Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f2d18098-ac4d-3464-b2cb-bed1369b824f.roa
File:                     f2d18098-ac4d-3464-b2cb-bed1369b824f.roa (raw, json)
Hash identifier:          xzjEO4F127IZBNSsHFfykvsPcHucIOrSX9lVPFv33aA=
Subject key identifier:   BA:BA:F5:C0:80:8A:2F:72:6B:BE:E9:00:FC:0F:24:69:7A:F7:3B:67
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848E59BBAED4387B533D8AB2900
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f2d18098-ac4d-3464-b2cb-bed1369b824f.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     401152
IP address blocks:        50.114.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:ba:ed:43:87:b5:33:d8:ab:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=553050dd-0656-488e-9053-d16226d0e188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9b:3e:1c:f5:ac:13:c9:79:97:3a:68:2c:33:
                    fd:39:df:c6:dd:d1:42:4e:23:de:f5:65:ff:a9:d7:
                    f3:45:56:c0:1f:6e:6d:53:f4:fe:61:a9:93:f4:c6:
                    8b:5e:a4:d0:27:0a:82:f1:1f:56:a1:8b:8a:61:d5:
                    d7:7f:56:b5:20:60:ce:ef:41:ec:39:4b:8e:07:60:
                    e1:7b:8f:a1:ef:25:5e:5d:80:2c:49:26:b4:ed:6b:
                    66:16:57:94:6b:1c:18:21:42:34:c1:96:a8:0d:9d:
                    46:9f:f6:19:86:b3:e7:58:7e:b9:89:4c:90:0d:bf:
                    02:d9:93:b2:71:56:e7:fc:24:63:63:a9:57:be:0b:
                    8c:9e:06:48:c6:d2:5c:d5:65:b2:e4:e8:51:a7:7e:
                    3b:63:a5:46:bb:0b:dc:1c:8c:f7:6d:10:ae:91:66:
                    b2:97:17:48:ca:f5:b6:93:bc:3d:66:eb:f5:6e:cd:
                    7d:67:f2:91:8a:8e:a8:f5:86:c3:f2:da:c8:c6:8b:
                    e2:f1:2a:42:ad:c5:ff:00:42:f4:32:f1:95:6a:74:
                    9b:7b:81:1a:c5:5d:a8:08:7c:75:6a:56:ee:df:a1:
                    f6:d0:9b:c3:36:fe:39:0a:3d:1a:44:7f:07:5f:e5:
                    d7:8a:7f:51:c6:23:7a:4a:9e:bc:e7:79:77:32:23:
                    7a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:BA:F5:C0:80:8A:2F:72:6B:BE:E9:00:FC:0F:24:69:7A:F7:3B:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f2d18098-ac4d-3464-b2cb-bed1369b824f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:be:68:0f:c1:49:77:ba:8f:bf:8c:ff:ba:1e:8f:95:ad:bf:
         e3:be:64:6c:35:80:eb:97:02:26:e9:93:40:0e:61:b5:fd:e6:
         76:d3:a7:50:00:d1:35:6a:00:97:17:18:df:1a:30:20:fd:87:
         a3:bd:f4:15:40:86:fe:52:d9:e6:9a:81:c8:e4:c6:81:ec:f6:
         be:90:21:94:21:e1:be:ef:f6:b3:43:19:ae:5d:27:5b:1a:d6:
         b8:52:99:bf:42:0b:d4:d5:79:d3:30:fd:eb:f0:9c:14:9c:c7:
         0a:a2:cc:a1:d8:c2:25:c3:18:a1:71:85:84:39:b5:9f:ab:d0:
         1c:29:80:a7:1e:17:06:75:27:3e:7e:63:bb:b7:99:a6:af:7b:
         b6:2d:ad:d3:99:10:06:4f:41:48:ab:88:2e:6f:79:f5:cd:34:
         6e:0d:05:21:10:b2:8d:82:36:5e:46:7d:dc:da:88:03:2e:23:
         28:23:3c:4f:ec:1b:f8:01:48:c1:53:32:12:03:76:01:80:52:
         de:ec:f7:a9:92:b3:ed:aa:cf:b0:09:6b:9e:73:21:37:7b:55:
         a5:6c:a4:10:3c:74:b5:ff:26:a0:4a:ff:be:46:8d:b2:02:07:
         b7:c9:da:2e:3b:74:94:92:fb:45:49:bd:c0:74:16:12:dd:38:
         1c:8d:cc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:16:09 2025 by rpki-client