Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aa66b2e3-db7d-333d-822a-e95e32154ab4.roa
File:                     aa66b2e3-db7d-333d-822a-e95e32154ab4.roa (raw, json)
Hash identifier:          mmWT+2f1fui8HkoomoO7LEcrawhXlzjmzgxs8ZEPuwA=
Subject key identifier:   77:B3:16:2C:F0:F4:61:A7:20:DD:9D:BC:48:02:FC:CA:5D:CE:75:BF
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849F3A552B98E8B7C2837810D80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aa66b2e3-db7d-333d-822a-e95e32154ab4.roa
Signing time:             Fri 23 May 2025 19:28:22 +0000
ROA not before:           Fri 23 May 2025 19:28:22 +0000
ROA not after:            Thu 21 Aug 2025 19:28:22 +0000
asID:                     7385
IP address blocks:        50.114.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f3:a5:52:b9:8e:8b:7c:28:37:81:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 23 19:28:22 2025 GMT
            Not After : Aug 21 19:28:22 2025 GMT
        Subject: CN=43f72f3a-0bfa-4025-a0b7-b7a8b860300a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e7:7b:72:d8:16:cb:71:0e:51:0a:85:66:f2:
                    88:b3:15:b7:fc:33:17:0f:90:0a:ea:ad:20:82:bd:
                    07:78:58:72:3b:25:75:e2:8c:40:5d:85:ac:ab:36:
                    cd:b8:6d:ac:41:52:dc:1a:59:f4:72:e8:f9:e1:a0:
                    1b:1d:be:18:ae:0f:6d:e0:7c:6f:80:9b:cb:2e:12:
                    f7:59:d6:44:5b:ae:28:1f:a1:3b:79:cc:4c:e8:cf:
                    24:1f:47:6c:9f:dd:10:58:d1:dc:7f:29:dd:f4:4e:
                    7d:62:35:c9:14:fd:c5:38:f4:45:51:2f:aa:a2:78:
                    26:3f:cc:29:f6:cf:e8:cc:7b:7d:2b:5e:88:5a:22:
                    16:d0:78:db:67:22:7a:79:6e:f3:e1:bb:6b:38:cf:
                    88:ac:ae:5f:35:c5:6b:75:4b:20:5d:99:88:d0:63:
                    30:df:83:af:2e:57:ac:a3:a8:e4:06:41:3b:63:55:
                    50:98:fb:15:f7:be:12:87:4c:b9:ff:58:2f:46:5c:
                    0f:e7:bf:59:17:54:1c:0f:89:b4:96:c8:9f:fb:ad:
                    b1:b4:29:92:cb:7c:8d:f3:ea:a0:3b:26:78:28:77:
                    8f:f8:d9:b8:98:7a:8f:4e:b8:05:a2:52:23:01:10:
                    54:c1:38:b1:7b:ab:de:76:99:a9:08:04:b9:81:9d:
                    b8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B3:16:2C:F0:F4:61:A7:20:DD:9D:BC:48:02:FC:CA:5D:CE:75:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aa66b2e3-db7d-333d-822a-e95e32154ab4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:3f:ee:ae:4b:fc:4b:b9:17:b9:00:6e:d8:04:90:9e:1a:02:
         bb:2f:50:ae:86:a9:7e:50:13:3a:59:aa:59:60:6c:f1:40:df:
         67:ec:45:f2:46:88:57:41:2f:1a:8b:52:0d:b2:cb:39:69:ab:
         a6:7a:57:f1:20:68:94:8f:ac:0e:45:11:0d:ad:ae:a4:5d:a2:
         be:4d:16:34:be:bf:c6:73:98:01:42:19:c4:51:e4:76:db:47:
         00:08:38:63:fb:14:14:cd:84:9f:0a:f6:ff:a4:e2:e4:3e:89:
         e1:b5:36:5f:8c:2c:0a:86:d7:fe:ae:e5:ff:fc:98:78:68:7b:
         38:30:14:90:ab:f0:0e:8e:29:f0:66:6e:28:2d:69:ee:b9:ce:
         86:f0:46:3d:36:a8:7e:d5:3b:35:0e:54:1f:a6:ed:4a:ca:9f:
         a4:8d:66:2f:2f:0c:12:3e:53:a1:5b:a0:94:01:74:23:84:cd:
         3a:e2:d1:13:dd:9c:74:ab:00:ca:b2:4c:f3:b0:cc:61:87:62:
         dc:47:fc:e9:72:82:8c:69:fc:59:c6:79:cf:75:6f:14:4e:6d:
         b2:39:c4:f2:b0:02:28:e3:2d:5e:1f:ad:ea:9c:29:1a:ab:b6:
         72:e5:ab:d6:fa:2a:99:7d:73:68:b8:f7:74:98:fa:12:66:6d:
         78:57:ee:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:28:00 2025 by rpki-client