Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/21d602f7-25d1-3403-8c2e-bb833c374997.roa
File:                     21d602f7-25d1-3403-8c2e-bb833c374997.roa (raw, json)
Hash identifier:          tyqe+njVf0g/jRFZ/GlbQMDJosYNGl7jUIvfuNEujmU=
Subject key identifier:   EC:E2:02:23:97:FB:E2:AE:80:89:AA:B6:91:83:3D:8F:B7:E8:F6:95
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A794DFF6214FCDBE9742D06A0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/21d602f7-25d1-3403-8c2e-bb833c374997.roa
Signing time:             Thu 10 Jul 2025 16:30:44 +0000
ROA not before:           Thu 10 Jul 2025 16:30:44 +0000
ROA not after:            Wed 08 Oct 2025 16:30:44 +0000
asID:                     213823
IP address blocks:        50.114.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:79:4d:ff:62:14:fc:db:e9:74:2d:06:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 10 16:30:44 2025 GMT
            Not After : Oct  8 16:30:44 2025 GMT
        Subject: CN=d2c24b01-df38-4a4e-b161-40e45e863427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:28:e3:0d:6e:43:d7:30:6f:06:5b:f2:25:f8:
                    c8:9f:ca:99:32:4a:27:70:12:97:95:5e:da:e0:6c:
                    e2:44:1f:4f:ab:4a:10:b4:12:e5:8c:6e:96:88:87:
                    95:1c:8c:36:fc:ec:ae:97:49:44:78:2a:e4:35:f4:
                    88:bb:da:2e:3d:27:38:b0:5e:17:64:25:15:83:da:
                    9a:57:fa:6a:c2:41:7f:35:2d:44:ce:f5:90:58:8b:
                    3b:64:d4:31:12:25:86:d7:97:2d:55:da:99:94:69:
                    d1:a1:3e:f1:59:3e:32:35:c7:03:cf:53:38:fd:eb:
                    94:ca:5d:26:0a:8f:99:50:7b:ca:6c:06:e1:f8:4c:
                    fe:29:1d:07:e6:08:fb:99:aa:22:58:ff:1f:db:7b:
                    7e:02:11:65:49:ec:fb:1a:d9:ee:1f:76:d5:4c:52:
                    23:2d:4d:47:26:f3:7c:57:87:41:00:4f:dc:9b:8f:
                    10:99:f5:25:83:3d:a1:57:7c:4d:13:f0:b4:63:33:
                    0a:43:e5:06:b1:9d:08:cb:0f:85:5d:25:68:82:b4:
                    7a:c3:4f:32:50:2d:02:91:2b:f6:10:9a:e0:71:53:
                    17:4a:4d:7c:72:ef:1d:bc:57:58:1a:21:85:3f:84:
                    c8:ee:53:15:7b:7a:e1:36:12:66:cd:f3:08:2e:c9:
                    e1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E2:02:23:97:FB:E2:AE:80:89:AA:B6:91:83:3D:8F:B7:E8:F6:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/21d602f7-25d1-3403-8c2e-bb833c374997.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:09:69:d4:7e:ce:d5:4c:6f:ac:84:8e:cc:86:2b:1c:33:8a:
         1a:1a:f7:8c:4d:d9:60:70:e2:d2:34:eb:cb:15:44:a9:9b:2a:
         87:2a:bd:15:d8:18:25:29:b8:56:31:58:40:79:23:0f:0c:82:
         82:f1:7d:a5:bc:9a:d1:91:aa:b6:0b:79:f5:09:6c:ea:ae:ad:
         bb:b0:87:1f:96:12:bb:46:05:6e:95:db:82:72:60:05:af:79:
         02:3b:78:82:c7:a4:90:56:8a:3c:b7:d9:5e:75:45:29:95:65:
         66:c5:53:a7:a2:ff:33:93:e9:4a:4c:2b:30:ae:48:1b:7e:82:
         dc:88:7d:f6:a4:8a:82:9d:4f:83:47:d4:94:0b:66:97:2b:03:
         cd:2a:5b:45:b9:52:06:12:70:49:bb:c7:ce:b4:07:6a:51:32:
         5d:76:bb:8e:c0:0b:a7:21:56:f6:36:c4:a5:3f:5a:5e:d9:7a:
         6e:0b:54:5c:f4:74:47:e0:af:a5:b0:e7:a3:5d:08:e3:5f:c6:
         ed:24:53:68:dc:bc:fd:4b:2d:86:e9:cf:60:26:a0:83:fd:45:
         a3:ef:64:49:64:d2:89:ae:e9:58:2b:0d:2d:e4:c5:4d:1c:a2:
         f9:f4:63:1e:24:42:3d:bd:a9:17:ce:7e:32:f1:4e:ca:b6:75:
         f5:78:55:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:24:20 2025 by rpki-client