Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4499e31f-acc6-3352-ae7a-c1b4724fa440.roa
File:                     4499e31f-acc6-3352-ae7a-c1b4724fa440.roa (raw, json)
Hash identifier:          HB3QG8XTwKUrtefoBDZL/d4MN19nuCpPSekHmN1tpYY=
Subject key identifier:   69:AB:FC:80:84:79:4D:12:A7:CF:80:31:AC:3E:7A:DC:39:9A:C7:E6
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584AB2212866318BB6B9FD69CE80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4499e31f-acc6-3352-ae7a-c1b4724fa440.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     58061
IP address blocks:        50.114.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:21:28:66:31:8b:b6:b9:fd:69:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=b9620cfc-241c-46fc-a71d-199b36eef32f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c3:73:cb:3c:b6:6e:52:44:3c:a9:e7:0e:9e:
                    38:8f:9e:8c:bb:4d:85:57:b8:36:e8:ef:87:2b:0c:
                    67:68:85:8a:69:06:fc:99:27:9f:c7:6b:6e:75:14:
                    41:06:5c:a1:99:0c:c3:0b:ae:45:63:b3:a8:82:a0:
                    bf:21:63:f3:89:5c:94:aa:3a:f7:a1:88:3c:7f:b3:
                    8a:82:0c:c6:1d:97:5a:5c:09:72:be:05:96:59:a8:
                    8c:c2:cc:73:5b:18:51:94:ad:5e:f1:f5:76:ff:3e:
                    47:b6:a6:35:ef:c9:e0:e5:d3:b5:8d:90:f1:16:a8:
                    17:fa:6a:74:40:c2:0b:4b:50:d3:65:4a:d0:2f:ce:
                    44:34:24:fb:99:78:d1:34:1b:59:70:fa:fd:0a:b4:
                    8b:0e:f3:eb:ad:5c:82:8a:ad:b1:df:ff:d8:f7:bd:
                    60:cd:20:16:54:bc:e0:65:66:a3:10:36:a3:34:59:
                    38:7c:8e:7d:e4:83:6e:18:50:a8:43:ad:9a:ca:a5:
                    fb:0c:df:cb:3d:b9:0c:17:13:24:df:10:28:2c:0c:
                    fa:3f:35:2e:bf:b4:2a:e3:3a:9e:44:a2:39:53:14:
                    0c:ea:43:ee:44:d8:8e:42:0d:5e:9e:aa:1b:8e:47:
                    66:5a:5d:9d:f6:23:91:8c:27:f3:47:f6:f4:86:84:
                    34:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:AB:FC:80:84:79:4D:12:A7:CF:80:31:AC:3E:7A:DC:39:9A:C7:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4499e31f-acc6-3352-ae7a-c1b4724fa440.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:15:ee:8f:ef:14:27:67:1c:e0:20:b0:a9:49:15:a5:d9:d7:
         06:e4:82:f6:89:78:bb:d9:5f:0c:99:db:5c:b2:42:8b:5f:f0:
         39:63:63:04:3d:90:23:fa:b7:49:f0:7f:6b:6f:2c:2f:8d:79:
         e4:7f:05:3d:25:44:72:ef:61:fb:de:2b:c0:8c:7a:ad:c0:69:
         19:cb:05:cf:e9:9a:eb:d4:66:e7:de:55:9c:f2:b7:92:d5:2d:
         ee:30:8c:20:c8:56:b4:4d:f4:33:7e:56:36:1d:bf:65:09:ac:
         da:39:18:e2:65:fd:e5:ab:46:1f:3f:c0:a0:82:2a:1b:5a:15:
         6f:90:6e:87:01:7b:23:8c:b4:b7:a8:86:f0:24:3d:51:7c:98:
         18:a5:ca:9f:cc:9c:af:b6:74:69:9b:1d:36:6c:b3:e1:d9:81:
         85:f0:8a:ef:8f:5d:09:bd:20:03:8d:cc:ea:6a:b9:e6:ef:1d:
         bc:31:c6:ad:e3:ac:af:26:86:66:c5:a6:52:3b:21:97:2f:20:
         61:56:83:8e:59:b0:73:e6:c1:97:82:88:e0:4f:7c:da:93:3e:
         b7:8e:9c:bb:61:20:27:5d:db:aa:46:19:37:60:a4:e8:55:fa:
         33:62:55:e1:39:8f:c0:6e:4d:55:51:3b:14:7e:e0:4a:e3:df:
         2c:61:8d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:25:06 2025 by rpki-client