Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9c85d390-b859-3ced-9142-304a8e9ed15c.roa
File:                     9c85d390-b859-3ced-9142-304a8e9ed15c.roa (raw, json)
Hash identifier:          K2mtl/5FnEKHhQTbXh6HDNYnpkocuy/M2mk5yI8pYrw=
Subject key identifier:   B5:E4:8C:19:DE:F9:DA:D9:22:99:A6:1C:CA:4E:4B:A1:54:5A:30:6A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849D1654FD08A125DB2D64B7080
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9c85d390-b859-3ced-9142-304a8e9ed15c.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     58061
IP address blocks:        50.114.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:4f:d0:8a:12:5d:b2:d6:4b:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=3576500b-265b-4196-a457-493f629fcbd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:bd:8b:cf:62:fb:ba:ed:a1:32:41:48:44:5f:
                    b8:fd:7f:14:11:d7:5a:46:8f:56:ef:3d:17:3e:4d:
                    48:7c:82:a8:c2:f7:4b:e3:a1:19:ad:f8:4d:6f:e8:
                    f9:f9:b5:ec:c8:71:d7:02:35:2d:46:7b:c4:95:39:
                    43:4b:79:77:41:22:a7:df:e3:8b:08:0b:55:e4:be:
                    98:67:44:bc:38:9d:c1:8b:cb:9a:37:d9:fd:22:75:
                    c1:7f:f9:a3:32:f9:11:2d:bc:3d:ab:3b:8a:45:e1:
                    81:c5:ae:4a:f6:6b:62:f0:8d:f1:60:e3:17:7b:2e:
                    05:a5:3f:75:20:65:0c:aa:29:4d:23:18:2b:c5:f2:
                    0d:55:8a:c2:31:6a:19:70:00:c6:ad:d4:78:8b:32:
                    a2:66:06:b1:2f:b2:30:13:6c:86:79:3f:99:48:b7:
                    46:ad:8a:bc:6c:dc:10:9f:e8:db:b2:de:af:91:bf:
                    76:5f:15:b2:d1:89:eb:60:05:1c:f2:15:f5:32:8a:
                    c5:76:ac:b1:86:03:66:52:d3:9e:5f:d1:73:c5:60:
                    41:ab:85:6f:63:5d:ec:99:3b:2b:b7:2b:31:cf:8b:
                    8f:c4:20:09:34:f0:8f:7e:18:a7:55:ba:87:8c:3d:
                    79:90:78:9d:eb:cf:f2:2e:93:78:b5:25:9e:39:1b:
                    fc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E4:8C:19:DE:F9:DA:D9:22:99:A6:1C:CA:4E:4B:A1:54:5A:30:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9c85d390-b859-3ced-9142-304a8e9ed15c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:ec:95:a4:64:45:25:65:1d:54:c7:d4:03:ee:42:95:4d:9a:
         b5:51:4b:c2:42:cb:d9:25:55:53:82:eb:49:a2:c2:fb:19:b7:
         0a:51:e0:b6:d1:dc:62:74:ce:97:1c:9f:43:43:d1:ec:b1:51:
         3a:fb:53:4a:5f:a6:1e:45:df:60:cb:07:23:65:87:3a:61:66:
         48:36:7c:62:48:9c:8f:ca:f0:a1:23:51:36:84:e6:5e:38:85:
         bc:47:42:67:2f:bc:f4:a0:5d:8d:8c:fc:37:0a:1a:e2:38:fa:
         fc:5c:7e:3e:dd:83:b8:92:31:45:e0:34:5a:96:3a:4d:2e:95:
         25:70:72:56:1a:05:50:62:5d:98:4d:86:37:ed:5f:0e:f8:5d:
         ee:39:1b:60:a2:b0:e7:9d:7f:dd:b1:07:fb:aa:17:43:fe:31:
         b9:90:9d:c6:e1:41:f3:6f:b2:8f:78:d3:e8:24:e4:15:4b:69:
         d3:26:fe:83:65:59:3e:b4:e2:4d:e6:89:b3:aa:af:83:16:e9:
         87:33:36:77:6f:b1:31:4d:5f:c4:c6:a4:ef:14:6a:c7:a5:62:
         fd:bb:d4:40:61:32:8f:e0:9f:3b:11:a9:88:32:de:39:2a:56:
         13:09:7e:5f:50:5d:3e:29:d8:60:a0:94:5d:0f:4c:19:21:eb:
         d4:d3:28:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZU/QihJdstZLcIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk
MzU3NjUwMGItMjY1Yi00MTk2LWE0NTctNDkzZjYyOWZjYmQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAir2Lz2L7uu2hMkFIRF+4/X8UEddaRo9W7z0X
Pk1IfIKowvdL46EZrfhNb+j5+bXsyHHXAjUtRnvElTlDS3l3QSKn3+OLCAtV5L6Y
Z0S8OJ3Bi8uaN9n9InXBf/mjMvkRLbw9qzuKReGBxa5K9mti8I3xYOMXey4FpT91
IGUMqilNIxgrxfINVYrCMWoZcADGrdR4izKiZgaxL7IwE2yGeT+ZSLdGrYq8bNwQ
n+jbst6vkb92XxWy0YnrYAUc8hX1MorFdqyxhgNmUtOeX9FzxWBBq4VvY13smTsr
tysxz4uPxCAJNPCPfhinVbqHjD15kHid68/yLpN4tSWeORv8EQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLXkjBne+drZIpmmHMpOS6FUWjBqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOWM4NWQzOTAtYjg1OS0z
Y2VkLTkxNDItMzA0YThlOWVkMTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnKrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABjslaRkRSVlHVTH1APuQpVNmrVRS8JCy9klVVOC60miwvsZtwpR4LbR
3GJ0zpccn0ND0eyxUTr7U0pfph5F32DLByNlhzphZkg2fGJInI/K8KEjUTaE5l44
hbxHQmcvvPSgXY2M/DcKGuI4+vxcfj7dg7iSMUXgNFqWOk0ulSVwclYaBVBiXZhN
hjftXw74Xe45G2CisOedf92xB/uqF0P+MbmQncbhQfNvso940+gk5BVLadMm/oNl
WT604k3mibOqr4MW6YczNndvsTFNX8TGpO8UaselYv271EBhMo/gnzsRqYgy3jkq
VhMJfl9QXT4p2GCglF0PTBkh69TTKEk=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:43:58 2025 by rpki-client