Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bda5cb09-e86c-3e06-92ff-20af2d204f03.roa
File:                     bda5cb09-e86c-3e06-92ff-20af2d204f03.roa (raw, json)
Hash identifier:          PPJN3OabJm+mXtZnMQRIgIcv6fmfscHDIeuZrKBWDsw=
Subject key identifier:   70:D7:A3:E5:89:BA:92:50:24:02:CF:C5:64:F4:D2:21:D9:6B:06:F4
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849E8CE5EE8363BB40737586F80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bda5cb09-e86c-3e06-92ff-20af2d204f03.roa
Signing time:             Mon 19 May 2025 22:17:10 +0000
ROA not before:           Mon 19 May 2025 22:17:10 +0000
ROA not after:            Sun 17 Aug 2025 22:17:10 +0000
asID:                     401152
IP address blocks:        50.114.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e8:ce:5e:e8:36:3b:b4:07:37:58:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 19 22:17:10 2025 GMT
            Not After : Aug 17 22:17:10 2025 GMT
        Subject: CN=341b547e-f521-4635-b4fd-e8d1ae840808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:76:dd:2f:a3:ee:97:27:c8:00:a0:15:0d:35:
                    8d:81:44:be:be:d9:46:36:0b:3b:09:c5:49:d5:ac:
                    17:fd:0e:d9:cb:d2:16:d4:12:f3:28:2a:e5:31:7d:
                    26:8d:48:f9:04:08:22:7d:37:a2:02:27:8b:15:27:
                    01:4d:93:94:e4:29:28:16:a4:67:a4:fb:5b:e6:4a:
                    6e:6d:6d:ad:ca:26:e7:30:d3:03:83:33:99:3d:ac:
                    ca:1a:80:bb:f0:27:76:92:d5:53:43:e3:33:ca:51:
                    23:66:89:d6:b2:ac:5f:f9:1d:ac:5f:a2:86:9e:c7:
                    9a:17:fd:1e:07:bc:56:f0:d2:bf:c2:65:4f:f0:d6:
                    77:2e:b7:aa:19:cf:4f:8a:1e:ca:68:17:bc:69:7d:
                    45:af:5e:d0:95:b1:b3:ac:d2:c6:44:e8:ac:0c:97:
                    34:37:b5:56:c8:ba:ef:bb:b6:65:2a:f0:36:d9:4a:
                    32:48:7b:99:81:0d:b3:ed:b8:65:46:72:78:04:fc:
                    71:51:b8:eb:08:a6:52:07:51:6a:7c:95:4f:03:65:
                    03:d4:c3:5b:68:da:51:df:f8:2c:0f:a5:e4:dd:89:
                    8d:b3:bd:46:ba:8c:57:d4:1e:45:47:ad:87:9a:8f:
                    fe:31:df:d0:9d:5c:df:11:af:7a:d8:67:e2:1d:43:
                    e1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D7:A3:E5:89:BA:92:50:24:02:CF:C5:64:F4:D2:21:D9:6B:06:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bda5cb09-e86c-3e06-92ff-20af2d204f03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:b0:49:18:89:4d:37:ca:97:2c:73:28:d5:b8:67:5f:a7:fb:
         57:22:ca:30:4a:8c:5c:b2:f4:a8:e2:eb:f3:75:74:f2:9b:62:
         6d:e7:62:d7:77:27:98:d6:aa:2e:ed:0a:93:e7:bd:85:26:ff:
         40:98:83:ab:00:1e:4e:90:eb:89:e1:9f:93:cd:fd:b9:98:d5:
         36:a8:d9:82:29:74:be:45:7a:d1:6c:aa:70:5b:eb:37:99:f7:
         28:df:b8:be:44:67:5d:ff:af:5e:54:4e:fd:2a:b8:a8:c1:c1:
         9b:24:53:a9:eb:00:66:68:64:6a:32:ff:ae:05:7c:95:58:1e:
         cd:96:fa:0c:ef:ea:bf:c1:52:81:cd:17:f1:65:c8:05:df:ab:
         a6:c0:33:82:6d:da:b5:5e:9b:32:21:da:73:36:f9:83:77:3a:
         75:f9:92:05:9a:1d:44:7d:44:42:94:91:1c:e7:1c:68:9d:8c:
         c1:a5:fe:07:2a:81:c7:16:8e:4e:cc:85:eb:0b:a2:2f:3a:df:
         74:d8:b3:c5:48:52:de:eb:c3:82:08:07:02:be:71:e0:71:9a:
         e5:44:76:9c:98:f6:b8:8f:2d:db:7d:61:af:d5:28:f4:77:d3:
         0a:9b:8b:d9:26:4a:97:05:59:97:a5:3e:23:36:83:da:38:e3:
         19:90:cd:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnozl7oNju0BzdYb4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDUxOTIyMTcxMFoXDTI1MDgxNzIyMTcxMFowLzEtMCsGA1UEAxMk
MzQxYjU0N2UtZjUyMS00NjM1LWI0ZmQtZThkMWFlODQwODA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXbdL6PulyfIAKAVDTWNgUS+vtlGNgs7CcVJ
1awX/Q7Zy9IW1BLzKCrlMX0mjUj5BAgifTeiAieLFScBTZOU5CkoFqRnpPtb5kpu
bW2tyibnMNMDgzOZPazKGoC78Cd2ktVTQ+MzylEjZonWsqxf+R2sX6KGnseaF/0e
B7xW8NK/wmVP8NZ3LreqGc9Pih7KaBe8aX1Fr17QlbGzrNLGROisDJc0N7VWyLrv
u7ZlKvA22UoySHuZgQ2z7bhlRnJ4BPxxUbjrCKZSB1FqfJVPA2UD1MNbaNpR3/gs
D6Xk3YmNs71GuoxX1B5FR62Hmo/+Md/QnVzfEa962GfiHUPhLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHDXo+WJupJQJALPxWT00iHZawb0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYmRhNWNiMDktZTg2Yy0z
ZTA2LTkyZmYtMjBhZjJkMjA0ZjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnJQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABKwSRiJTTfKlyxzKNW4Z1+n+1ciyjBKjFyy9Kji6/N1dPKbYm3nYtd3
J5jWqi7tCpPnvYUm/0CYg6sAHk6Q64nhn5PN/bmY1Tao2YIpdL5FetFsqnBb6zeZ
9yjfuL5EZ13/r15UTv0quKjBwZskU6nrAGZoZGoy/64FfJVYHs2W+gzv6r/BUoHN
F/FlyAXfq6bAM4Jt2rVemzIh2nM2+YN3OnX5kgWaHUR9REKUkRznHGidjMGl/gcq
gccWjk7MhesLoi8633TYs8VIUt7rw4IIBwK+ceBxmuVEdpyY9riPLdt9Ya/VKPR3
0wqbi9kmSpcFWZelPiM2g9o44xmQzSM=
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:15:41 2025 by rpki-client