Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a4e2b1d5-91e3-38db-a054-144716716a0c.roa
File:                     a4e2b1d5-91e3-38db-a054-144716716a0c.roa (raw, json)
Hash identifier:          hpkkLKrPKvYToUOkobVA7s6LIsKqDaTJsSoOCJavZ48=
Subject key identifier:   62:C4:4A:AD:EF:34:C0:87:9B:E2:59:95:17:AB:22:13:0F:26:EB:F7
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849115E1AE5BD18FBF13FE0C1C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a4e2b1d5-91e3-38db-a054-144716716a0c.roa
Signing time:             Mon 03 Mar 2025 18:12:11 +0000
ROA not before:           Mon 03 Mar 2025 18:12:11 +0000
ROA not after:            Sun 01 Jun 2025 17:12:11 +0000
asID:                     401152
IP address blocks:        50.114.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:11:5e:1a:e5:bd:18:fb:f1:3f:e0:c1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar  3 18:12:11 2025 GMT
            Not After : Jun  1 17:12:11 2025 GMT
        Subject: CN=a0858138-7812-4c47-92fa-012139c0854d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ca:e8:76:d2:74:24:a6:a3:c9:cd:d4:a4:fa:
                    13:b2:0d:c8:8a:a1:07:f9:1e:fd:78:18:54:cc:1c:
                    24:99:89:05:e0:75:26:02:d2:b4:c1:06:0b:a8:2c:
                    af:db:e4:c5:4c:a0:8a:b4:78:5b:d8:70:09:70:46:
                    d8:07:15:8d:03:b2:34:d0:4e:97:b6:21:ae:5d:f3:
                    b1:7d:f9:d8:2d:ea:fb:ce:04:2f:35:df:ad:51:a4:
                    13:5a:30:fb:1a:d7:0f:0b:8d:b0:ec:27:f8:7b:f8:
                    bc:ad:62:d9:ef:42:f2:a7:44:76:2d:a6:78:a4:45:
                    c1:e1:25:38:a0:e9:f1:93:21:77:29:71:32:86:1e:
                    d3:47:0e:21:71:7b:0d:b8:c6:ed:a6:b4:2b:f2:94:
                    2f:07:e1:8c:93:97:c3:81:f4:e2:63:15:9c:73:be:
                    f9:b7:0c:6a:60:15:90:8c:7c:5f:94:4c:c0:dd:c2:
                    77:ed:cc:af:0c:b7:97:4e:f8:e7:da:1e:e3:4b:df:
                    f2:c7:da:7b:8a:5f:0e:32:3a:a7:dc:db:3d:cc:3b:
                    ba:4d:3f:05:1f:be:f3:1d:18:5f:4c:41:fa:14:cd:
                    fb:56:b1:f2:05:ce:68:cc:a8:d9:a0:dc:f2:b0:46:
                    54:68:b7:91:94:19:9e:4b:52:bb:c8:ae:6e:80:88:
                    83:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C4:4A:AD:EF:34:C0:87:9B:E2:59:95:17:AB:22:13:0F:26:EB:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a4e2b1d5-91e3-38db-a054-144716716a0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:11:e8:d4:5e:fa:8e:b1:b4:93:e0:18:49:89:50:2c:8d:30:
         bb:f5:c4:68:b4:93:8f:a4:74:d7:b4:fb:54:fd:2b:0b:43:48:
         8d:90:49:58:50:7d:b6:d2:5f:e1:f7:52:2c:b8:8f:12:26:ea:
         49:51:94:9f:cb:39:01:b3:12:91:6a:d7:2f:fd:7a:8e:51:37:
         e2:1a:e8:da:fd:a6:63:e3:a1:e7:95:10:dc:09:3c:28:6a:40:
         fb:b5:9a:ce:ed:16:e8:61:09:ce:ff:d0:4c:cb:ea:3e:ab:d3:
         51:e4:5e:c4:6d:57:25:f1:6e:90:03:41:5f:bd:5e:92:f3:4d:
         18:cc:2b:0b:c2:24:cb:40:f2:1c:39:24:79:c1:dd:69:3a:26:
         a4:2b:cd:e3:fd:77:1c:9d:fb:9d:39:f0:9a:c9:f8:4b:cb:5c:
         1d:01:4b:2f:82:47:44:d3:53:d4:77:97:f6:83:75:78:18:8b:
         dc:6b:6f:c4:4b:da:f5:25:10:dd:7f:ea:b1:12:c7:7b:45:f4:
         07:45:89:92:96:b7:94:36:eb:9a:37:d7:2d:91:95:95:ee:8e:
         cd:96:01:1b:c2:5f:49:cc:9f:05:78:96:d6:ba:82:b3:56:0c:
         a2:30:19:8d:a9:7e:ad:83:0a:1a:22:ee:31:73:cb:fd:26:61:
         88:28:81:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:42:36 2025 by rpki-client