Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9039b6a5-133e-3bc0-ac5a-4fe3588a5584.roa
File:                     9039b6a5-133e-3bc0-ac5a-4fe3588a5584.roa (raw, json)
Hash identifier:          mhrQk8qHex+18yYq+a1xzCJhN0AUfRH5alwGgGqPGu8=
Subject key identifier:   6F:2A:B9:1B:17:BB:7B:AA:93:82:4C:2F:5C:74:A8:08:6E:47:2C:5B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A68260665875608459E9E7000
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9039b6a5-133e-3bc0-ac5a-4fe3588a5584.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     21859
IP address blocks:        50.114.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:06:65:87:56:08:45:9e:9e:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=c9dcbe5a-f7d8-49f8-9f89-b432b5cfad76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c6:66:79:7d:ff:01:77:da:e0:9b:19:60:34:
                    1a:87:dd:c0:c7:37:3d:d1:61:26:e7:8b:94:af:25:
                    3e:7c:6a:06:7c:87:fa:0a:4d:5c:d0:29:7d:34:f2:
                    e7:2f:c4:cf:84:c9:4f:a6:5f:fb:31:d0:c2:e3:f3:
                    fa:dc:37:2e:5c:9e:29:01:0f:04:8d:72:02:17:b7:
                    35:ee:17:93:f9:e3:62:55:75:bd:01:39:3d:d1:4c:
                    8f:49:58:4e:0f:9b:12:d3:6c:d3:a0:22:f3:c7:bb:
                    8d:52:03:d4:dc:71:03:2e:ba:a4:e9:c2:69:72:8e:
                    0b:53:47:da:f9:ae:51:a7:c7:23:c0:c5:2e:1a:13:
                    fe:3f:06:1b:fe:28:f0:a4:e5:13:c0:ca:05:ed:93:
                    f5:f1:c8:5c:0e:58:66:07:9c:63:c8:c2:04:35:0b:
                    f7:50:e7:03:53:31:df:a6:dc:6b:b1:24:5e:4b:ce:
                    ae:1c:9f:a5:b6:33:0d:4f:02:44:8c:f2:88:c8:f8:
                    d0:45:8b:ff:85:01:d6:a7:3a:cf:3a:6f:b4:03:90:
                    e5:da:24:af:81:c2:51:8f:23:e4:7b:be:40:09:42:
                    bc:3d:8e:37:c5:ed:64:38:a8:e4:29:f8:2b:09:42:
                    8d:d9:1f:0e:c5:91:cf:b0:ce:de:53:6c:ec:40:d9:
                    9b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:2A:B9:1B:17:BB:7B:AA:93:82:4C:2F:5C:74:A8:08:6E:47:2C:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9039b6a5-133e-3bc0-ac5a-4fe3588a5584.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:eb:e7:af:fa:a3:74:2e:fb:d1:b4:c2:bc:1c:13:91:81:97:
         c7:f6:37:84:9e:3c:88:e5:75:28:ed:1d:8a:a7:04:eb:df:79:
         41:b6:ea:f8:ee:2b:ef:c9:40:a7:35:3a:b1:ad:6e:c5:52:43:
         b3:f3:7d:9d:03:75:41:7d:59:9a:a2:2f:0a:03:54:1c:74:9e:
         16:b8:88:1b:d8:48:99:1a:1f:6c:2a:11:84:e0:82:29:53:a2:
         7e:0a:c7:a1:63:98:88:21:1f:18:50:21:9b:a7:2d:50:96:3a:
         6a:76:6b:82:5b:98:1b:d4:71:9e:24:4c:0f:1d:a0:79:d6:68:
         30:38:ea:f1:1e:0c:a0:4c:be:04:0c:ea:5b:86:60:3f:93:f0:
         42:42:ac:48:e5:9f:a1:e8:1c:22:e9:68:60:12:77:b7:1b:90:
         3a:de:04:b7:9f:35:7a:fe:33:56:ae:d2:5a:68:68:03:d2:10:
         60:60:4e:b0:f1:a8:4d:9f:b9:f0:f5:dc:08:e3:6c:db:81:51:
         d1:4a:d6:cc:77:d1:b5:a1:f9:74:73:76:f5:b3:1d:1d:49:69:
         23:00:80:4c:58:61:71:4a:16:e2:93:6f:f0:e5:d6:e0:ad:e7:
         05:2c:a4:67:74:b7:c9:7f:5c:97:ea:28:e6:4f:26:65:11:80:
         dd:b2:46:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJgZlh1YIRZ6ecAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk
YzlkY2JlNWEtZjdkOC00OWY4LTlmODktYjQzMmI1Y2ZhZDc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysZmeX3/AXfa4JsZYDQah93Axzc90WEm54uU
ryU+fGoGfIf6Ck1c0Cl9NPLnL8TPhMlPpl/7MdDC4/P63DcuXJ4pAQ8EjXICF7c1
7heT+eNiVXW9ATk90UyPSVhOD5sS02zToCLzx7uNUgPU3HEDLrqk6cJpco4LU0fa
+a5Rp8cjwMUuGhP+PwYb/ijwpOUTwMoF7ZP18chcDlhmB5xjyMIENQv3UOcDUzHf
ptxrsSReS86uHJ+ltjMNTwJEjPKIyPjQRYv/hQHWpzrPOm+0A5Dl2iSvgcJRjyPk
e75ACUK8PY43xe1kOKjkKfgrCUKN2R8OxZHPsM7eU2zsQNmbWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG8quRsXu3uqk4JML1x0qAhuRyxbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOTAzOWI2YTUtMTMzZS0z
YmMwLWFjNWEtNGZlMzU4OGE1NTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnI0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHrr56/6o3Qu+9G0wrwcE5GBl8f2N4SePIjldSjtHYqnBOvfeUG26vju
K+/JQKc1OrGtbsVSQ7PzfZ0DdUF9WZqiLwoDVBx0nha4iBvYSJkaH2wqEYTggilT
on4Kx6FjmIghHxhQIZunLVCWOmp2a4JbmBvUcZ4kTA8doHnWaDA46vEeDKBMvgQM
6luGYD+T8EJCrEjln6HoHCLpaGASd7cbkDreBLefNXr+M1au0lpoaAPSEGBgTrDx
qE2fufD13AjjbNuBUdFK1sx30bWh+XRzdvWzHR1JaSMAgExYYXFKFuKTb/Dl1uCt
5wUspGd0t8l/XJfqKOZPJmURgN2yRuw=
-----END CERTIFICATE-----
Generated at Mon Aug 4 08:17:48 2025 by rpki-client