Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/081fbf4c-8605-3e5f-8491-88cc243610ad.roa
File:                     081fbf4c-8605-3e5f-8491-88cc243610ad.roa (raw, json)
Hash identifier:          iDAZ2brMm4OQ7HglFwBB00Rjmdh9PD2dJFqHKd/OYZ4=
Subject key identifier:   F4:2E:4E:85:72:E0:3C:36:69:F8:DA:39:90:DD:87:8C:5E:1F:BB:53
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584AB2212947B0B385E578980A80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/081fbf4c-8605-3e5f-8491-88cc243610ad.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     58061
IP address blocks:        50.114.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:21:29:47:b0:b3:85:e5:78:98:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=1643739d-196f-4a9b-87d1-a9015e9ab016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cc:2d:3f:b7:e4:df:d0:2c:2f:90:d2:81:fa:
                    33:9d:c6:26:a0:29:ee:b4:07:4c:b3:83:8e:ef:bd:
                    3b:87:4c:27:7d:76:a9:4a:2a:cb:0b:10:d9:f3:48:
                    d0:3b:ee:3d:ff:c5:f9:bd:c8:35:b3:f0:aa:94:7c:
                    33:85:ad:a4:47:46:52:a9:db:11:0b:d0:0e:29:82:
                    91:17:cb:ec:77:00:89:08:06:c0:ee:02:04:c8:d7:
                    81:0c:51:70:15:03:42:60:d2:45:7a:2b:06:b2:0c:
                    de:5d:22:17:af:57:6d:e4:f1:62:7e:75:8f:ca:55:
                    f0:99:10:b5:cc:ca:93:1b:34:4d:a1:27:7f:06:cc:
                    d4:14:d5:bb:4e:04:24:67:e9:81:c5:0b:1b:fc:28:
                    6d:c5:72:af:60:32:98:65:85:58:d2:1e:b3:7a:56:
                    bc:ed:8a:ea:2b:fe:b1:ab:2c:86:08:a7:70:91:2a:
                    2f:57:ca:80:9f:03:7e:76:69:76:24:c3:0c:d4:ac:
                    79:09:98:df:f4:bb:d7:9c:3c:3c:81:76:90:14:53:
                    16:ea:e7:96:ad:6d:c5:72:5e:38:a7:b7:67:a3:28:
                    b9:2d:fd:91:56:45:c8:dd:f3:ff:f0:7f:bb:4b:75:
                    d0:6c:47:98:ec:f0:b9:36:86:b1:eb:ce:bc:75:ca:
                    52:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:2E:4E:85:72:E0:3C:36:69:F8:DA:39:90:DD:87:8C:5E:1F:BB:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/081fbf4c-8605-3e5f-8491-88cc243610ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:3c:06:e6:72:27:ff:9b:63:6d:2b:c9:98:31:7c:81:82:d3:
         cf:c6:cb:f3:c9:79:92:d1:24:e2:d9:ee:65:6d:54:87:ac:51:
         3f:2b:a4:1f:c3:58:bb:e5:d4:47:ae:8a:2e:dd:9c:3f:0d:4f:
         9a:84:9a:a4:ae:7d:9b:ad:43:28:16:28:6b:04:87:12:13:ca:
         93:f8:9d:27:b0:9b:91:30:36:09:53:49:51:5b:8f:64:82:e7:
         09:ad:d3:71:7c:f4:9e:f8:3f:8b:02:af:ba:05:d7:f3:48:d9:
         7a:83:ef:a7:98:6d:9a:e1:f8:04:ab:67:a5:28:da:3e:4f:4b:
         95:e7:34:f8:10:3d:4b:d1:90:64:26:57:8f:5a:30:c6:bc:e7:
         8e:bc:7e:50:ff:63:04:b9:7f:54:ea:92:18:44:5f:ac:d8:20:
         7f:10:95:62:1b:27:d8:54:cb:72:5e:60:46:d4:7e:ba:80:e2:
         f0:8a:d6:4c:de:ef:83:9e:c3:c5:12:09:06:02:5a:a7:e8:d0:
         7a:9f:04:af:37:29:a6:95:0d:78:55:a2:4b:05:fd:10:8f:06:
         d0:95:c3:91:64:bf:20:bb:30:a9:b4:51:fa:1f:2d:40:69:8d:
         40:63:c2:7b:ac:19:99:e4:e7:8c:d2:e1:d7:89:3e:c8:1a:97:
         f1:53:d1:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyISlHsLOF5XiYCoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk
MTY0MzczOWQtMTk2Zi00YTliLTg3ZDEtYTkwMTVlOWFiMDE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cwtP7fk39AsL5DSgfozncYmoCnutAdMs4OO
7707h0wnfXapSirLCxDZ80jQO+49/8X5vcg1s/CqlHwzha2kR0ZSqdsRC9AOKYKR
F8vsdwCJCAbA7gIEyNeBDFFwFQNCYNJFeisGsgzeXSIXr1dt5PFifnWPylXwmRC1
zMqTGzRNoSd/BszUFNW7TgQkZ+mBxQsb/ChtxXKvYDKYZYVY0h6zela87YrqK/6x
qyyGCKdwkSovV8qAnwN+dml2JMMM1Kx5CZjf9LvXnDw8gXaQFFMW6ueWrW3Fcl44
p7dnoyi5Lf2RVkXI3fP/8H+7S3XQbEeY7PC5Noax6868dcpSlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPQuToVy4Dw2afjaOZDdh4xeH7tTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMDgxZmJmNGMtODYwNS0z
ZTVmLTg0OTEtODhjYzI0MzYxMGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnKqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIs8BuZyJ/+bY20ryZgxfIGC08/Gy/PJeZLRJOLZ7mVtVIesUT8rpB/D
WLvl1Eeuii7dnD8NT5qEmqSufZutQygWKGsEhxITypP4nSewm5EwNglTSVFbj2SC
5wmt03F89J74P4sCr7oF1/NI2XqD76eYbZrh+ASrZ6Uo2j5PS5XnNPgQPUvRkGQm
V49aMMa85468flD/YwS5f1TqkhhEX6zYIH8QlWIbJ9hUy3JeYEbUfrqA4vCK1kze
74Oew8USCQYCWqfo0HqfBK83KaaVDXhVoksF/RCPBtCVw5FkvyC7MKm0UfofLUBp
jUBjwnusGZnk54zS4deJPsgal/FT0UA=
-----END CERTIFICATE-----
Generated at Wed Aug 6 12:44:35 2025 by rpki-client