Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e7c2cf0a-a87f-327c-a549-ed075e5f7006.roa
File:                     e7c2cf0a-a87f-327c-a549-ed075e5f7006.roa (raw, json)
Hash identifier:          0ktaRzaPWDDolq1rW05eljnGGY+4BrsSrb9YRduZxsM=
Subject key identifier:   79:11:1F:BE:49:6D:F5:D4:61:52:3E:7C:A1:77:E6:88:F1:77:C7:C6
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A0F4C902F21A280821CA96E80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e7c2cf0a-a87f-327c-a549-ed075e5f7006.roa
Signing time:             Mon 02 Jun 2025 17:12:09 +0000
ROA not before:           Mon 02 Jun 2025 17:12:09 +0000
ROA not after:            Sun 31 Aug 2025 17:12:09 +0000
asID:                     401152
IP address blocks:        50.114.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0f:4c:90:2f:21:a2:80:82:1c:a9:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun  2 17:12:09 2025 GMT
            Not After : Aug 31 17:12:09 2025 GMT
        Subject: CN=e7c81d72-d4fc-4a65-a6d6-f8ec02851358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:86:3b:ea:c6:79:de:53:4b:a7:71:df:30:3d:
                    7a:fc:00:64:b2:1d:19:15:be:1e:f8:8c:0f:31:72:
                    1c:13:97:5c:21:cb:60:a4:e6:34:bb:b1:84:18:45:
                    02:ea:a4:15:27:43:99:a7:b7:f5:8c:bb:23:ba:8d:
                    51:1d:eb:78:b0:81:04:b5:98:83:a7:84:74:48:d8:
                    7f:bd:6d:b4:04:12:81:e1:94:82:9e:94:f5:d3:66:
                    e1:98:07:68:86:8d:56:0b:ed:fc:f9:1b:99:89:80:
                    7e:8a:41:2d:15:6a:1a:4e:d9:c2:bd:09:8c:b2:a7:
                    42:57:69:aa:79:5b:25:b2:92:60:1c:5a:31:00:a9:
                    33:38:92:90:e7:3a:ee:ca:48:c5:79:48:82:b6:62:
                    b5:73:2a:ac:83:9d:bc:b5:4e:e4:fe:b2:ab:dc:72:
                    94:97:db:67:6b:c4:36:e9:61:51:66:48:06:2c:3d:
                    a5:b3:14:c1:4e:8e:de:29:58:69:7e:99:b2:75:e6:
                    c4:58:52:25:b1:d0:83:48:2d:b6:27:b7:94:1c:83:
                    6e:6c:ab:ce:6b:f7:68:f8:a0:84:b0:53:a5:3c:61:
                    a3:2a:ad:56:17:04:fb:73:8b:23:85:5e:ce:0b:ae:
                    01:b6:ca:56:7b:06:70:e1:7e:56:19:a2:2e:e4:f8:
                    b5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:11:1F:BE:49:6D:F5:D4:61:52:3E:7C:A1:77:E6:88:F1:77:C7:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e7c2cf0a-a87f-327c-a549-ed075e5f7006.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:c2:d2:ec:1b:05:68:94:e9:ec:33:14:ca:c7:81:3c:09:a8:
         4b:d1:16:f9:8c:b5:09:b3:0a:09:b5:e8:71:ab:79:31:ce:87:
         b0:a6:38:84:c6:a6:be:4d:9f:60:56:93:03:a1:9f:5b:30:eb:
         7e:d7:b5:2b:d8:3d:22:7a:27:cf:41:11:05:bd:94:78:fe:27:
         9a:d9:1b:66:2d:13:fb:c5:6e:af:e6:7b:76:db:7b:8a:82:f4:
         2b:51:56:42:bb:55:02:ee:ea:ff:df:1d:87:bf:00:26:1d:89:
         a0:0b:5b:7b:dd:d7:2e:f7:ab:9b:23:ab:7e:9e:ff:13:1b:72:
         19:84:9b:b4:71:93:18:27:a4:03:4f:7b:60:ca:9a:2d:f8:01:
         b3:3d:90:7c:33:a4:60:a4:b2:d9:2c:49:be:3d:a4:81:e6:f7:
         46:e6:16:7c:0c:4d:17:8d:ae:31:37:11:22:5f:9f:46:d5:94:
         79:85:a9:aa:46:12:c2:67:dd:da:0d:3c:9d:94:3a:82:23:b4:
         84:81:4f:c0:49:ac:82:0c:22:1a:e7:16:fe:76:fa:86:0c:d2:
         38:0b:74:ef:91:cb:25:59:5a:0e:1c:19:61:4a:ca:a4:ed:ac:
         7f:48:a4:b7:b4:5f:15:c6:58:42:11:1f:ac:7b:88:a1:24:57:
         43:75:38:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:15:32 2025 by rpki-client