Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8ce1cf56-1a1a-3c4a-bb22-9c1faa873792.roa
File:                     8ce1cf56-1a1a-3c4a-bb22-9c1faa873792.roa (raw, json)
Hash identifier:          V81OpGPULHsHnyhhHOtfX1VkEbBydV5qLDo8ssbr0iU=
Subject key identifier:   EB:F1:A6:5C:1F:65:5D:74:73:FC:64:D6:84:8D:03:21:DC:2C:7F:D0
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A1DC4156254EC41C844529226
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8ce1cf56-1a1a-3c4a-bb22-9c1faa873792.roa
Signing time:             Sat 07 Jun 2025 21:34:17 +0000
ROA not before:           Sat 07 Jun 2025 21:34:17 +0000
ROA not after:            Fri 05 Sep 2025 21:34:17 +0000
asID:                     401152
IP address blocks:        50.114.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1d:c4:15:62:54:ec:41:c8:44:52:92:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun  7 21:34:17 2025 GMT
            Not After : Sep  5 21:34:17 2025 GMT
        Subject: CN=04232688-51d0-4455-ab9c-c2e800eaef21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:51:83:d0:12:56:b8:24:62:a3:0f:dd:bc:90:
                    de:37:35:de:ad:14:4b:f9:12:62:bb:b6:fc:38:0b:
                    6a:15:49:f2:d3:fe:28:0e:4c:ef:9b:94:c8:a4:23:
                    66:c8:33:f3:e7:78:27:38:09:62:48:59:e0:d4:0c:
                    6e:9d:cf:48:78:83:c5:03:ce:47:dc:38:24:7d:9f:
                    ab:00:82:b9:2d:4c:7c:22:f3:ca:14:b1:01:66:3e:
                    97:33:ef:99:1c:fd:9b:cf:db:1c:5f:d9:ae:22:0d:
                    79:6e:09:26:af:5c:ec:d0:16:7f:44:bc:d7:b5:49:
                    24:a1:00:01:da:c4:97:85:b5:6f:b6:ce:c6:05:58:
                    7c:82:aa:ac:c7:7b:80:e8:65:72:62:bd:c8:b5:93:
                    44:7f:96:29:7a:d6:42:d4:ac:53:af:b1:46:7f:a6:
                    1d:b4:8a:bd:49:e5:10:07:f7:63:3f:97:15:14:db:
                    31:f9:1c:0a:cd:aa:84:64:c3:54:a8:60:1f:61:47:
                    3b:cc:44:ca:fc:94:d0:99:cc:88:52:0b:d8:22:7f:
                    61:4f:2f:54:cf:fa:08:29:76:02:2d:7f:37:80:c7:
                    1b:fc:c9:68:23:39:70:fc:6f:4c:d9:41:51:89:38:
                    6e:40:db:4e:45:14:0c:fc:c2:1f:60:73:16:36:f4:
                    e6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F1:A6:5C:1F:65:5D:74:73:FC:64:D6:84:8D:03:21:DC:2C:7F:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8ce1cf56-1a1a-3c4a-bb22-9c1faa873792.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:e0:2d:df:eb:ac:b1:93:2c:06:d8:62:0f:f1:f2:20:0f:6b:
         c6:73:b7:90:37:f7:da:3d:39:18:91:b2:79:c5:37:2f:a9:4b:
         b1:c8:eb:d9:93:96:23:c9:35:f1:39:c4:ef:6e:4c:c3:3e:78:
         30:df:d7:49:f1:52:05:57:b0:e2:6a:5e:d1:5d:ae:98:e7:b8:
         a2:bf:ed:4a:54:47:da:1e:ea:36:dd:33:2b:a5:ad:86:60:d7:
         f4:e5:76:fc:ff:13:1c:d2:40:29:cd:11:41:74:83:ce:4c:ca:
         5e:b6:fe:fb:cb:7f:50:2d:e7:5a:fa:7c:bb:b3:e5:7e:0b:13:
         29:cc:95:2e:21:61:2e:bb:26:16:f5:67:f6:57:76:43:6f:11:
         0b:56:f1:20:7c:1c:f5:67:39:97:92:87:0f:10:26:dc:46:b7:
         c6:93:42:f8:80:58:fe:ea:16:6b:f3:a5:45:db:1d:ff:c3:2e:
         e6:9d:af:77:49:cf:9c:98:24:d6:fd:18:4a:32:d6:62:75:6a:
         9e:f5:46:35:3a:0a:99:aa:cf:d1:28:83:47:3f:f4:2d:f1:c6:
         91:de:3d:a9:bf:da:3c:af:91:2c:b1:1c:88:d6:1f:b9:0c:e2:
         b8:d0:28:a0:df:8d:7a:81:cd:b2:a9:41:7e:e6:bd:9f:2b:39:
         80:92:bd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:27:24 2025 by rpki-client