Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a580a06c-2ba9-3b5f-b9a8-e3c4f605d2ec.roa
File:                     a580a06c-2ba9-3b5f-b9a8-e3c4f605d2ec.roa (raw, json)
Hash identifier:          +wh+YC6wQRmqj0jxewQhlVB/jzdcbeDKz+0yEroaMs4=
Subject key identifier:   E4:0E:45:88:BA:B1:3D:A1:B0:87:7F:85:F3:D2:34:98:97:E2:3D:2D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584991877B77F648546BB659C940
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a580a06c-2ba9-3b5f-b9a8-e3c4f605d2ec.roa
Signing time:             Fri 18 Apr 2025 15:59:01 +0000
ROA not before:           Fri 18 Apr 2025 15:59:01 +0000
ROA not after:            Thu 17 Jul 2025 15:59:01 +0000
asID:                     212238
IP address blocks:        50.114.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:87:7b:77:f6:48:54:6b:b6:59:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 18 15:59:01 2025 GMT
            Not After : Jul 17 15:59:01 2025 GMT
        Subject: CN=dc01c72b-6cb9-4397-8a71-1f26f393f1ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7e:2e:45:9b:b0:c5:8a:ea:bd:be:a6:36:a7:
                    48:3f:dc:8f:74:01:c1:e2:84:bb:de:d7:0a:02:4d:
                    52:c1:c4:27:8d:24:00:27:69:5e:eb:ff:32:fc:c4:
                    38:53:9d:3d:d9:41:02:16:7b:13:2f:3f:53:81:48:
                    c0:19:22:17:ea:34:55:68:10:9f:e8:56:26:f3:02:
                    79:d7:2f:4f:6d:87:fe:c9:87:d9:2a:c2:4d:cb:1f:
                    88:25:4c:1a:0e:84:6b:7c:14:cf:31:85:a5:65:5b:
                    70:d3:e4:24:cf:59:73:8f:d2:8d:db:ad:58:da:f8:
                    10:64:55:68:89:13:3a:53:58:a1:9f:dd:7d:8c:fa:
                    32:e0:71:21:85:23:db:17:cb:8e:2c:b9:e8:fa:58:
                    fe:17:d2:aa:37:a4:01:6f:8d:44:8e:c2:5c:0d:aa:
                    9f:50:76:22:3a:32:fa:38:bc:15:f6:0d:8b:c0:82:
                    c4:ac:1b:1b:fb:9e:77:33:13:47:98:d6:df:f2:b4:
                    dd:47:4b:08:a8:c3:a7:96:2a:5c:79:cc:ce:25:48:
                    9d:36:75:4e:e0:b2:c5:41:0d:05:42:d0:13:10:aa:
                    4f:fe:13:23:c1:2d:69:d0:6e:3e:27:53:7d:07:25:
                    85:4b:11:41:04:57:14:b0:c9:e4:be:9d:33:f7:3c:
                    10:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:0E:45:88:BA:B1:3D:A1:B0:87:7F:85:F3:D2:34:98:97:E2:3D:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a580a06c-2ba9-3b5f-b9a8-e3c4f605d2ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:6d:49:a7:f6:34:f6:57:81:0f:12:7c:84:8f:73:6d:4b:7e:
         84:e1:42:22:9b:f5:f5:14:ff:78:4d:9a:3e:28:4b:e0:cf:4f:
         17:8b:9d:78:e1:43:90:03:60:b6:37:23:7b:81:8f:26:66:c7:
         0b:f1:2c:0f:c6:40:16:38:9b:51:8a:9a:d8:5e:a4:8b:9c:75:
         bc:9e:86:ce:2e:27:1a:20:50:ba:e4:e7:87:a2:d5:b1:42:c5:
         2c:4c:7f:23:cf:d1:fd:04:9a:ad:07:ee:b5:4a:83:e7:24:bc:
         c6:c4:f5:c6:32:b1:3c:7c:ad:10:c8:44:6b:7d:57:20:dc:49:
         6d:8d:dd:af:d9:f8:0a:9b:f9:8f:43:ef:04:25:31:50:c4:f3:
         0d:4d:23:d9:1b:5d:52:81:a0:cc:75:d8:15:3e:c4:dd:84:6b:
         19:01:e6:06:c8:15:35:e0:f0:c8:5d:89:1d:db:24:60:2e:ae:
         cd:c6:d2:fd:16:23:13:14:0a:57:26:72:61:0f:37:07:4a:90:
         0c:94:b9:da:d6:ef:96:64:4d:4f:ca:31:e9:f8:2b:75:d4:fe:
         09:46:c7:c5:25:f6:53:b4:a7:b5:8f:16:51:1d:5d:72:1f:86:
         d8:a4:cd:91:7e:78:84:2a:a8:b6:a3:39:21:3f:5e:ea:bf:9c:
         d4:c8:2c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:42:55 2025 by rpki-client