Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/89fa63d7-0bc5-3982-acae-e33a4274f567.roa
File:                     89fa63d7-0bc5-3982-acae-e33a4274f567.roa (raw, json)
Hash identifier:          OhwwWmAEmnQ++FkX5QHe+z1I0+hbG8fYbTR6eR5Tyu4=
Subject key identifier:   CE:1D:80:A5:BC:B4:95:65:D8:F6:5F:47:32:85:21:07:2C:72:3F:79
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849CFFF78A60EAFF9BFEBEB1880
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/89fa63d7-0bc5-3982-acae-e33a4274f567.roa
Signing time:             Sun 11 May 2025 01:00:47 +0000
ROA not before:           Sun 11 May 2025 01:00:47 +0000
ROA not after:            Sat 09 Aug 2025 01:00:47 +0000
asID:                     44477
IP address blocks:        50.114.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cf:ff:78:a6:0e:af:f9:bf:eb:eb:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 11 01:00:47 2025 GMT
            Not After : Aug  9 01:00:47 2025 GMT
        Subject: CN=b5c28fcf-9f9b-4fd3-a3a5-4d5bf15cc976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a4:e0:e3:ad:bf:bf:31:59:c7:12:d3:d1:43:
                    26:67:73:0b:78:ae:5b:72:f1:bf:13:14:60:a4:71:
                    59:55:8e:be:66:9e:64:1f:4d:75:08:0f:d2:6f:6a:
                    b2:33:f2:fb:e0:53:4e:8d:dd:a5:d3:c9:6d:9c:a6:
                    97:31:57:77:b7:90:03:43:27:64:50:e8:b7:b4:dc:
                    e5:0f:84:d7:22:f8:06:e9:fd:6a:f1:37:6f:2c:9e:
                    e7:3c:a1:b7:83:fe:55:27:a9:3e:ff:96:a7:23:8d:
                    ca:e3:70:e3:6f:3d:ae:f6:70:13:53:30:9d:a4:bc:
                    e5:ec:f6:20:3b:d6:e4:90:1f:b6:2b:61:87:f8:b2:
                    41:9d:59:c4:55:74:13:3b:23:cc:de:52:e8:dc:9c:
                    ab:d1:c8:3d:8a:3c:3e:f5:48:6b:86:6b:b3:0c:e6:
                    d4:ea:71:85:04:a2:00:05:f6:ab:31:bf:3b:4a:4a:
                    1e:93:f8:94:43:9e:8e:fe:f0:96:28:01:23:6e:d3:
                    9c:98:d2:46:58:31:2a:02:ba:72:35:eb:3d:d5:c8:
                    47:dc:f3:71:53:a2:56:79:65:0d:de:65:b9:e3:bd:
                    2f:c8:5c:a3:86:15:f1:2f:f7:44:b1:3f:fe:0f:6e:
                    63:e5:f1:f1:ec:36:99:2c:51:04:b2:55:9c:52:01:
                    9b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:1D:80:A5:BC:B4:95:65:D8:F6:5F:47:32:85:21:07:2C:72:3F:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/89fa63d7-0bc5-3982-acae-e33a4274f567.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:3e:b7:8f:72:07:36:ad:e0:af:62:74:de:ea:72:7d:e6:dc:
         ef:73:ac:33:96:5c:aa:c9:50:70:64:d4:b7:0d:11:61:fb:b8:
         15:72:93:3b:74:a5:b3:e2:58:04:d4:be:d1:24:75:52:a2:91:
         48:80:3b:82:b1:ac:59:6b:0c:d8:54:1b:55:9d:40:b1:a6:55:
         86:61:9b:88:f9:16:03:81:47:ed:f4:2e:b6:f9:75:9a:87:13:
         1d:af:8a:1a:73:09:ba:44:f1:95:72:66:af:e5:b0:8b:f7:c9:
         77:95:2c:dc:9c:75:a7:12:2d:10:b1:a7:87:d4:7f:71:a7:76:
         28:d5:de:a1:fa:9b:d9:60:8d:b6:7d:aa:66:45:e1:54:fd:e5:
         30:39:9e:67:55:27:95:dd:6c:47:e5:ed:b0:13:21:38:0e:25:
         3f:f8:cf:25:dc:0a:68:48:d8:54:53:2e:9b:e3:44:09:81:94:
         98:aa:47:c2:56:f7:06:c4:34:e4:d8:43:20:d1:b2:14:b2:b6:
         ab:24:1b:38:4b:6a:d1:71:9a:a4:10:ed:9f:4d:49:3f:d8:24:
         f2:9e:a9:a2:4b:7d:1e:b2:ef:74:8a:72:d2:a5:75:9f:1e:23:
         49:4e:e4:9d:1a:17:e3:0a:c9:6d:80:d4:83:8c:ca:af:07:69:
         b3:c5:7e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:12:09 2025 by rpki-client