Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fcc8b3f8-98da-3e5a-bad7-6059e788f734.roa
File:                     fcc8b3f8-98da-3e5a-bad7-6059e788f734.roa (raw, json)
Hash identifier:          BgAah0DwCO+gQ+3yrlDxkWwaV0LBGx1M3k6xHcbeS4Q=
Subject key identifier:   20:2F:C7:37:EC:AB:C0:65:76:F4:96:D6:A7:24:9A:03:C9:82:0A:32
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584AB0BB7628470B7859174CECD6
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fcc8b3f8-98da-3e5a-bad7-6059e788f734.roa
Signing time:             Wed 30 Jul 2025 13:00:40 +0000
ROA not before:           Wed 30 Jul 2025 13:00:40 +0000
ROA not after:            Tue 28 Oct 2025 13:00:40 +0000
asID:                     44477
IP address blocks:        50.114.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b0:bb:76:28:47:0b:78:59:17:4c:ec:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 30 13:00:40 2025 GMT
            Not After : Oct 28 13:00:40 2025 GMT
        Subject: CN=49f3a9a7-4136-4806-b3f5-5c24e9f578ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9e:7d:1b:fb:d7:c6:bd:8a:3d:3d:ce:c7:2f:
                    85:74:0a:ef:54:ea:f9:c4:a9:86:e9:96:b1:a7:67:
                    9b:ef:66:f2:c6:4b:23:30:0f:21:f8:da:c4:e9:07:
                    81:28:97:02:a1:d6:75:61:16:8d:53:7b:bf:98:ec:
                    11:3b:5f:90:36:d4:6e:60:11:78:3f:10:66:39:c4:
                    db:e6:14:b5:78:50:07:63:4e:21:74:c1:99:ce:c4:
                    1b:2d:c0:b6:ae:23:6e:7a:af:98:22:99:db:4f:33:
                    e2:23:33:f4:66:a9:e5:fa:e7:1c:8d:6e:2e:fd:9a:
                    a6:53:2d:bf:90:c6:0e:e7:da:78:db:cc:d6:30:f3:
                    6f:33:fe:50:05:2d:08:b9:88:03:15:84:8e:45:83:
                    e1:88:5d:3b:81:ef:1b:44:eb:92:42:9d:ee:d9:4c:
                    12:28:0a:18:cc:09:e6:ae:84:52:72:34:f6:d3:e8:
                    5a:f1:15:d2:e9:0d:f8:8e:68:7f:aa:77:00:7f:03:
                    8d:bc:14:09:b1:c7:4f:a6:80:65:14:45:fc:df:32:
                    6b:ef:f7:42:93:17:f8:bc:ec:48:dc:53:11:ec:ec:
                    16:35:20:15:1e:9f:3a:f7:e4:1a:89:4b:ec:e8:67:
                    2e:f5:d8:58:30:ec:0f:76:43:71:58:33:36:59:bc:
                    bb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:2F:C7:37:EC:AB:C0:65:76:F4:96:D6:A7:24:9A:03:C9:82:0A:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fcc8b3f8-98da-3e5a-bad7-6059e788f734.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:28:e9:7d:38:0a:25:fd:04:a4:88:cf:f4:28:16:9e:87:b3:
         3a:6c:c8:64:99:b9:ba:65:be:c2:b9:7b:2c:0d:b1:d0:f6:d3:
         a4:6c:b0:95:00:34:4f:95:14:78:e0:e2:eb:1a:fd:ba:fd:0d:
         a2:4a:45:d0:3c:dd:38:10:3c:4f:be:70:59:40:13:78:1c:0b:
         17:57:16:b4:f0:fe:cb:ee:dc:a9:35:b2:00:f1:9b:16:f9:a6:
         8e:5b:ea:79:a5:7f:b2:c8:61:d1:ca:d4:90:6f:3d:51:3a:2f:
         95:30:78:ed:c2:fc:a0:84:f4:11:52:48:b6:12:3e:df:d7:bd:
         da:0b:46:e1:f6:d7:de:76:28:80:65:f9:30:38:66:73:84:80:
         26:13:e5:0f:5d:14:36:99:ce:45:7e:7f:f9:04:f1:8c:cc:f2:
         2d:ea:1d:35:ec:6a:1c:f0:21:ba:f7:97:65:87:29:e5:7f:43:
         2e:fa:38:0f:4b:84:13:a1:12:ed:74:e8:ce:c5:43:83:67:a7:
         fb:ed:87:6f:f5:ca:f7:e4:6f:4c:b7:1a:0d:4a:23:d8:24:89:
         8d:3d:39:a6:24:2c:35:6d:2c:f8:27:37:a3:3a:0f:6d:c1:13:
         c1:8a:b9:90:4c:55:a7:67:f6:0b:d9:d6:5b:50:14:40:8c:2c:
         d5:ff:b3:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqwu3YoRwt4WRdM7NYwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDczMDEzMDA0MFoXDTI1MTAyODEzMDA0MFowLzEtMCsGA1UEAxMk
NDlmM2E5YTctNDEzNi00ODA2LWIzZjUtNWMyNGU5ZjU3OGVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJ59G/vXxr2KPT3Oxy+FdArvVOr5xKmG6Zax
p2eb72byxksjMA8h+NrE6QeBKJcCodZ1YRaNU3u/mOwRO1+QNtRuYBF4PxBmOcTb
5hS1eFAHY04hdMGZzsQbLcC2riNueq+YIpnbTzPiIzP0Zqnl+uccjW4u/ZqmUy2/
kMYO59p428zWMPNvM/5QBS0IuYgDFYSORYPhiF07ge8bROuSQp3u2UwSKAoYzAnm
roRScjT20+ha8RXS6Q34jmh/qncAfwONvBQJscdPpoBlFEX83zJr7/dCkxf4vOxI
3FMR7OwWNSAVHp869+QaiUvs6Gcu9dhYMOwPdkNxWDM2Wby7PwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCAvxzfsq8BldvSW1qckmgPJggoyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZmNjOGIzZjgtOThkYS0z
ZTVhLWJhZDctNjA1OWU3ODhmNzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnKtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI0o6X04CiX9BKSIz/QoFp6HszpsyGSZubplvsK5eywNsdD206RssJUA
NE+VFHjg4usa/br9DaJKRdA83TgQPE++cFlAE3gcCxdXFrTw/svu3Kk1sgDxmxb5
po5b6nmlf7LIYdHK1JBvPVE6L5UweO3C/KCE9BFSSLYSPt/XvdoLRuH21952KIBl
+TA4ZnOEgCYT5Q9dFDaZzkV+f/kE8YzM8i3qHTXsahzwIbr3l2WHKeV/Qy76OA9L
hBOhEu106M7FQ4Nnp/vth2/1yvfkb0y3Gg1KI9gkiY09OaYkLDVtLPgnN6M6D23B
E8GKuZBMVadn9gvZ1ltQFECMLNX/s+U=
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:14:45 2025 by rpki-client