Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fead3714-5376-3d8a-a54d-256f023300c6.roa
File:                     fead3714-5376-3d8a-a54d-256f023300c6.roa (raw, json)
Hash identifier:          d1HJFHDnrrbjWEFbqvuMtzmSiY97QaobOcPBeCOHhyI=
Subject key identifier:   A7:10:EE:87:9B:B4:A7:B0:5B:F5:33:A8:DE:F3:DB:0B:72:7A:B5:28
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584988CF2D369D2A2C99216AC300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fead3714-5376-3d8a-a54d-256f023300c6.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     21859
IP address blocks:        50.114.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:2d:36:9d:2a:2c:99:21:6a:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=1472d62c-ff1e-4617-90c4-e9220e5d0f2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:55:72:2c:10:04:67:b4:88:f1:26:d8:f9:d7:
                    a9:b3:dc:a7:97:1f:e7:c7:c1:10:60:41:98:54:94:
                    6f:23:01:72:c2:0f:e9:17:10:37:c6:af:50:12:e6:
                    24:88:a9:ff:d0:59:de:99:13:01:42:9c:82:2c:b8:
                    11:2b:bf:1f:08:97:e6:f8:61:b5:34:af:4e:a5:c0:
                    17:20:d5:22:ad:95:95:99:48:8e:7a:9e:5d:96:c8:
                    cb:13:6c:b1:77:1c:8e:e6:7d:c1:32:bf:43:d4:9f:
                    77:6e:6b:ec:1e:92:3b:c5:12:9f:bb:b4:f8:f5:d0:
                    79:cd:87:7d:fb:d9:8b:de:a7:b2:f7:f1:8f:68:a7:
                    f8:67:f8:6b:a4:41:85:6f:a8:db:da:19:06:99:89:
                    9c:1f:e7:69:34:82:ea:54:b7:58:2c:04:e9:98:ad:
                    d7:c4:d7:37:27:fe:a6:29:32:24:0c:62:2b:39:a2:
                    2a:45:f3:78:54:36:b0:52:8e:e7:4a:89:11:da:de:
                    57:19:32:5e:93:e2:9f:58:28:55:0e:d4:e3:16:ff:
                    49:07:bd:d2:c8:ae:08:45:f3:be:7a:0b:c5:41:4f:
                    5b:a4:ad:23:a4:0a:d2:ef:60:6b:0d:c3:b9:f4:e3:
                    92:71:dd:82:dc:a5:60:6c:1f:55:ad:b7:a0:16:b4:
                    d6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:10:EE:87:9B:B4:A7:B0:5B:F5:33:A8:DE:F3:DB:0B:72:7A:B5:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fead3714-5376-3d8a-a54d-256f023300c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:5d:40:19:e2:04:3c:7e:83:e9:6c:0f:dd:31:11:d8:75:07:
         fd:66:65:17:27:cf:a7:5b:af:7f:8e:6b:7f:29:68:8f:25:53:
         63:6b:9a:9e:f1:c4:ea:68:71:e7:43:90:43:65:83:e5:05:a5:
         b7:33:a0:c0:6c:74:25:40:bc:e4:83:eb:6b:90:03:0f:68:21:
         66:92:d7:12:99:db:17:94:76:27:f6:d4:88:24:16:9f:d1:a5:
         1c:bd:67:22:36:7d:ac:c4:ee:e3:1c:9d:33:18:a6:6d:9e:b2:
         ca:09:d7:e5:48:33:57:06:8d:a2:65:27:47:0d:9c:d3:f1:36:
         ec:b6:ea:da:ea:9a:42:f3:dc:f5:1d:c8:a1:9f:c3:ad:ff:a0:
         32:8e:c0:30:0b:59:c2:09:7e:09:fc:1a:ed:a6:fd:a2:dc:dc:
         42:38:6b:75:d4:8b:50:b8:18:62:d3:79:14:6a:81:12:0b:6a:
         08:f8:0b:38:9a:8d:79:9b:b1:b8:dc:b5:a5:0e:82:7a:ee:d3:
         8e:65:e8:ad:13:cc:be:a0:a4:81:fc:a4:62:1d:85:da:62:e3:
         f5:c8:21:d4:a7:94:50:dc:46:14:75:19:8e:5b:bd:51:6d:28:
         47:c0:a9:92:7f:8f:ee:8c:60:de:e6:38:b5:a5:1d:73:06:49:
         bf:d6:ab:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:16:50 2025 by rpki-client