Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aa296a0b-8dfa-3986-9e10-96f56e13feef.roa
File:                     aa296a0b-8dfa-3986-9e10-96f56e13feef.roa (raw, json)
Hash identifier:          rRmI1Io0yFyDrcagvE9NmxQnOKtt1OEnkcR9GmCC4ec=
Subject key identifier:   69:5A:A6:0C:99:99:37:A6:EF:9D:9F:96:47:AA:5B:34:C9:E8:0F:14
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584909E6A7D26DA131596FFD1300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aa296a0b-8dfa-3986-9e10-96f56e13feef.roa
Signing time:             Sat 01 Mar 2025 02:00:39 +0000
ROA not before:           Sat 01 Mar 2025 02:00:39 +0000
ROA not after:            Fri 30 May 2025 01:00:39 +0000
asID:                     396356
IP address blocks:        50.114.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:09:e6:a7:d2:6d:a1:31:59:6f:fd:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar  1 02:00:39 2025 GMT
            Not After : May 30 01:00:39 2025 GMT
        Subject: CN=fcc9a3f1-4746-4053-90d1-55fba56d8ce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0c:6f:fa:10:5e:30:66:4f:88:dc:c0:1f:f9:
                    b6:d4:c6:01:0c:b2:a3:d8:9f:de:08:bb:9b:b9:af:
                    04:0f:41:99:22:90:dd:a5:f2:77:2f:11:4c:2d:a3:
                    55:4c:70:22:d8:ed:b1:73:44:1f:ee:22:39:cf:00:
                    c4:a0:4d:51:f9:91:54:2f:45:b8:c1:da:c2:a6:aa:
                    9e:03:2c:b5:00:a7:13:ed:77:a2:09:2a:29:77:0c:
                    12:dc:4e:7a:78:34:29:cc:ad:36:75:33:3d:98:1d:
                    ec:3c:16:9e:a2:a3:ae:46:86:49:5a:52:ad:06:5b:
                    10:b8:54:51:94:2b:46:6d:63:2f:f2:4b:ab:f0:de:
                    43:d0:43:ce:51:1e:95:5b:13:c9:c1:8d:36:9f:5d:
                    1e:e0:aa:99:41:5f:fe:ef:25:df:63:73:25:d4:c8:
                    a7:49:b2:91:f9:b6:c5:33:06:d5:eb:93:99:67:63:
                    a2:4f:fb:d2:3c:7e:bb:0c:b9:3e:fd:ee:e0:84:41:
                    84:16:2d:f2:93:5d:14:02:93:26:3c:7e:c2:2b:ef:
                    b6:26:80:02:0b:9d:ea:7c:db:07:6d:f8:96:6f:b7:
                    12:b4:09:2c:e1:ef:60:9e:77:15:5c:94:08:c9:63:
                    87:6f:0e:94:d4:34:69:c4:30:c8:96:68:74:75:0a:
                    5c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:5A:A6:0C:99:99:37:A6:EF:9D:9F:96:47:AA:5B:34:C9:E8:0F:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aa296a0b-8dfa-3986-9e10-96f56e13feef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:f7:ee:6a:f0:29:34:60:c3:90:2e:a6:95:f5:cc:d5:0a:45:
         ae:55:54:14:e5:a7:a7:fb:eb:4a:cb:53:28:b0:9f:44:c8:f8:
         8a:40:e1:53:fe:1a:e5:64:b7:74:ab:88:9c:71:fa:17:7e:3c:
         6b:2f:66:51:36:be:f7:b1:cb:bf:e9:e7:e9:65:7d:6f:74:0e:
         b7:89:7d:8d:b6:a0:cb:3a:fa:87:c1:93:c5:a8:23:51:2f:52:
         5a:47:ce:c0:4a:cd:c8:63:d2:3d:75:2b:c6:a9:07:79:6a:2f:
         e4:b7:41:76:19:b6:8b:e6:d7:24:e0:5f:dd:0b:2a:22:3f:65:
         35:c4:2b:29:79:65:42:14:1e:fd:94:9b:76:23:5f:48:48:c9:
         91:d9:c7:f5:35:7a:36:5f:ec:c0:de:c9:2d:b0:9b:c6:dc:35:
         ec:c2:25:35:ed:df:10:34:c1:8d:02:a3:1c:cf:99:5b:00:aa:
         6e:57:c5:72:6a:5d:2d:73:63:e0:d3:f9:e4:44:b8:60:07:ac:
         7d:fd:3f:e4:79:62:d5:fc:4d:68:c1:2a:39:37:8b:f0:7d:d5:
         de:a1:1c:04:13:9e:33:6e:6c:53:c1:cb:73:e7:5b:5e:b0:f5:
         ec:c1:be:da:be:e8:cf:3f:11:af:26:e6:21:07:40:8b:16:67:
         82:48:56:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:02:49 2025 by rpki-client