Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aceb24a5-7e98-3508-aae2-7e015c6f1762.roa
File:                     aceb24a5-7e98-3508-aae2-7e015c6f1762.roa (raw, json)
Hash identifier:          aRbgBjPrivSYUWmrpT8yHNr2i7UzInhSlDie21F+RhU=
Subject key identifier:   48:F0:78:09:A0:63:DD:9F:94:73:0C:D2:A2:6D:FB:FF:C1:64:1B:28
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584AA42B8A2A694EEE6E29E5DD80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aceb24a5-7e98-3508-aae2-7e015c6f1762.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     135375
IP address blocks:        50.114.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:8a:2a:69:4e:ee:6e:29:e5:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=b24e9d3b-002f-41c3-8758-55d50636e850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:96:ed:cb:7f:35:15:8e:86:6a:14:9c:0c:c6:
                    8c:89:6b:f4:d5:28:24:45:b1:42:26:dd:84:dc:dc:
                    b1:62:8d:f6:2d:99:4a:c6:7e:35:c3:29:b2:de:3f:
                    4f:35:68:4b:71:f2:3f:7b:19:06:26:74:93:16:dd:
                    da:a6:ce:a8:88:e1:02:ac:e9:eb:34:18:2a:46:17:
                    99:4c:5b:0e:d8:ea:ce:0a:a9:a7:80:15:37:6e:ef:
                    00:8a:f4:e7:01:7f:66:23:30:f9:fc:6f:56:37:af:
                    59:3d:d6:b9:04:a9:bd:8c:95:27:bc:ee:48:07:51:
                    5f:7a:88:62:d7:93:57:55:23:95:c1:8e:c4:22:d1:
                    4b:ce:82:c2:1d:80:90:91:79:07:ad:57:88:35:e3:
                    e0:2b:5b:b8:4d:81:af:d1:6d:d5:3d:35:f5:34:3d:
                    28:78:cf:4f:6d:ac:1b:9c:42:73:ba:81:43:36:c4:
                    df:61:9c:78:ad:17:4c:72:b6:c4:ee:55:fd:07:41:
                    3c:79:27:63:97:b9:db:9f:7b:91:7f:cf:bb:70:6f:
                    4c:24:eb:10:a1:32:9a:11:93:2a:69:0f:13:33:d1:
                    eb:2e:80:0b:2a:7d:fa:c9:a6:fc:11:62:88:d3:45:
                    08:62:7a:7c:f4:67:ed:a5:12:8e:c8:b8:0c:58:7f:
                    cd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F0:78:09:A0:63:DD:9F:94:73:0C:D2:A2:6D:FB:FF:C1:64:1B:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aceb24a5-7e98-3508-aae2-7e015c6f1762.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:9f:23:28:1a:1f:7c:68:87:10:43:21:a8:0d:73:14:24:a1:
         d8:00:b6:09:e4:52:cf:bb:fc:a2:50:e5:03:b8:1b:6a:e0:7d:
         f2:c1:1c:55:62:46:d2:12:2e:ef:6e:86:07:e3:42:80:52:ac:
         8a:4d:28:fd:0a:19:45:f7:6e:c5:3e:a6:c9:6b:7f:63:4b:8d:
         d4:04:5f:56:ff:9e:57:4f:08:ca:ad:1d:63:76:19:1c:b3:47:
         73:64:2d:98:b4:05:5f:02:70:92:fe:b5:d0:ba:f0:bf:18:82:
         7e:f4:68:31:5a:7a:31:2f:d7:58:c6:67:b9:52:11:8f:b0:8d:
         60:8f:a0:27:73:8e:e2:e1:d4:fa:64:2f:61:c0:c1:c3:b7:9e:
         f9:c3:a2:67:e0:60:28:f9:73:22:6c:0a:a5:45:4c:f9:97:3f:
         72:cd:e7:92:ad:d7:f2:c5:e0:0f:c2:89:72:f1:29:a9:0f:1b:
         e0:21:30:ec:88:fb:5b:07:b4:78:c2:79:56:87:49:a9:f2:8f:
         bb:28:da:72:02:73:5c:fd:20:af:c6:84:45:ad:4b:98:10:18:
         09:c4:4c:69:20:4f:9c:33:81:fe:89:68:3d:51:e6:fd:82:55:
         41:26:6f:7a:1f:ce:be:7b:13:f9:a3:01:7f:35:b3:63:28:dc:
         4f:24:a3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:14:25 2025 by rpki-client