Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3804b16f-c703-36c2-a55b-fcb6f3dd9cd5.roa
File:                     3804b16f-c703-36c2-a55b-fcb6f3dd9cd5.roa (raw, json)
Hash identifier:          KI1P41TmU/LZ0BQtj0TX42RlbKdwG5J/bNVKICO+jMk=
Subject key identifier:   6E:CB:10:62:EE:E7:AE:F2:F2:2D:7C:D2:03:AA:10:DF:C7:F2:62:46
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849BDDA39DEFEC9CB6C9729A1BC
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3804b16f-c703-36c2-a55b-fcb6f3dd9cd5.roa
Signing time:             Sun 04 May 2025 13:01:00 +0000
ROA not before:           Sun 04 May 2025 13:01:00 +0000
ROA not after:            Sat 02 Aug 2025 13:01:00 +0000
asID:                     26548
IP address blocks:        50.114.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bd:da:39:de:fe:c9:cb:6c:97:29:a1:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  4 13:01:00 2025 GMT
            Not After : Aug  2 13:01:00 2025 GMT
        Subject: CN=f62d4380-47c6-4ef1-92ee-7884f47e09db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b6:9a:b9:17:bd:0e:29:69:a9:79:c0:18:64:
                    3d:0e:2f:d7:cd:54:49:7e:c6:86:cb:20:c0:06:cf:
                    63:ea:ce:97:14:4f:2c:8b:e0:07:e6:b4:a8:a4:bf:
                    33:72:33:f6:0f:2f:a4:ae:ec:3d:55:7c:37:9d:53:
                    89:f9:f1:75:8f:38:0f:7c:27:fa:a1:b9:33:56:dc:
                    38:d0:29:6d:97:27:f9:a5:14:c6:8d:0d:35:26:31:
                    35:14:00:c3:04:05:67:70:95:87:6e:55:29:d4:aa:
                    27:b4:38:b1:2b:20:16:2c:84:61:f7:8f:ae:d3:17:
                    2e:bd:68:48:55:64:fd:28:19:bd:9d:42:cb:65:6b:
                    10:3f:1f:09:b0:df:b1:7f:d5:7c:22:7c:6a:ae:dc:
                    47:61:67:9b:91:11:9f:f6:5f:fd:e0:5a:2c:e6:06:
                    d0:40:08:34:c4:e3:1c:0b:30:c5:f2:87:80:bf:44:
                    f6:6c:47:88:61:5a:a9:db:f1:5c:f1:d6:8d:19:ba:
                    01:cc:c2:35:98:19:87:de:09:9e:27:d5:a5:38:76:
                    7a:c5:5b:44:9a:ac:d5:d0:0c:38:c1:f3:d6:ff:7f:
                    de:7d:ef:d2:bd:61:42:c2:8f:5e:20:dd:00:a1:b2:
                    10:41:76:58:c3:75:cd:e1:3f:aa:86:8d:c5:04:52:
                    cc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:CB:10:62:EE:E7:AE:F2:F2:2D:7C:D2:03:AA:10:DF:C7:F2:62:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3804b16f-c703-36c2-a55b-fcb6f3dd9cd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:fd:4c:f7:0c:d4:28:46:34:5a:3d:9b:5a:30:b3:97:83:98:
         c9:da:54:30:f6:12:9d:c8:15:8f:c0:14:01:5c:1a:f1:e7:74:
         7a:cc:ec:60:a8:4b:7e:bd:d8:d5:bf:9f:84:4f:6b:05:8b:a1:
         2a:e5:23:cc:e3:bf:05:a9:f7:f7:b1:7d:3d:b3:48:4b:8f:dd:
         e6:97:25:13:b9:24:77:e1:57:19:28:0a:5e:fe:f5:eb:c4:50:
         04:db:fd:f6:a2:b1:a1:d0:e1:0f:a8:c2:1f:84:af:82:88:e3:
         72:49:da:fd:ae:e0:ba:76:23:21:26:20:ad:2e:d1:e3:39:e0:
         70:fd:0f:bb:2d:14:74:7b:63:d9:50:1a:d1:65:b7:5c:4f:6f:
         c9:3b:8c:dd:41:fd:a5:b6:92:c3:a3:e9:10:c3:36:fe:5f:12:
         b2:69:5a:79:c0:8d:a9:90:4b:e7:77:07:bd:73:0e:83:39:fa:
         55:41:2c:43:84:bb:1d:44:81:c4:b6:dd:08:f6:41:3c:c1:31:
         de:bd:d2:b6:28:2d:f8:a9:a0:b1:e1:63:67:73:4d:6b:79:1f:
         d2:50:b6:13:b3:ef:89:e3:d4:93:28:7e:d6:3d:d9:71:f9:9a:
         e3:7a:8d:c9:8c:60:ed:cf:44:7e:61:46:b8:c1:7f:41:30:82:
         18:70:64:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:53:37 2025 by rpki-client