Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aed398b9-848a-379a-8cf6-f0654ee83612.roa
File:                     aed398b9-848a-379a-8cf6-f0654ee83612.roa (raw, json)
Hash identifier:          XPkkIhG2g6GT4CupVRb8qK/0vn8b22iOfSIO1/YOjKM=
Subject key identifier:   A4:EA:7A:9B:FB:8D:04:4C:96:D9:CA:E7:62:26:6F:59:68:2B:EF:36
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849D2CA29114B5C7F5A311D0980
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aed398b9-848a-379a-8cf6-f0654ee83612.roa
Signing time:             Mon 12 May 2025 01:00:47 +0000
ROA not before:           Mon 12 May 2025 01:00:47 +0000
ROA not after:            Sun 10 Aug 2025 01:00:47 +0000
asID:                     401152
IP address blocks:        50.114.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d2:ca:29:11:4b:5c:7f:5a:31:1d:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 12 01:00:47 2025 GMT
            Not After : Aug 10 01:00:47 2025 GMT
        Subject: CN=412fef73-e241-4e50-a3f2-afb9cb21fc45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6c:9d:0f:7b:3e:90:98:1f:35:1f:b4:d9:e3:
                    74:01:8b:77:69:c1:57:41:a5:e8:ef:e1:9a:c2:cf:
                    cd:a0:1f:0e:da:ad:5e:10:44:a8:cf:ec:28:2b:bc:
                    1f:53:4d:6d:37:7a:72:d3:4c:60:41:4d:a0:1e:28:
                    1a:d4:e3:29:21:68:1e:19:ae:d3:4f:32:f3:1d:01:
                    73:71:eb:e7:4e:68:ac:99:9b:11:72:74:13:51:bb:
                    29:ac:37:81:10:07:d9:c1:c1:76:ca:e1:48:5e:e5:
                    61:99:c6:b6:17:9f:e3:e3:b4:0d:9d:91:5b:31:61:
                    8d:df:79:88:3f:f1:8a:64:19:ad:40:34:24:6b:5c:
                    7d:2a:4f:b1:f5:80:58:6e:87:e6:5b:ef:91:ed:0e:
                    d8:12:4f:62:fd:55:1d:66:15:a5:8f:81:28:b1:9b:
                    fa:35:e9:97:65:a7:7e:d8:6d:bf:23:f6:50:05:cb:
                    f4:32:8e:62:3f:86:52:ad:e9:d9:de:78:e8:a8:e5:
                    51:b2:74:50:7c:10:86:b2:c0:8f:c6:05:0a:ae:63:
                    fc:04:d1:bf:bc:2c:5f:53:5e:ff:f7:1c:b3:59:40:
                    c0:50:b0:4b:52:f5:44:9f:a8:2f:78:66:7b:3b:94:
                    1b:5f:57:f3:1e:39:bb:6f:3b:00:99:4d:de:f5:3c:
                    f8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:EA:7A:9B:FB:8D:04:4C:96:D9:CA:E7:62:26:6F:59:68:2B:EF:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aed398b9-848a-379a-8cf6-f0654ee83612.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:a5:32:bd:4e:21:f8:88:fb:e1:f4:4c:f1:1e:1d:d5:9a:71:
         7f:10:c8:6f:cd:68:50:a7:a3:0f:cb:02:24:80:8c:3e:3a:d8:
         90:2d:13:8c:f3:7b:88:2f:0e:a4:0b:13:a7:ef:e3:b9:f4:b1:
         2c:a9:07:0e:3d:f9:7c:cb:67:64:db:e1:26:a1:b6:19:da:b5:
         4c:07:00:54:f0:a0:3e:ac:8c:b7:3b:13:07:51:b3:3c:57:4c:
         ee:94:79:f7:e5:f8:a5:6d:9a:d2:64:3a:2f:7e:67:41:48:8b:
         8b:9e:a1:ec:dc:13:d4:4e:d7:f8:3b:3e:46:f3:8e:df:d5:78:
         41:ca:b7:02:11:e9:d0:4f:98:69:2c:55:af:b8:64:f5:19:7c:
         70:a7:f3:6e:a3:6b:f1:28:2d:4a:a3:14:40:a8:cf:5c:10:e2:
         ef:c8:2f:a8:1f:59:e0:b8:33:45:72:28:59:ae:dc:c0:89:d4:
         66:1f:a2:08:8e:e6:40:d1:46:78:7d:1e:1c:33:45:e8:eb:3b:
         e7:80:9c:64:4c:67:02:a8:61:c0:15:51:fd:d1:21:30:67:f8:
         52:ff:0b:cf:b6:49:cd:52:6d:cd:82:cc:93:1f:a4:8d:c1:b4:
         ad:da:5a:69:e3:81:67:5b:f7:55:33:1c:4c:34:40:16:c1:c1:
         0e:ca:8a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:33:18 2025 by rpki-client