Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7d3c2b90-27ef-3f12-84d7-27f33fa258e4.roa
File:                     7d3c2b90-27ef-3f12-84d7-27f33fa258e4.roa (raw, json)
Hash identifier:          YcEZIQ4tl9X7oxXv/saN0gfEXwQvVXd+0pA+vzoMOSw=
Subject key identifier:   B4:D0:92:64:BF:5D:56:08:45:8A:77:57:28:96:1D:3C:BF:D0:CE:C3
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A68260670EB1001076F702100
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7d3c2b90-27ef-3f12-84d7-27f33fa258e4.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     21859
IP address blocks:        50.114.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:06:70:eb:10:01:07:6f:70:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=3e45ec19-4b79-4eb0-8c8d-be76f6cf74f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:98:3c:d0:4a:3d:c5:f5:36:ab:d8:84:bc:79:
                    d3:c8:17:5f:67:13:84:0e:f3:6c:39:d0:5a:f0:ae:
                    ac:2c:22:e7:3e:2e:71:f2:5f:68:7b:a0:db:ad:f2:
                    5b:d9:98:ad:b0:97:73:e3:2b:15:e8:88:f0:74:cf:
                    f7:b3:49:2a:12:14:60:99:a8:2e:92:87:be:b5:8c:
                    31:ba:57:5b:28:c2:34:68:e6:80:93:e4:1c:01:20:
                    60:74:75:f9:3a:e5:36:db:59:d1:04:0a:39:0e:4d:
                    fd:84:c4:ca:bc:a3:f3:0b:54:09:0b:9a:53:9d:1c:
                    85:68:02:6b:df:65:a1:06:51:6f:dc:14:50:d5:f9:
                    9d:5d:c0:61:1b:85:8b:42:23:78:74:d9:68:95:d8:
                    83:6e:94:d2:be:8c:34:b3:2b:9f:5c:c7:17:a6:fa:
                    d0:43:cc:ed:8b:be:3b:f3:ed:a3:f7:d4:6c:1d:91:
                    c1:e7:83:fc:d4:3e:b5:3a:3f:52:73:14:80:72:26:
                    c6:7d:a3:5e:fd:b3:a9:26:bc:35:ba:7b:94:f2:33:
                    20:8b:c5:a3:69:5c:59:d0:46:c8:cd:28:88:84:07:
                    cb:39:d1:48:ed:19:89:0b:57:be:e7:9f:76:fe:f3:
                    35:f2:2d:51:fd:cd:80:26:fd:14:87:a5:3c:fa:43:
                    05:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D0:92:64:BF:5D:56:08:45:8A:77:57:28:96:1D:3C:BF:D0:CE:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7d3c2b90-27ef-3f12-84d7-27f33fa258e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:6c:fd:8f:e9:ca:71:05:91:6c:1e:c0:42:f1:af:bc:93:60:
         e6:28:4f:6c:eb:50:78:21:dc:6b:27:14:7c:82:5d:31:5d:4d:
         01:ca:5f:92:d6:16:b6:c9:f9:e6:3b:94:61:75:d4:c8:43:53:
         cb:e1:8c:4b:14:7b:75:e4:c2:a1:88:74:62:0b:6a:5f:99:31:
         8e:99:a0:69:0f:9d:db:15:2b:9b:4e:85:59:55:2f:b8:57:5f:
         cd:2e:2d:66:42:a1:e0:9f:68:9c:cc:57:61:58:ca:3c:e5:8b:
         6e:e2:11:b0:81:95:7d:b1:79:3b:0e:12:93:7c:79:ea:a3:77:
         d3:23:f1:00:3a:60:b9:62:ad:01:02:eb:96:80:fe:ff:99:4f:
         5a:a9:ec:16:42:0a:2d:c3:2f:38:ac:10:66:b7:75:cd:42:9b:
         89:70:88:08:e6:1c:5f:ba:5f:b1:ac:70:a1:fc:2e:f4:55:f0:
         de:a9:49:c5:ff:6f:34:4e:d1:02:43:4c:96:68:76:84:0a:4d:
         2e:8a:0b:d6:cc:51:de:bb:92:df:fb:41:5b:40:04:66:3c:24:
         3e:ca:26:45:d0:2c:16:9f:e2:6b:ed:99:2f:bb:b2:16:d4:46:
         25:c0:a2:05:2e:5f:4e:5c:b4:f6:08:98:07:a9:b4:82:a9:d5:
         f7:c5:08:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:15:24 2025 by rpki-client