Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c4885bbf-2b6d-31ed-aed6-290788e229f2.roa
File:                     c4885bbf-2b6d-31ed-aed6-290788e229f2.roa (raw, json)
Hash identifier:          BggciETWnJX9ERm3gNQ3mNRLzn4PhSQMItQuxo9fy3g=
Subject key identifier:   66:98:91:02:08:78:51:C0:A4:D8:2A:0B:73:D7:A0:38:2E:F6:12:A3
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849D80538BE4C97A7371060A270
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c4885bbf-2b6d-31ed-aed6-290788e229f2.roa
Signing time:             Tue 13 May 2025 21:58:57 +0000
ROA not before:           Tue 13 May 2025 21:58:57 +0000
ROA not after:            Mon 11 Aug 2025 21:58:57 +0000
asID:                     7385
IP address blocks:        50.114.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:05:38:be:4c:97:a7:37:10:60:a2:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 13 21:58:57 2025 GMT
            Not After : Aug 11 21:58:57 2025 GMT
        Subject: CN=657247a2-2774-4a7f-90df-c678db8460d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:62:6c:c6:ed:2a:df:bd:1b:08:ca:e1:03:97:
                    1f:e8:ce:82:2e:8e:6d:ce:f7:5e:9e:c6:a8:c0:8c:
                    70:dd:81:85:61:1d:3c:81:d5:6e:d6:62:7c:59:24:
                    af:6d:0a:61:70:42:85:e0:ca:87:f7:18:7f:6c:6a:
                    8a:f0:5a:ea:86:3c:e6:bb:17:15:ed:86:ff:22:22:
                    fe:1e:e3:ab:19:60:be:19:27:4b:06:c8:5f:cc:9d:
                    8a:11:dc:b2:e3:b9:d4:46:94:7e:63:ca:64:1c:94:
                    ef:de:7e:6d:20:7a:1a:86:dc:7a:d6:64:28:44:75:
                    52:8b:1b:59:0a:bb:c4:64:b5:aa:0f:ba:a9:8c:68:
                    fb:82:bf:04:7c:d2:3e:5a:3d:49:09:fa:f2:85:38:
                    9a:a0:76:0c:fc:39:5f:20:08:62:9b:b1:30:a1:34:
                    e6:0b:f3:c2:05:2d:2e:a5:2d:37:20:c1:b4:11:12:
                    46:a0:31:ec:da:fc:7e:2a:e4:ac:e7:49:53:d0:13:
                    44:6c:4e:0b:04:c9:a2:6e:15:99:97:9b:24:dc:4b:
                    f8:d3:59:ca:4d:09:0b:94:63:48:63:74:39:1e:f3:
                    d8:31:4a:65:ff:56:65:6d:e1:9f:bc:7d:26:05:44:
                    83:ad:c6:ee:8c:b5:2f:6e:06:89:3e:e7:74:9c:b5:
                    04:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:98:91:02:08:78:51:C0:A4:D8:2A:0B:73:D7:A0:38:2E:F6:12:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c4885bbf-2b6d-31ed-aed6-290788e229f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:1a:e7:58:f7:45:ec:1d:34:07:f3:a2:23:bf:38:21:9c:aa:
         22:d7:59:4b:1e:bd:c2:41:42:83:e7:93:e3:d8:cc:10:68:c8:
         c3:b6:49:35:6a:58:f9:05:09:37:c3:56:56:d0:cc:28:07:6d:
         90:a1:90:47:17:26:47:1d:e9:80:5d:e1:8d:8c:44:9f:08:4a:
         53:d6:f5:bb:62:4b:a4:e5:99:48:80:f1:d2:ec:f4:ee:f4:e7:
         d7:ea:2d:09:f8:36:7e:b0:ca:2f:79:89:00:66:f9:6a:a9:a5:
         3f:9d:0e:40:f9:fa:7d:61:ab:f2:1d:36:06:88:11:a4:40:6f:
         46:1a:5e:07:ee:15:a9:c0:81:38:41:67:c8:95:29:9d:68:0f:
         ea:58:3b:77:de:88:4e:cc:5a:65:49:5d:6b:28:45:b7:06:27:
         e8:fb:ec:73:65:71:b6:08:bb:53:23:cb:e2:d7:cc:ed:5b:c9:
         6f:cd:85:40:23:c5:1d:f8:96:36:d6:f9:22:81:f7:8f:d2:1c:
         c9:30:73:f6:77:a0:7f:8e:92:b4:96:59:6c:96:a3:ba:0c:56:
         41:21:5b:e2:b9:dd:96:79:4b:92:a7:45:2f:b9:62:6d:8f:c5:
         c2:fc:7a:ca:ff:79:f1:7d:ba:f3:d3:cc:13:64:6f:94:f9:80:
         35:85:69:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:19:53 2025 by rpki-client