Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2830c347-bd28-363c-b7d5-871d2fd6aec6.roa
File:                     2830c347-bd28-363c-b7d5-871d2fd6aec6.roa (raw, json)
Hash identifier:          kpzRZ3Ccu+F1ugZsNb90UMP9C7LD5guGoiSZ6w9taQs=
Subject key identifier:   67:5E:97:4F:01:4F:6A:89:0C:A9:ED:F2:7B:0A:B7:17:00:BC:6D:2F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A7780899388F96A0823ACF7C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2830c347-bd28-363c-b7d5-871d2fd6aec6.roa
Signing time:             Thu 10 Jul 2025 01:00:51 +0000
ROA not before:           Thu 10 Jul 2025 01:00:51 +0000
ROA not after:            Wed 08 Oct 2025 01:00:51 +0000
asID:                     7018
IP address blocks:        50.114.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:77:80:89:93:88:f9:6a:08:23:ac:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 10 01:00:51 2025 GMT
            Not After : Oct  8 01:00:51 2025 GMT
        Subject: CN=8cad2f10-6710-4551-8c20-327d48baaea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ef:74:d8:95:ec:f9:05:fc:e7:b2:3e:5d:87:
                    b9:6b:aa:bc:61:7e:ed:38:41:0e:e7:4c:f1:df:10:
                    c7:e6:d9:7a:4c:81:61:a1:48:06:37:40:83:35:41:
                    df:6f:da:e1:f5:74:97:22:8d:3f:35:ef:3d:c8:43:
                    03:c6:27:7b:8f:21:0a:77:6e:a9:ef:9e:f3:63:23:
                    59:7a:78:13:ba:6c:bb:6a:f4:fc:16:24:72:60:18:
                    db:f7:05:a3:b1:22:4b:90:b1:ba:0d:5d:0f:c5:68:
                    28:98:20:9d:f3:c8:ba:35:aa:dd:12:ea:e9:f4:de:
                    0b:f9:08:ff:11:42:b6:dd:36:cb:5b:52:9d:9d:86:
                    13:ef:ad:d6:f2:05:4d:e6:94:2a:63:48:c3:c3:88:
                    ed:c8:fd:be:e5:3d:81:57:a1:d5:53:40:3e:61:ae:
                    69:64:40:85:82:01:16:c0:1e:80:5f:d0:64:5f:0a:
                    d4:93:de:b9:76:04:2f:65:a9:ed:b5:f9:41:64:db:
                    94:d0:36:f2:6e:f8:91:b3:12:97:ee:c8:aa:f5:bc:
                    68:1e:cc:cc:d4:a6:44:7d:7c:8d:e3:27:9a:11:d4:
                    ba:74:a8:dd:83:02:de:d7:84:29:df:7d:c0:c9:7e:
                    1f:54:16:d2:8b:74:6d:32:1e:73:2c:56:8b:d1:41:
                    30:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:5E:97:4F:01:4F:6A:89:0C:A9:ED:F2:7B:0A:B7:17:00:BC:6D:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2830c347-bd28-363c-b7d5-871d2fd6aec6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:33:6c:9a:fb:57:eb:61:83:7f:b0:b0:89:d0:7e:93:98:ed:
         35:99:af:ee:4f:04:80:be:35:da:91:9c:a3:e0:01:fc:f0:1c:
         c8:ad:ed:65:f9:d7:a6:16:94:8f:6a:49:c2:1b:5f:3a:63:a9:
         3f:a3:b1:8c:e9:53:8b:b1:d6:ac:89:5f:4a:37:e5:b3:c8:c0:
         12:57:d5:58:89:ff:a6:ef:f4:6a:de:63:0b:b3:c7:c7:2e:72:
         05:e9:71:cd:ed:05:25:63:dc:e3:3d:c9:b3:b0:e7:8b:29:ea:
         c0:dc:9b:db:53:48:99:1d:f4:91:df:d8:d0:e6:c1:ae:fc:e4:
         98:76:c0:5c:eb:68:e9:4f:29:56:76:7f:ed:cf:b7:f8:26:8c:
         04:22:ca:8f:31:3d:9b:cf:c2:a9:d7:a8:86:c4:f5:2d:30:bf:
         39:96:06:bc:1f:b8:81:15:e6:a0:62:bc:3b:e9:0b:52:37:c0:
         ee:0a:aa:b0:45:5b:9c:c2:da:bb:e1:ff:3b:29:e5:03:1e:75:
         73:f4:27:c6:d0:cf:19:29:79:f8:bf:b5:d7:a8:74:d1:cd:39:
         83:55:12:2e:be:a2:d0:9c:8d:77:47:50:35:32:b5:5d:ea:82:
         15:1a:ca:24:e3:8a:26:f9:91:ed:c9:e1:e7:71:4d:7d:96:5f:
         06:b6:57:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:02:27 2025 by rpki-client