Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d065ba3b-8176-3309-b246-76a8396fa069.roa
File:                     d065ba3b-8176-3309-b246-76a8396fa069.roa (raw, json)
Hash identifier:          H1Jra1rH4FqmOmXYsCF0/DhAM3qvxu603tkH0EIGWy8=
Subject key identifier:   66:D1:B9:9D:72:26:50:A3:3B:04:78:AE:ED:55:B4:77:10:58:8C:DA
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A7E84AD35ED2D3373643C0B80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d065ba3b-8176-3309-b246-76a8396fa069.roa
Signing time:             Sat 12 Jul 2025 13:19:56 +0000
ROA not before:           Sat 12 Jul 2025 13:19:56 +0000
ROA not after:            Fri 10 Oct 2025 13:19:56 +0000
asID:                     18779
IP address blocks:        50.118.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:84:ad:35:ed:2d:33:73:64:3c:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 12 13:19:56 2025 GMT
            Not After : Oct 10 13:19:56 2025 GMT
        Subject: CN=4fe15528-2e15-4dae-b341-91987f09421e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7e:00:96:eb:92:67:98:8a:2e:e5:7f:04:2d:
                    1c:32:ff:fa:89:61:64:73:c0:af:f7:12:83:45:af:
                    43:64:14:dd:69:f2:1d:35:61:04:66:29:cd:70:13:
                    93:f9:07:65:09:32:cf:47:34:7e:d8:6d:cc:58:d8:
                    88:7c:84:c3:cb:bf:88:0e:ab:00:7d:3c:a8:fa:ea:
                    c5:44:28:36:bf:33:28:76:b9:28:63:1a:31:3c:18:
                    08:82:56:5c:de:b4:0a:7a:25:cd:2c:bd:54:21:90:
                    b0:55:28:69:e4:ce:43:b1:7e:b7:9e:9e:51:9b:49:
                    58:63:c8:5a:bb:40:09:11:96:a8:78:57:19:a2:2e:
                    08:87:94:db:f1:a1:ff:18:7b:61:66:45:7b:c4:b5:
                    ef:76:8d:67:fe:44:f5:10:60:4c:ba:08:69:ea:63:
                    2f:7a:70:15:d0:f1:99:1d:de:52:ab:0d:b5:3f:0e:
                    90:c9:d5:8c:3b:dc:44:d0:58:d0:20:b9:2f:c8:11:
                    09:e9:16:b2:be:ab:90:c3:30:03:34:58:a2:37:d2:
                    f6:c5:b7:95:08:51:17:22:3e:6c:3d:56:7c:a0:1a:
                    12:15:15:75:a9:bb:32:66:ba:4a:57:f6:b3:6a:12:
                    f6:53:30:7a:83:3f:e9:ea:e3:7e:e9:33:86:2f:e3:
                    a2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D1:B9:9D:72:26:50:A3:3B:04:78:AE:ED:55:B4:77:10:58:8C:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d065ba3b-8176-3309-b246-76a8396fa069.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.118.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:81:d7:a4:8b:6c:b1:ec:3b:80:43:9f:0f:c3:b5:73:15:52:
         33:26:91:cf:ee:72:23:94:04:1f:8c:0c:49:84:9a:a0:68:7e:
         69:09:7f:a7:88:90:98:78:ed:2e:54:c8:f7:17:fe:97:8b:f2:
         d8:d3:02:fb:f8:5d:8f:b6:cf:bf:a7:4c:41:bb:51:1c:01:ca:
         08:5c:a9:df:09:c4:46:d3:6a:99:55:67:2c:23:62:61:8b:49:
         aa:09:a3:aa:47:52:f6:de:23:72:50:17:31:77:34:1c:f8:fc:
         7c:22:8d:0a:da:91:c3:27:7a:3e:5b:cc:d1:33:b2:03:2b:70:
         0f:7b:e1:4f:98:e8:97:14:ba:4a:02:b1:15:23:6e:7c:e8:b4:
         b9:d1:4f:99:93:10:24:67:7b:85:22:14:85:29:16:09:d9:bb:
         e6:82:6d:8a:8c:bb:8a:d1:9e:79:d2:0a:83:5f:0b:97:6e:8b:
         91:53:26:a6:a5:d0:9c:93:aa:85:05:9e:b7:6d:b8:84:f0:26:
         0a:b3:ae:5f:39:29:80:09:0c:b6:d7:ec:a5:75:5e:43:36:28:
         46:b2:eb:0e:6a:d2:4f:94:d6:da:82:79:63:db:0e:e3:87:b9:
         9c:65:bb:e1:e5:74:6a:c0:9e:7d:6b:2c:ac:a2:98:e2:43:3a:
         33:c2:71:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:29:59 2025 by rpki-client