Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2830c347-bd28-363c-b7d5-871d2fd6aec6.roa
File:                     2830c347-bd28-363c-b7d5-871d2fd6aec6.roa (raw, json)
Hash identifier:          8NC4mTEWksh5WHdj+6CbdUGRMKHXYkd/1sc8tIizxJ8=
Subject key identifier:   14:32:50:86:60:BC:95:97:75:5E:DD:27:84:1C:63:D0:0A:62:03:44
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858499829CD65BDAF8866F4A3B700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2830c347-bd28-363c-b7d5-871d2fd6aec6.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     7018
IP address blocks:        50.114.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:cd:65:bd:af:88:66:f4:a3:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=91fb3efd-fc91-4d16-8d6e-ec920bf507bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5b:97:fd:d3:83:c9:6b:7f:a4:7f:a5:b2:7e:
                    a4:fc:31:59:82:08:f7:f8:82:38:d9:6b:ce:4d:39:
                    a3:22:16:7d:bb:58:13:84:04:38:a5:e7:b2:41:b5:
                    ae:59:48:79:92:e2:c7:e4:ab:8a:b8:37:9f:15:6c:
                    a9:f4:96:00:87:b7:0f:87:20:9f:40:3b:dd:0f:4e:
                    0d:3f:a6:83:ca:76:ba:07:9c:ec:f0:b9:47:7c:b5:
                    88:a0:38:b8:cc:60:25:3f:eb:21:50:1b:10:fc:0b:
                    a9:7c:5f:fc:52:8c:70:36:4b:cd:e7:4d:21:11:05:
                    84:ad:4a:90:1c:10:c5:c7:4b:06:be:fe:50:c8:e6:
                    07:e8:2b:18:ef:ab:f1:e2:a6:3b:01:1c:63:da:05:
                    c4:77:61:1a:e9:b6:64:61:19:91:d1:f5:7b:2e:26:
                    b2:5b:fb:5d:a8:be:87:74:94:ee:fc:4f:25:13:5c:
                    d7:2a:e5:af:6f:62:93:fd:90:11:21:5d:22:25:90:
                    5e:22:16:40:72:bd:fa:e5:29:bb:34:dc:38:30:26:
                    23:d5:43:4a:f7:5b:7e:0d:32:97:43:c7:10:ae:ff:
                    d5:1b:ad:9f:c6:75:28:40:e6:ba:dc:4f:12:5b:b7:
                    d7:7e:f1:e5:06:30:01:f8:7f:ad:bb:34:67:60:24:
                    86:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:32:50:86:60:BC:95:97:75:5E:DD:27:84:1C:63:D0:0A:62:03:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2830c347-bd28-363c-b7d5-871d2fd6aec6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:64:b3:75:a8:f5:e0:03:53:96:a9:98:81:d3:41:ad:41:56:
         8c:bf:db:00:f7:0c:86:15:04:58:07:c0:a4:26:49:99:63:c0:
         96:b6:04:c0:16:11:45:0d:5b:7f:8d:13:9f:3b:66:9d:2f:c0:
         54:d6:d7:1d:9f:ca:fe:83:24:2d:46:cd:90:94:8c:28:42:70:
         4a:ba:d5:6d:0d:6c:63:54:1a:e2:42:6c:ab:39:57:e3:ee:43:
         e1:8d:95:3c:8b:26:73:6f:33:6a:8a:ee:b1:86:03:94:22:5b:
         3d:28:c8:54:da:1d:3b:6e:00:37:8c:8c:31:0d:38:5e:e7:e8:
         d9:6c:b6:72:3d:d9:40:7a:9a:b8:91:44:36:a8:6b:07:92:f5:
         c7:cf:c1:32:b9:9b:99:2f:be:24:7f:4a:c5:57:7b:b4:a7:48:
         07:df:4f:e3:85:e8:36:6e:3a:0d:f9:f1:86:57:c2:57:eb:67:
         b7:77:e7:2f:f3:c5:a2:8f:ba:4f:01:cc:35:3a:a2:50:07:e5:
         8f:ba:74:8a:a6:e0:6e:db:24:07:e7:75:16:e1:07:ee:b9:54:
         71:6e:f5:05:38:aa:b0:db:3c:53:50:d6:1f:3f:0f:60:c1:9e:
         d5:0a:b1:80:6f:21:82:67:e1:01:68:41:a7:5f:de:f8:1f:1f:
         c9:95:f7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:04:47 2025 by rpki-client