Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ac83b822-16d4-366b-a22a-77794a4b8f23.roa
File:                     ac83b822-16d4-366b-a22a-77794a4b8f23.roa (raw, json)
Hash identifier:          7SUAr1bSw9AATyRhHusWYA7yOjsrX7rV9hTmNY9GELg=
Subject key identifier:   B1:E5:8C:53:0D:55:76:53:F3:62:C2:34:E5:B4:51:D8:8D:AA:6F:99
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A9D30FAFCFAF44B641C51F380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ac83b822-16d4-366b-a22a-77794a4b8f23.roa
Signing time:             Wed 23 Jul 2025 13:01:02 +0000
ROA not before:           Wed 23 Jul 2025 13:01:02 +0000
ROA not after:            Tue 21 Oct 2025 13:01:02 +0000
asID:                     26548
IP address blocks:        50.114.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:30:fa:fc:fa:f4:4b:64:1c:51:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 23 13:01:02 2025 GMT
            Not After : Oct 21 13:01:02 2025 GMT
        Subject: CN=41b60ab3-179e-424c-87a3-79679a6dc3e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4a:04:e9:c8:34:da:e6:c0:92:af:f0:46:a7:
                    ff:98:5e:19:58:2b:c6:e2:c7:68:e1:9d:4e:ba:32:
                    2f:2b:17:15:b1:e2:cd:25:58:4e:c0:da:9d:06:88:
                    90:67:51:f8:2d:ce:2e:07:b7:18:80:b9:fd:b7:06:
                    60:44:e3:32:74:5c:0c:9b:3d:96:89:cd:5a:83:eb:
                    33:67:f6:3f:17:3a:af:5f:fa:14:92:ab:16:f1:15:
                    02:bb:f8:bc:9c:d5:52:8e:05:5d:c0:5d:93:ff:63:
                    ee:32:94:97:7f:98:17:b2:6f:96:3c:c1:ae:6e:1b:
                    3b:3c:f4:e8:8d:ba:dc:51:4c:05:ee:a6:33:2c:1e:
                    cb:ae:35:e5:f7:55:fc:d8:c6:fe:0e:e8:08:d5:e7:
                    36:3a:f7:3d:48:34:4a:c6:f1:63:52:f4:4d:3f:44:
                    db:7c:b8:35:22:aa:bf:b5:1f:39:1b:88:12:9b:50:
                    2e:70:01:4b:d7:93:87:80:09:5e:56:ae:70:88:dc:
                    4a:a7:1d:d4:3d:ee:69:1d:8b:8e:29:c5:12:8a:ac:
                    87:a9:ca:62:db:7e:02:05:21:ca:a5:7f:2e:c6:be:
                    fb:76:2c:d8:6d:19:82:50:0c:c7:b6:aa:ae:94:40:
                    7f:ae:4a:9a:dc:be:ca:8f:57:f4:c4:31:db:8f:7b:
                    81:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E5:8C:53:0D:55:76:53:F3:62:C2:34:E5:B4:51:D8:8D:AA:6F:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ac83b822-16d4-366b-a22a-77794a4b8f23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:a0:53:c6:71:7c:a9:4b:a4:0d:77:ac:aa:86:32:b4:f7:ff:
         38:81:d7:6d:45:44:1f:df:2a:d8:35:ae:d6:bf:e5:46:22:60:
         54:a6:c1:38:b1:28:fe:84:dd:6d:81:e7:92:f1:6b:43:ae:04:
         8c:0c:87:d5:8c:d9:db:34:81:1a:e8:8b:64:36:20:a7:08:8c:
         bd:fc:1f:70:04:37:69:5f:bc:59:fd:25:7e:3e:7a:1b:75:72:
         8c:2d:7b:32:e7:49:12:5f:5e:e8:c4:c8:9a:7f:9f:4b:0f:ca:
         63:90:13:8c:c2:29:6f:37:67:56:52:41:93:fe:12:e3:b9:d7:
         04:19:e3:a3:2d:c7:fa:5c:50:83:ab:cb:3d:b4:c9:3b:3c:93:
         00:80:23:89:44:cc:f5:45:2e:e6:aa:0a:b3:b9:fe:1e:de:5c:
         2c:3c:1c:bd:50:f9:ef:cf:a2:13:6c:9a:97:27:ac:9b:7a:ac:
         34:66:07:a9:3b:98:31:bd:8b:f0:a6:dc:ef:46:5d:ef:db:5c:
         b5:46:33:e7:b4:cc:fc:cd:3b:b3:de:29:92:d6:be:9e:5b:54:
         11:6d:bd:b6:8c:c2:a8:08:a9:a2:e3:4c:26:c3:77:26:0a:1e:
         36:8b:28:20:54:22:9d:e5:ad:99:1b:41:8e:61:7f:d6:af:35:
         a5:4f:f9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:55:30 2025 by rpki-client