Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ddea79d0-94d6-3d5d-b18a-666605795d88.roa
File:                     ddea79d0-94d6-3d5d-b18a-666605795d88.roa (raw, json)
Hash identifier:          mrVyvfJaGga41QA3WJ7qHHJSrGJ/0Q63LOAMX3pKG9E=
Subject key identifier:   0F:32:89:FF:BA:3F:7C:EB:15:76:0A:FD:05:37:30:DB:57:B0:F4:8A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A0D6A9927B89583380ADAFC80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ddea79d0-94d6-3d5d-b18a-666605795d88.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     400175
IP address blocks:        50.114.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:99:27:b8:95:83:38:0a:da:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=be735d13-e106-4b14-8331-5819a09b3566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f1:c7:95:57:77:3a:6e:7e:fa:31:48:d1:31:
                    24:f9:b5:77:9a:bc:93:f3:b1:21:6a:df:3a:91:35:
                    21:e4:30:26:cf:a2:9a:95:01:3a:d2:da:97:72:36:
                    86:4c:0f:0b:a4:7e:b0:18:c5:75:5d:f1:c8:1e:7d:
                    03:d2:13:21:be:37:f5:d0:44:2c:5c:e7:ca:76:4c:
                    8d:53:c5:2e:35:31:a6:0a:4d:99:3c:26:29:fd:ed:
                    a6:8d:2c:e8:fb:31:30:b1:96:ef:77:c2:17:c9:dc:
                    a3:a0:3e:28:0d:2c:2c:15:0c:b1:24:84:cb:20:b5:
                    4a:cf:5b:b4:28:7f:66:fd:b4:43:aa:c0:f5:dc:50:
                    43:e6:b7:6e:2c:89:e1:01:c1:f4:62:5e:7f:aa:74:
                    02:8f:64:a4:f6:33:95:51:6e:a3:54:f5:cb:c3:a7:
                    fe:96:45:8b:69:62:11:70:6f:69:fd:dc:2e:2b:0c:
                    aa:31:f4:1a:2a:fc:f2:07:9f:16:ea:53:84:20:a7:
                    eb:06:2b:ae:67:fb:32:59:4a:5f:f8:7a:6c:0f:84:
                    2d:f4:84:35:01:f4:4c:85:33:74:a1:b4:11:e5:fb:
                    6c:b1:40:dc:f1:01:ec:16:31:61:a7:e7:5d:68:5b:
                    07:71:84:39:fa:a7:67:d8:24:d1:da:09:35:d9:7b:
                    b5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:32:89:FF:BA:3F:7C:EB:15:76:0A:FD:05:37:30:DB:57:B0:F4:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ddea79d0-94d6-3d5d-b18a-666605795d88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:97:50:4f:be:9b:67:5e:86:10:52:02:04:c5:5d:12:3c:f0:
         53:0a:56:a6:94:91:48:86:b7:cb:40:2c:7e:1a:c9:ac:7e:3d:
         00:61:5b:5d:68:c2:27:24:06:62:54:29:c6:b8:b7:78:02:45:
         53:58:e1:06:26:d4:74:d5:eb:85:ee:23:31:3c:69:7b:a2:68:
         37:32:f2:13:64:d2:56:8f:db:ff:61:ba:52:b4:23:de:9d:7a:
         ab:00:c7:64:bb:1e:da:6d:f0:e1:a8:49:7d:18:2a:88:4a:5e:
         70:6e:c7:d9:8c:2d:ab:1e:40:9e:fb:50:1f:db:57:8f:75:f8:
         dc:f0:31:a4:29:fd:dd:92:f1:a7:5f:20:e1:d8:42:be:29:3e:
         d9:cf:f7:a5:9c:ae:28:48:cf:c5:b7:f6:f0:79:9f:6c:09:46:
         40:ea:74:39:79:d8:d8:bd:e4:19:95:0e:09:b2:05:ea:d1:3b:
         02:f0:41:32:55:ce:e0:78:10:ad:f8:3c:ff:3d:c4:b5:78:2b:
         44:09:39:e5:3c:5b:2c:ef:33:f2:9c:36:b1:c6:88:77:3f:17:
         40:69:62:d8:03:a8:42:ba:96:b6:7b:6f:41:41:d0:7a:b4:ef:
         af:5c:e1:c5:b8:a3:3b:b0:89:7c:7f:63:68:90:31:d2:bf:4b:
         53:2d:cd:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:13:31 2025 by rpki-client