Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2e3d2949-a32f-3f8d-bd8f-2369d0399017.roa
File:                     2e3d2949-a32f-3f8d-bd8f-2369d0399017.roa (raw, json)
Hash identifier:          YXIkfZmU5kgTdUkvhs/UJfUOwH16wIabTrG/huvlRAw=
Subject key identifier:   AE:A0:68:34:76:26:3B:1A:2E:96:93:84:D6:4D:F2:37:B8:18:6F:57
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584988CF2DD33CD3F03B4811FA60
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2e3d2949-a32f-3f8d-bd8f-2369d0399017.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     21859
IP address blocks:        50.114.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:2d:d3:3c:d3:f0:3b:48:11:fa:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=6b3aadc0-47ac-4a53-b393-d3b911d861de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:92:b8:32:22:78:62:a1:12:5d:d5:40:5a:4f:
                    56:15:50:4a:7d:35:52:0f:70:ff:99:86:8f:49:0a:
                    d1:1f:a3:5d:be:08:08:f4:f9:43:b2:a1:af:45:cf:
                    5c:b2:15:3e:02:a4:d7:dc:cb:e5:64:c6:ca:60:1b:
                    aa:bc:a9:9a:91:ba:34:4f:6d:81:d4:58:d8:96:c5:
                    1a:09:4d:d0:67:7d:4d:0d:12:45:b4:75:13:c0:da:
                    c9:21:b5:59:b1:ff:fc:bf:05:77:df:5b:02:cc:a9:
                    8b:06:81:5e:0c:4c:49:b8:79:b5:d1:fe:f1:42:c0:
                    58:f4:9c:91:f6:8e:37:a8:f9:bf:18:ad:b6:67:2f:
                    8a:57:75:40:8b:87:e5:36:b6:2c:a0:04:b0:c3:8e:
                    d1:4f:4c:ee:50:0e:d4:f1:d0:41:4a:9d:c5:42:8b:
                    33:86:40:7d:35:58:7a:75:59:3a:24:5b:0d:81:e2:
                    1d:ff:3f:40:9f:74:d9:d2:83:03:33:6d:b7:35:9b:
                    b6:fa:b8:2d:84:c0:b5:86:76:80:2a:99:8f:d3:06:
                    49:4b:2b:b5:76:52:e0:f5:18:4e:f0:d9:20:0d:3c:
                    db:91:b2:43:2c:0a:2b:c6:86:b7:8f:7b:e7:9e:12:
                    13:08:7d:ab:8c:d5:85:83:3d:ca:91:58:51:58:8d:
                    e0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:A0:68:34:76:26:3B:1A:2E:96:93:84:D6:4D:F2:37:B8:18:6F:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2e3d2949-a32f-3f8d-bd8f-2369d0399017.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:97:c5:2d:5c:78:90:7b:42:e3:a0:29:19:f1:5a:65:f4:8b:
         c6:7d:9c:77:fc:a7:22:aa:08:53:24:e6:bb:06:2b:c6:4c:1d:
         3a:ef:8f:f3:4b:35:f8:0d:cc:e9:a7:d8:b2:c1:00:32:16:15:
         26:ac:a3:8a:a4:59:1c:f6:d4:6a:10:0b:b4:25:3d:d5:cf:08:
         d2:e0:27:4d:ac:7d:29:6c:44:03:5f:12:da:35:7f:66:fc:71:
         e2:58:c7:13:9e:a9:04:0f:e5:ae:c9:fc:22:c0:c6:a7:12:7b:
         14:9b:c9:50:5f:9f:d7:2b:12:55:6c:18:70:cc:ad:2e:84:dd:
         b1:0b:2f:31:f8:dc:d5:f5:92:16:d6:f1:5a:f8:72:a1:20:c2:
         19:0c:59:ec:7c:63:a1:67:aa:7b:fa:34:d2:2b:b6:d3:9b:b6:
         f0:20:eb:5f:8b:01:7f:f2:af:9c:5c:c8:1a:8e:90:32:ff:fa:
         fe:25:6a:6e:6b:f1:49:1b:87:ed:f2:a6:d5:e1:d3:6b:fa:e4:
         a0:f1:74:c6:27:1e:c3:b6:3d:58:83:db:f6:b4:f9:75:1c:be:
         bd:44:97:1a:e0:3e:72:e9:59:d5:0f:1c:63:fe:68:47:97:73:
         bc:69:f2:57:64:55:0d:51:34:cc:9e:dc:8a:f9:c6:4d:36:84:
         8b:f0:4b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:55:50 2025 by rpki-client