Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/00b9d034-8959-352e-b10b-41ee07814e99.roa
File:                     00b9d034-8959-352e-b10b-41ee07814e99.roa (raw, json)
Hash identifier:          2WjBeF22eGozMM/Eco7YfGPpz+adTzHcivvW+xdot+M=
Subject key identifier:   70:0F:75:89:3F:58:0B:CA:69:3E:CD:1E:35:33:7D:05:2E:36:50:AF
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584AE9F67CF6FA00511089FB5180
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/00b9d034-8959-352e-b10b-41ee07814e99.roa
Signing time:             Wed 20 Aug 2025 01:00:33 +0000
ROA not before:           Wed 20 Aug 2025 01:00:33 +0000
ROA not after:            Tue 18 Nov 2025 02:00:33 +0000
asID:                     33659
IP address blocks:        50.114.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e9:f6:7c:f6:fa:00:51:10:89:fb:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 20 01:00:33 2025 GMT
            Not After : Nov 18 02:00:33 2025 GMT
        Subject: CN=1814c5e3-8ab4-4ab4-b4ac-3817e61c5616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d5:af:24:3f:26:18:57:af:08:48:0b:ef:1e:
                    7c:42:14:b7:c0:a1:19:da:fc:a2:e7:9e:10:4c:7a:
                    b0:ad:9a:bc:8b:c8:ba:64:92:61:5f:50:37:05:b5:
                    42:f8:bc:57:a4:76:b4:f4:32:28:bf:a8:79:b1:01:
                    82:94:86:bc:ff:52:3b:d3:b2:9b:5a:b0:ce:2d:d2:
                    2c:5d:bf:55:7c:54:f5:fd:cd:4b:56:9b:a4:63:3d:
                    8d:ec:d5:6e:8a:cb:cf:02:07:5b:7f:40:bb:8e:5f:
                    39:e9:35:bc:5d:9c:97:fe:78:5f:ea:98:79:eb:63:
                    83:c3:79:e2:6f:2a:72:5a:f3:05:48:dd:fc:fa:a7:
                    b4:75:d3:f3:be:bb:b6:7e:f6:e8:45:1e:a0:40:63:
                    2c:11:b8:43:de:85:8a:06:f1:3d:5e:29:63:c6:b0:
                    f2:eb:2f:de:e2:9b:4d:f0:5a:79:06:c7:21:50:65:
                    2c:94:d4:48:c5:8f:a4:cb:d5:81:30:b8:b2:26:5a:
                    a1:c5:5b:32:8e:5f:c9:1a:35:e3:c3:3b:88:a2:60:
                    66:4d:80:2e:11:9e:79:6f:b0:6c:f4:4f:59:2e:8b:
                    38:a8:b2:e6:f5:77:65:e3:de:39:0f:d5:d7:0b:e4:
                    9f:21:c8:c8:ab:97:5f:72:40:71:15:0d:68:f5:78:
                    d4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:0F:75:89:3F:58:0B:CA:69:3E:CD:1E:35:33:7D:05:2E:36:50:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/00b9d034-8959-352e-b10b-41ee07814e99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:c9:fc:7d:1d:6c:f6:3d:ee:f9:28:cb:c6:d3:0b:02:8f:13:
         38:4d:49:00:de:f8:40:6f:c8:dc:ae:c4:e9:1e:fa:0f:7c:d1:
         b4:01:3f:2b:77:28:bc:90:2b:f3:b4:56:62:59:ab:15:56:2a:
         e3:43:93:47:3e:ef:31:56:e6:0c:b4:9c:6c:7f:30:29:b2:3e:
         d2:75:b4:d9:96:03:ef:55:ae:7d:14:10:d8:d9:01:10:eb:e4:
         7d:84:9d:43:56:81:3d:ca:ff:c0:b3:0b:e7:00:74:65:28:c9:
         68:61:72:29:b6:2f:3b:6f:07:63:15:f2:b9:fc:b5:d0:b4:c8:
         0c:2b:b3:cb:e7:62:aa:77:2a:cf:59:ce:f7:8e:65:ba:72:ca:
         09:8e:63:69:9b:9f:9b:0b:64:ee:6e:b7:33:ab:61:3f:f2:22:
         b2:de:4d:09:80:dc:6d:f1:3b:00:dd:cb:1b:42:d3:e2:2c:d3:
         99:81:e1:52:47:e8:d0:92:e5:fe:f2:fc:8b:1b:aa:27:29:0f:
         06:a8:93:d7:33:8a:6e:78:59:e3:70:25:f2:63:54:39:ad:58:
         db:ae:3d:18:7f:97:43:fd:37:78:73:d8:82:6d:d0:67:91:76:
         4f:c3:da:ec:3f:b3:59:d6:45:3c:ed:f0:59:50:6a:1a:74:fc:
         75:bd:86:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:13:00 2025 by rpki-client