Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fd8bac9c-0096-358d-80de-b7e3a9a160ad.roa
File:                     fd8bac9c-0096-358d-80de-b7e3a9a160ad.roa (raw, json)
Hash identifier:          irQGu4RTBXGzBBhxsQHU7A9KGO+kaG4US8PGSwvtWlY=
Subject key identifier:   FD:DD:A6:2B:E8:B4:71:A7:B3:DB:23:FC:D4:B7:71:C9:CA:52:39:D7
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584AE8913D272E2E0905553E9940
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fd8bac9c-0096-358d-80de-b7e3a9a160ad.roa
Signing time:             Tue 19 Aug 2025 13:00:40 +0000
ROA not before:           Tue 19 Aug 2025 13:00:40 +0000
ROA not after:            Mon 17 Nov 2025 14:00:40 +0000
asID:                     22168
IP address blocks:        50.114.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:91:3d:27:2e:2e:09:05:55:3e:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 19 13:00:40 2025 GMT
            Not After : Nov 17 14:00:40 2025 GMT
        Subject: CN=a14a6044-5d01-4531-aa3f-1765a07953a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e2:0f:b5:22:1e:ad:4a:f2:7a:c8:aa:40:17:
                    8f:09:c8:31:b6:36:ae:ec:9d:0c:8e:72:eb:90:2b:
                    8e:fc:ea:19:8d:2f:b5:f0:06:43:ac:91:fc:61:e2:
                    1c:e4:54:e5:77:fc:22:35:ff:6f:06:d4:cd:42:58:
                    fa:17:e0:10:0b:4c:8f:ff:45:14:31:cf:d2:bf:70:
                    e9:83:c7:aa:92:88:dc:d3:08:2e:bb:72:fa:7c:a9:
                    2e:3a:9e:a1:3e:a6:42:61:df:de:6c:dc:7b:c2:89:
                    56:2c:85:6f:13:a6:58:28:a3:f1:de:94:c0:2b:8b:
                    4e:c2:91:52:de:26:3f:04:58:9d:98:0d:e9:91:f3:
                    2a:68:70:0c:a6:1b:26:77:90:fe:8c:d3:f0:66:23:
                    c8:8d:f0:d9:3c:54:1c:2e:c2:09:32:5f:63:1b:d1:
                    62:8a:89:96:5a:02:34:08:58:ed:40:2b:47:5d:75:
                    ae:79:54:42:87:32:ef:95:7f:b1:23:9a:b7:50:42:
                    7c:77:d0:cf:14:63:5e:20:fc:51:1c:05:bc:24:1c:
                    34:e7:2f:48:f0:a9:8b:04:14:c3:32:58:ef:f8:8d:
                    0a:55:4b:38:cd:d1:45:1b:1b:ee:ea:64:0a:7e:c2:
                    96:c3:2a:a2:ad:4d:0f:19:7c:37:33:de:ae:c8:66:
                    11:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:DD:A6:2B:E8:B4:71:A7:B3:DB:23:FC:D4:B7:71:C9:CA:52:39:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fd8bac9c-0096-358d-80de-b7e3a9a160ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:81:c7:68:68:e0:6f:86:0c:ac:8a:34:8e:8b:22:ad:20:fb:
         1f:91:ee:de:1e:53:0d:4e:da:7d:cf:9d:d3:7a:93:53:7a:ec:
         02:9e:ef:03:8e:e8:0a:eb:58:2c:9c:d9:46:8b:38:07:22:14:
         a8:20:ea:11:42:80:e7:9c:47:06:b7:07:c5:cd:14:25:a6:da:
         6d:65:98:c6:79:42:fe:cb:dd:07:b7:2c:18:71:03:46:70:97:
         1d:ef:79:28:27:0b:50:97:c1:26:a8:79:d8:b9:e8:14:39:5c:
         d9:45:6c:77:2c:d8:ed:f3:87:35:ba:0e:dd:51:70:09:aa:99:
         ec:af:71:cb:cb:44:eb:c7:46:f3:36:02:76:95:24:65:f8:9b:
         ed:83:37:5a:65:84:55:8c:87:47:6f:e7:74:31:14:93:b4:cb:
         ca:0b:a1:48:db:20:77:67:fe:6d:48:65:c1:b3:b5:3a:6f:37:
         9a:5f:c6:e6:62:aa:09:54:c3:57:58:ca:20:6e:11:0c:69:47:
         29:24:c0:47:51:aa:2e:4e:85:d5:b4:31:c5:78:7e:1b:45:78:
         d6:65:bc:85:62:d8:eb:d9:fd:86:44:cf:16:77:89:9d:0a:f7:
         5a:cc:b2:38:41:eb:a7:56:68:1f:f0:59:80:9d:36:2c:0f:eb:
         c9:e2:ca:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:13:50 2025 by rpki-client