Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5fc8dd27-f27a-3a76-8af0-2f041576b8f1.roa
File:                     5fc8dd27-f27a-3a76-8af0-2f041576b8f1.roa (raw, json)
Hash identifier:          2TIT4eJUpnpLVQoTxdMxrhcnzqRkI2b9u3vafhLiNm0=
Subject key identifier:   58:BE:71:E0:B7:5B:1B:95:B4:38:F9:8D:11:CB:EF:F7:4B:D9:BC:BB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFBDF8DE835060DAF69EB80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5fc8dd27-f27a-3a76-8af0-2f041576b8f1.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     7015
IP address blocks:        50.203.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:df:8d:e8:35:06:0d:af:69:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=cfbfca5b-2522-4e9c-ba3e-ad486ecda53a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:81:ad:12:a7:8d:72:e5:69:04:ac:2a:a8:fb:
                    6d:4c:55:55:90:eb:a8:e7:30:c1:64:8e:41:4d:b9:
                    b3:4a:46:fe:3c:51:dc:c8:8c:4d:87:45:7a:cc:17:
                    c4:f2:d6:ba:41:bd:60:9f:51:70:cc:ed:5e:60:89:
                    de:af:ad:33:69:fb:ab:19:71:55:83:5d:a8:8e:19:
                    cd:ee:e0:6f:0b:e2:d9:47:5b:27:48:d3:6f:93:53:
                    7f:a5:2e:75:a3:56:a1:65:25:b2:30:71:b5:36:ff:
                    1f:d8:a5:56:b9:8f:6e:8e:61:0e:c5:7f:ca:f2:eb:
                    ca:41:4b:49:9e:85:0f:9a:c0:74:39:e1:9a:8d:64:
                    ac:41:26:65:fc:dc:66:db:56:8a:07:ce:a4:a7:1a:
                    7c:61:d5:9c:e7:4e:3d:2b:ba:64:22:df:9b:b8:3a:
                    28:1f:eb:f0:62:e5:53:0b:cb:a3:4f:3b:fb:60:85:
                    17:78:14:81:1f:13:9a:f3:10:b1:93:ea:e5:6e:c1:
                    87:22:b6:96:a2:f3:cc:1d:f5:bc:16:da:b0:05:5b:
                    e2:86:c4:b3:bb:89:0f:20:3b:2b:80:bd:34:bd:30:
                    10:5a:df:38:dc:2f:0b:9a:97:38:be:3d:fc:84:0f:
                    6e:f8:bb:d5:78:2e:16:d9:f7:7a:71:82:e7:ef:ca:
                    93:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:BE:71:E0:B7:5B:1B:95:B4:38:F9:8D:11:CB:EF:F7:4B:D9:BC:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5fc8dd27-f27a-3a76-8af0-2f041576b8f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.203.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:09:99:09:11:0e:41:53:91:c2:ea:3f:14:a7:0e:3d:b8:1a:
         6e:0f:0e:50:3b:55:e0:67:f9:e8:e9:41:1d:0e:4b:b6:ff:b5:
         bb:b5:fa:cf:4e:77:32:86:b1:33:bd:ac:c5:28:88:fd:46:ba:
         19:5e:f8:73:c8:6f:fc:62:72:b9:21:3b:4c:e8:f2:b6:2b:19:
         83:25:08:4a:30:d0:49:85:11:31:eb:39:04:18:fc:ea:96:0f:
         f5:e1:e7:4b:28:af:46:d9:ca:d9:d5:03:4b:90:88:bc:39:5f:
         f2:b8:8b:33:35:9c:97:26:13:6b:50:2c:4b:2e:d9:ac:83:12:
         bc:ff:af:c1:f3:83:49:7a:72:c4:c5:68:9c:37:8f:46:e0:99:
         32:5e:22:73:a7:34:68:5f:18:64:95:58:8f:9d:93:22:c8:84:
         c6:80:60:0b:76:fb:56:1f:bb:c8:32:8b:34:9c:12:7a:fe:68:
         30:42:30:bd:27:c5:68:68:78:bc:26:07:3b:47:02:0c:73:05:
         94:1a:bf:64:56:93:d4:c0:28:e9:93:64:88:b2:85:bd:ee:39:
         a3:06:3a:d3:09:7b:45:fd:45:6c:1d:44:2d:20:a7:df:43:1c:
         6a:96:93:28:49:58:d3:0d:ba:1e:16:90:49:4d:b2:7a:68:d3:
         ff:af:71:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:28:22 2025 by rpki-client