Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a7072d42-1130-341a-bff6-148187a70494.roa
File:                     a7072d42-1130-341a-bff6-148187a70494.roa (raw, json)
Hash identifier:          CZ0Ev6j+1pAk16h/rlpBjwYEQvFsidMnotiMQdnc0eA=
Subject key identifier:   43:68:F6:B5:83:25:ED:F4:B7:18:13:12:18:D1:BB:D3:29:C6:A0:CB
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A0D6A89515F366F2F151E8A80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a7072d42-1130-341a-bff6-148187a70494.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     25369
IP address blocks:        50.114.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:89:51:5f:36:6f:2f:15:1e:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=817f8070-f3f5-4f25-aeb8-20483e144317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:41:94:d9:46:d7:0e:7b:a9:a8:42:44:3b:96:
                    6a:ca:c7:10:4a:40:78:91:d9:e0:76:3e:ee:4f:2c:
                    ae:9a:94:6a:0d:bf:c3:2a:4e:d4:7b:e6:c5:19:d9:
                    ae:3f:8b:61:16:40:bb:6d:eb:77:69:80:ab:de:41:
                    91:56:00:1f:c8:8a:3a:ce:7b:6c:53:ea:0e:17:15:
                    d4:da:1f:1f:91:08:7c:1e:65:a6:52:0d:01:53:e3:
                    97:15:b3:24:a4:e0:91:45:a4:88:f4:e2:1d:d6:05:
                    54:0b:c1:ea:f0:60:2a:e7:89:24:4e:d0:11:df:43:
                    cb:51:d5:df:6e:81:cf:1b:17:96:9a:9e:40:14:df:
                    e3:fb:d9:37:44:2a:a4:7d:c4:a9:e4:83:e8:5e:00:
                    ce:1f:ff:cb:b5:66:5e:ee:b5:88:3d:40:88:16:37:
                    53:bb:b6:4b:fa:42:f6:19:4e:3b:79:0c:29:6d:a3:
                    48:ad:29:3a:9e:61:1f:31:fa:c4:eb:03:37:89:36:
                    14:f3:f8:ed:02:75:c0:71:a4:99:54:90:e0:b5:d7:
                    89:02:c3:f2:ef:2c:87:c0:00:d8:9b:99:29:c3:66:
                    be:41:c9:ac:79:cf:c0:3d:64:e8:e3:a9:cf:07:59:
                    ce:96:fe:23:6a:ba:5a:03:61:e5:05:05:b4:23:28:
                    1a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:68:F6:B5:83:25:ED:F4:B7:18:13:12:18:D1:BB:D3:29:C6:A0:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a7072d42-1130-341a-bff6-148187a70494.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:c6:af:39:5d:2c:cd:04:16:3f:3e:c3:a0:fa:ae:23:dd:d7:
         ac:8b:d8:75:88:3c:5f:b0:35:f7:cd:22:27:dc:15:65:2a:40:
         5a:f9:da:5c:64:42:cc:ea:83:c0:c7:91:d3:ee:de:e3:6b:74:
         eb:1a:54:a2:d8:57:81:06:a7:68:e9:f5:f3:5c:94:d6:b9:42:
         82:fe:24:09:ce:d6:66:1d:65:31:35:72:76:3c:a3:4a:cb:25:
         b4:c5:47:54:71:31:e4:05:79:b9:a4:8f:2a:8e:62:2f:0a:12:
         03:a2:ce:e6:c6:0f:c4:88:d6:8b:92:f1:db:6d:bc:58:14:59:
         a6:91:d2:8f:25:b0:86:d0:01:2d:a1:8e:0d:d1:6a:c5:9f:48:
         f4:03:88:f8:d4:4f:fc:81:bb:43:61:ba:01:ba:3b:5e:7c:95:
         61:7b:ec:c2:fe:64:38:a8:b2:69:53:1f:a7:22:a3:20:19:0d:
         fc:db:3c:66:92:e5:f5:5e:d6:d2:97:73:8b:13:c6:56:ce:1a:
         73:4b:69:d6:ef:5d:1a:c8:b4:43:ae:c2:1b:99:57:6a:e4:8c:
         80:fb:00:f1:2a:2e:ee:46:fe:52:71:9d:df:96:de:fc:64:3d:
         ce:99:86:d3:cd:b9:b3:c4:45:bf:e6:b8:dd:ce:2f:c2:39:d4:
         5a:55:e5:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoNaolRXzZvLxUeioAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDYwMjAxMDA0OVoXDTI1MDgzMTAxMDA0OVowLzEtMCsGA1UEAxMk
ODE3ZjgwNzAtZjNmNS00ZjI1LWFlYjgtMjA0ODNlMTQ0MzE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0GU2UbXDnupqEJEO5ZqyscQSkB4kdngdj7u
TyyumpRqDb/DKk7Ue+bFGdmuP4thFkC7bet3aYCr3kGRVgAfyIo6zntsU+oOFxXU
2h8fkQh8HmWmUg0BU+OXFbMkpOCRRaSI9OId1gVUC8Hq8GAq54kkTtAR30PLUdXf
boHPGxeWmp5AFN/j+9k3RCqkfcSp5IPoXgDOH//LtWZe7rWIPUCIFjdTu7ZL+kL2
GU47eQwpbaNIrSk6nmEfMfrE6wM3iTYU8/jtAnXAcaSZVJDgtdeJAsPy7yyHwADY
m5kpw2a+Qcmsec/APWTo46nPB1nOlv4jarpaA2HlBQW0IygaVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFENo9rWDJe30txgTEhjRu9MpxqDLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYTcwNzJkNDItMTEzMC0z
NDFhLWJmZjYtMTQ4MTg3YTcwNDk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnIAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABbGrzldLM0EFj8+w6D6riPd16yL2HWIPF+wNffNIifcFWUqQFr52lxk
Qszqg8DHkdPu3uNrdOsaVKLYV4EGp2jp9fNclNa5QoL+JAnO1mYdZTE1cnY8o0rL
JbTFR1RxMeQFebmkjyqOYi8KEgOizubGD8SI1ouS8dttvFgUWaaR0o8lsIbQAS2h
jg3RasWfSPQDiPjUT/yBu0NhugG6O158lWF77ML+ZDiosmlTH6cioyAZDfzbPGaS
5fVe1tKXc4sTxlbOGnNLadbvXRrItEOuwhuZV2rkjID7APEqLu5G/lJxnd+W3vxk
Pc6ZhtPNubPERb/muN3OL8I51FpV5bQ=
-----END CERTIFICATE-----
Generated at Fri Jun 6 14:06:46 2025 by rpki-client