Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c23e4cce-b4f1-3e5f-b40a-99e4e7142a5a.roa
File:                     c23e4cce-b4f1-3e5f-b40a-99e4e7142a5a.roa (raw, json)
Hash identifier:          mDw4LcNWVCqz5SJYYGoeO87ZZEMgyLlsieOAbHarRXo=
Subject key identifier:   FB:42:EB:09:90:54:8F:9B:15:57:49:57:28:1E:19:B2:61:72:51:59
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849CFFF78B420BE013F7EA63500
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c23e4cce-b4f1-3e5f-b40a-99e4e7142a5a.roa
Signing time:             Sun 11 May 2025 01:00:47 +0000
ROA not before:           Sun 11 May 2025 01:00:47 +0000
ROA not after:            Sat 09 Aug 2025 01:00:47 +0000
asID:                     44477
IP address blocks:        50.114.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cf:ff:78:b4:20:be:01:3f:7e:a6:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 11 01:00:47 2025 GMT
            Not After : Aug  9 01:00:47 2025 GMT
        Subject: CN=bb2977e2-7e03-48a0-990e-387b58d97797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f4:55:f5:6e:d3:58:43:59:8b:5c:08:dd:6f:
                    b7:13:22:9b:7d:46:1d:cc:99:1b:1d:e5:83:c5:4f:
                    86:20:6a:ec:2f:05:21:75:9d:5b:e1:a5:73:e9:b9:
                    27:6f:74:59:ee:9d:db:ba:ac:b3:6b:c2:6a:20:35:
                    11:de:41:55:dc:25:f1:33:7b:ea:13:f5:79:69:16:
                    c3:43:f9:2a:c2:e1:c0:5f:22:02:c8:fc:59:69:4d:
                    89:d0:0c:9f:cc:42:da:41:88:e2:ef:0d:76:47:06:
                    0a:73:dd:50:22:9a:26:c2:31:e3:9b:68:6d:06:e3:
                    5a:50:ce:e7:8b:9f:f0:3e:1c:ef:d5:bd:2d:ff:7b:
                    8f:18:ce:57:99:68:02:20:0d:b7:39:c5:a7:2b:6f:
                    24:38:98:8f:bb:d1:52:df:ec:69:76:12:54:e9:12:
                    7a:ba:20:4b:b9:69:74:e8:0b:65:28:25:cc:cb:7b:
                    48:97:d0:25:a3:34:7c:2a:f7:59:87:7f:bc:50:67:
                    38:8b:9d:dc:9e:77:87:54:87:49:d6:d5:d9:7f:c7:
                    65:04:9c:13:0c:68:88:cf:fe:df:e9:e9:ca:29:cd:
                    5b:35:e6:90:88:21:7a:08:2e:e1:83:e2:c6:ce:6a:
                    1a:f4:95:c8:8c:b2:9c:0f:ef:10:4b:d2:5e:c3:95:
                    f0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:42:EB:09:90:54:8F:9B:15:57:49:57:28:1E:19:B2:61:72:51:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c23e4cce-b4f1-3e5f-b40a-99e4e7142a5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:67:d5:db:43:ce:ad:4e:53:86:da:99:62:2f:68:6d:2f:08:
         e1:c6:6a:cb:7c:2b:cd:1f:f4:42:c1:f4:f9:6c:6f:d9:f8:38:
         5c:ab:f1:f6:6b:26:56:ed:f8:52:cc:d4:32:d5:09:5f:4a:4a:
         f9:ac:35:f3:2b:70:21:7e:ad:66:5a:ed:05:e3:a0:61:1e:3b:
         ee:f3:a5:08:cf:a8:f1:b6:56:20:a8:f5:6b:99:f6:80:16:88:
         5e:14:fb:1b:7f:2d:cd:50:98:71:92:b4:8f:9f:a9:24:f3:43:
         fd:ad:bd:c7:d2:fe:ff:50:a2:f4:36:f0:4f:79:61:92:95:0d:
         d5:44:1b:f1:87:d4:c0:ab:70:e1:66:f5:55:57:79:bf:41:56:
         a7:b8:8b:b5:44:bd:69:c6:41:2e:8f:f1:e7:1a:e7:5e:44:3b:
         e8:21:12:e3:6d:58:2c:fe:f0:24:91:9d:43:13:7c:3a:ee:dd:
         0d:27:5c:87:da:0a:05:51:df:79:78:27:85:1f:f8:18:fa:13:
         98:b2:41:07:9b:b2:90:d2:a6:9b:d4:91:f2:f1:db:ad:6c:1a:
         42:eb:dc:a9:2c:98:1c:18:b3:92:a3:a7:97:54:f8:bb:7a:fa:
         3e:dd:a3:b8:24:42:ef:5d:9d:22:f0:de:7a:36:5d:45:87:af:
         98:18:73:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:54:54 2025 by rpki-client