:64:44:d0:7c:c9:
                    d6:39:c2:8b:46:27:ef:38:87:c2:49:51:7e:a4:22:
                    79:bb:df:bf:77:98:92:ff:2e:2f:97:15:f5:23:bf:
                    1d:69:86:56:a7:f6:94:fe:e0:85:ba:40:1f:81:92:
                    cd:47:3b:61:89:6c:91:7a:5d:a2:5f:7d:1a:16:22:
                    fd:4b:04:87:fc:32:d9:d4:49:d4:23:c7:32:14:ac:
                    aa:cb:3a:3e:52:ee:bb:25:43:ba:c0:f3:be:ac:34:
                    f5:17:7b:62:a5:6e:0d:92:ce:9a:b2:8b:2d:35:a7:
                    96:2b:46:9b:57:1a:7f:bd:28:f4:2b:88:db:56:b2:
                    9f:e0:6a:f2:f7:70:34:33:de:c0:c0:2f:c3:02:d9:
                    d7:1f:f7:8f:0c:9c:5c:f4:8c:a9:f0:de:c5:2b:91:
                    d0:64:68:0a:fa:8d:c9:b8:31:88:1b:d3:57:2e:72:
                    89:14:a6:af:1f:61:38:cf:1f:8f:32:73:ac:05:2e:
                    17:04:25:a4:1f:42:f3:0f:dd:d0:8f:05:24:67:f7:
                    6d:54:ba:46:16:78:ce:23:42:19:f2:cd:aa:df:5e:
                    fc:86:c4:a8:ba:93:5b:97:f2:89:48:a4:58:6c:3d:
                    58:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A9:C1:90:DD:0D:CD:15:74:85:BF:B7:91:46:39:A4:4A:1C:97:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/67e5086f-19ee-309c-a914-5ede9d5b3d2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:0e:5d:f0:ab:0a:1d:c7:2d:64:19:0f:7d:7e:33:4c:d8:54:
         65:3d:11:eb:0d:20:ae:50:fe:79:21:cd:09:a8:de:64:47:eb:
         6f:09:d2:a6:84:b5:2c:fb:ab:79:e5:0b:e0:fd:3f:b9:32:7e:
         86:85:fb:fa:bf:a7:ab:b8:04:31:48:c8:bf:06:85:6d:de:21:
         55:47:ef:b3:98:17:92:fb:5a:7f:db:0a:62:32:61:bd:5f:b6:
         19:44:cb:34:c4:09:d3:0c:7c:d5:44:fd:b8:13:77:5a:d7:e7:
         1c:08:bd:06:02:97:55:e9:fb:e6:88:25:4a:42:60:04:d6:05:
         b6:76:2e:75:84:96:ed:95:63:62:5c:e7:93:38:5f:b1:b9:98:
         09:21:d6:c9:dd:66:b3:b6:2e:a8:bd:ab:c2:58:81:62:0e:74:
         49:10:6c:12:6e:b9:1b:ac:63:b0:73:86:64:f4:04:4b:ff:2a:
         87:35:be:5a:b2:ab:de:d0:b8:f0:ab:69:db:4f:b2:b3:65:f5:
         80:9d:1e:b3:f7:c7:da:40:71:a9:21:d0:b4:54:5a:d1:8c:eb:
         63:0c:40:68:aa:80:a1:7a:36:08:99:58:bc:04:1d:b8:a5:40:
         a5:ad:7c:2d:3e:4f:2e:7e:1b:39:fb:ab:96:3c:f6:34:c3:25:
         a5:39:7a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:50:44 2025 by rpki-client