Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dd07022b-7df6-3af1-911e-05f81a35fa3e.roa
File:                     dd07022b-7df6-3af1-911e-05f81a35fa3e.roa (raw, json)
Hash identifier:          DKU2vcvUrpqp+M27Zeike3vsfeusU88lEThxxpBUEz8=
Subject key identifier:   7C:98:60:A6:C6:64:93:4F:26:11:17:93:5C:AA:1C:4C:99:65:4E:7F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A936B569CA73E1D30BF4E5380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dd07022b-7df6-3af1-911e-05f81a35fa3e.roa
Signing time:             Sun 20 Jul 2025 01:00:50 +0000
ROA not before:           Sun 20 Jul 2025 01:00:50 +0000
ROA not after:            Sat 18 Oct 2025 01:00:50 +0000
asID:                     263812
IP address blocks:        50.114.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:93:6b:56:9c:a7:3e:1d:30:bf:4e:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 20 01:00:50 2025 GMT
            Not After : Oct 18 01:00:50 2025 GMT
        Subject: CN=bec7e924-e882-4dd5-ad79-ee46783d06d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fc:d9:d8:cb:3b:e3:ae:88:3a:d3:1a:0b:79:
                    66:b7:2d:a2:9f:ac:cd:ea:4d:4e:ca:f3:cf:87:b0:
                    ba:26:e0:04:76:cb:b3:fd:9f:77:87:7a:e6:60:b5:
                    12:89:98:bc:a1:62:c8:65:48:e9:31:f0:24:5a:67:
                    ad:0a:75:f9:20:3e:fe:65:d5:af:29:0a:aa:84:c5:
                    71:dc:0d:72:99:4e:80:7e:35:f8:02:62:bc:00:39:
                    d8:47:b9:59:fa:ba:cf:99:e2:0c:b7:4a:5a:4b:0c:
                    43:0e:a3:04:51:40:d0:52:18:2c:ee:6a:b9:83:82:
                    1e:00:88:81:72:f5:5c:1d:76:d3:f6:89:69:57:0e:
                    5d:55:ce:51:45:d2:70:8d:73:9f:2e:f1:c9:2c:25:
                    bd:cd:2d:69:69:88:6d:7e:e5:05:e4:bd:fe:87:9a:
                    e9:a6:cc:e9:d1:c7:ec:a9:a9:c5:bf:4e:f4:ee:45:
                    43:43:7b:87:87:b8:54:e3:fc:b0:c6:c8:26:35:66:
                    a7:39:b6:a6:af:04:68:23:9c:8c:62:b7:de:77:00:
                    2c:87:3a:9b:50:50:77:a3:a4:06:1a:05:7e:5f:3c:
                    ff:c8:72:19:99:ac:f6:83:54:0d:45:89:1d:3f:3f:
                    7a:61:40:19:ea:16:ca:09:26:f7:0c:9f:37:da:9f:
                    34:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:98:60:A6:C6:64:93:4F:26:11:17:93:5C:AA:1C:4C:99:65:4E:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dd07022b-7df6-3af1-911e-05f81a35fa3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:1f:4b:49:9c:3e:d1:42:50:aa:b9:c8:6b:cf:01:5b:fb:5b:
         7d:ff:a5:e9:79:2a:9d:9d:47:74:0c:61:eb:31:3d:64:27:e8:
         de:f3:da:c7:cc:f1:46:43:ff:a2:26:30:90:20:b0:40:0c:3f:
         14:18:19:12:32:61:86:d4:92:ab:cd:6b:36:b3:72:53:39:3e:
         3a:8b:05:12:db:0c:b2:f6:3b:eb:97:ae:33:aa:ac:12:fe:f7:
         2c:b5:14:a6:fb:53:6b:2b:b6:94:41:4f:10:48:81:bc:20:08:
         0b:70:9f:e9:a0:2d:9c:b9:f8:86:b6:f1:0d:3c:42:29:92:fa:
         10:3f:3d:e8:0d:08:c9:8e:77:97:62:19:ce:b1:a4:44:48:8d:
         f7:20:ce:fe:ad:71:26:51:6e:a0:59:d5:ac:ed:36:fc:a2:66:
         9f:2b:17:c8:17:04:e5:88:e6:26:11:78:22:43:b3:53:be:ef:
         29:4c:ba:85:e2:2f:de:64:24:e3:13:06:63:ee:a7:a2:32:b1:
         f5:41:ec:76:09:e7:b4:da:ad:05:58:5d:c0:63:7e:8f:6a:74:
         04:ac:5d:b9:b3:05:7b:f2:69:f8:20:06:20:66:dd:2b:df:64:
         79:06:cd:c7:5a:6d:fd:fc:af:65:86:e6:15:5e:70:fc:82:69:
         96:fa:1d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 13:55:57 2025 by rpki-client