Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c4159806-354b-3f03-ab5b-d1f83450159a.roa
File:                     c4159806-354b-3f03-ab5b-d1f83450159a.roa (raw, json)
Hash identifier:          V5b8/mDsDPuSmiCjlAd+hC7MzaIOcF9bfHOns2BxJ3M=
Subject key identifier:   69:95:B2:97:FC:DB:B6:62:8C:1C:75:C7:B2:EE:4D:E3:94:87:47:FD
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A936B56D36783EEA0E8934800
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c4159806-354b-3f03-ab5b-d1f83450159a.roa
Signing time:             Sun 20 Jul 2025 01:00:50 +0000
ROA not before:           Sun 20 Jul 2025 01:00:50 +0000
ROA not after:            Sat 18 Oct 2025 01:00:50 +0000
asID:                     263812
IP address blocks:        50.114.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:93:6b:56:d3:67:83:ee:a0:e8:93:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 20 01:00:50 2025 GMT
            Not After : Oct 18 01:00:50 2025 GMT
        Subject: CN=7762c95c-7a9f-4f76-9e8e-d5c2682713f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c4:f1:64:65:36:a2:59:cd:ef:37:b8:5d:1a:
                    60:0d:84:79:18:d2:3f:78:4c:e3:0f:82:4f:04:be:
                    60:f7:98:12:d8:b0:13:f4:b3:16:cc:91:12:a1:0f:
                    5a:a4:b3:e3:ea:fb:b5:16:54:62:81:e3:b2:72:41:
                    42:ee:25:97:81:20:33:42:1f:88:c5:10:b3:98:e4:
                    8f:4d:70:74:58:23:60:26:a0:fe:22:5a:5b:8d:c2:
                    f6:2a:8b:dd:26:41:96:1d:12:71:0c:81:81:72:4e:
                    49:c0:5f:49:ba:85:14:d6:23:75:76:83:17:fe:1a:
                    12:04:57:be:cb:28:c4:a1:ee:af:86:09:ca:38:27:
                    9d:06:ad:7c:c1:cf:cf:03:4e:43:f0:ca:94:77:7e:
                    3f:48:16:42:da:75:42:a5:4a:89:77:d7:72:73:be:
                    5b:94:cd:b8:79:66:e5:5d:96:75:3c:41:75:26:0f:
                    de:03:62:31:c5:14:de:04:bd:07:3e:d8:0f:94:13:
                    f2:87:f1:1e:ef:bc:60:3b:5f:ec:10:32:7c:8a:25:
                    cc:91:94:aa:4c:7d:d5:59:a4:7f:73:49:0a:26:8d:
                    ae:e0:65:d4:0a:31:4f:59:cf:49:89:ab:f7:70:7b:
                    17:ed:9d:97:ad:7b:74:73:17:94:74:35:76:bd:27:
                    e5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:95:B2:97:FC:DB:B6:62:8C:1C:75:C7:B2:EE:4D:E3:94:87:47:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c4159806-354b-3f03-ab5b-d1f83450159a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:48:eb:81:b7:52:f7:de:37:e8:2e:4c:fa:96:39:67:d3:cd:
         43:e1:22:3b:83:78:5f:41:46:19:d8:21:42:6f:52:7b:06:1f:
         a8:40:92:dd:4e:52:80:79:5d:eb:09:d4:80:e2:b5:01:e9:f1:
         d3:1c:a0:e9:60:c6:1a:d9:43:03:0d:d9:4a:f5:82:06:d9:52:
         d4:c0:9f:91:04:76:4c:91:b0:e0:cb:aa:04:30:0e:36:73:71:
         f2:c6:7a:a8:29:d1:57:8d:b7:cd:d2:19:9f:6d:c6:23:87:7d:
         9c:a4:ea:8f:7a:c1:5b:27:9a:e5:a5:07:c8:6e:37:08:a4:65:
         01:ec:bc:ce:73:5b:49:21:c0:79:3a:cb:5b:7d:f0:49:d1:b2:
         36:a1:30:1d:4b:56:e6:d5:de:aa:4c:93:d1:39:48:2b:a4:6f:
         b1:67:bc:1e:d7:64:31:0e:fd:92:2d:31:3e:b5:01:3e:c2:ee:
         00:61:2a:22:24:99:be:e0:95:ff:23:88:0c:dc:08:a6:76:2c:
         93:b8:34:ad:30:a1:1c:b2:91:ec:e7:8f:e9:b8:8a:d1:ec:6c:
         01:88:79:9d:de:42:c1:e4:e3:c9:ce:f0:bc:8a:b1:01:ae:35:
         ab:eb:de:4e:d7:96:c1:95:14:80:d3:4a:c7:d7:56:34:b8:c5:
         18:8e:f0:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqTa1bTZ4PuoOiTSAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDcyMDAxMDA1MFoXDTI1MTAxODAxMDA1MFowLzEtMCsGA1UEAxMk
Nzc2MmM5NWMtN2E5Zi00Zjc2LTllOGUtZDVjMjY4MjcxM2YxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMTxZGU2olnN7ze4XRpgDYR5GNI/eEzjD4JP
BL5g95gS2LAT9LMWzJESoQ9apLPj6vu1FlRigeOyckFC7iWXgSAzQh+IxRCzmOSP
TXB0WCNgJqD+IlpbjcL2KovdJkGWHRJxDIGBck5JwF9JuoUU1iN1doMX/hoSBFe+
yyjEoe6vhgnKOCedBq18wc/PA05D8MqUd34/SBZC2nVCpUqJd9dyc75blM24eWbl
XZZ1PEF1Jg/eA2IxxRTeBL0HPtgPlBPyh/Ee77xgO1/sEDJ8iiXMkZSqTH3VWaR/
c0kKJo2u4GXUCjFPWc9Jiav3cHsX7Z2XrXt0cxeUdDV2vSfl/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGmVspf827ZijBx1x7LuTeOUh0f9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYzQxNTk4MDYtMzU0Yi0z
ZjAzLWFiNWItZDFmODM0NTAxNTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnJrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACpI64G3UvfeN+guTPqWOWfTzUPhIjuDeF9BRhnYIUJvUnsGH6hAkt1O
UoB5XesJ1IDitQHp8dMcoOlgxhrZQwMN2Ur1ggbZUtTAn5EEdkyRsODLqgQwDjZz
cfLGeqgp0VeNt83SGZ9txiOHfZyk6o96wVsnmuWlB8huNwikZQHsvM5zW0khwHk6
y1t98EnRsjahMB1LVubV3qpMk9E5SCukb7FnvB7XZDEO/ZItMT61AT7C7gBhKiIk
mb7glf8jiAzcCKZ2LJO4NK0woRyykeznj+m4itHsbAGIeZ3eQsHk48nO8LyKsQGu
Navr3k7XlsGVFIDTSsfXVjS4xRiO8K8=
-----END CERTIFICATE-----
Generated at Wed Jul 23 13:59:01 2025 by rpki-client