Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e50fc226-9e47-3ac7-8228-a992989c0809.roa
File:                     e50fc226-9e47-3ac7-8228-a992989c0809.roa (raw, json)
Hash identifier:          hl2RtcPstCZtbi8ctB2FevlNaXiIvVsiNyT1F+PYxm4=
Subject key identifier:   C3:A3:8F:8A:9F:4C:3F:EE:A4:C4:57:D0:CB:C4:C3:EF:DA:D2:28:F1
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584898D61EE98F9343628DCED6F0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e50fc226-9e47-3ac7-8228-a992989c0809.roa
Signing time:             Sun 19 Jan 2025 14:00:52 +0000
ROA not before:           Sun 19 Jan 2025 14:00:52 +0000
ROA not after:            Sat 19 Apr 2025 13:00:52 +0000
asID:                     7029
IP address blocks:        69.66.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:98:d6:1e:e9:8f:93:43:62:8d:ce:d6:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jan 19 14:00:52 2025 GMT
            Not After : Apr 19 13:00:52 2025 GMT
        Subject: CN=e15d0e58-bd4a-48a3-96d4-21214f936457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b6:6d:ea:25:42:5f:e2:b6:1a:d9:38:4c:d6:
                    92:1a:e0:89:79:d1:16:12:8f:ea:19:20:f4:85:81:
                    90:3a:42:56:c2:10:45:46:a1:c1:75:c6:ea:f1:ec:
                    66:ac:e5:e3:e4:7c:69:99:70:49:d3:28:54:82:b0:
                    ec:5a:b2:9e:ab:5e:36:1c:15:56:b8:11:95:45:b6:
                    c7:dc:0b:8f:70:01:56:c3:c6:e3:89:11:d7:96:c3:
                    6f:48:c6:38:e1:b8:2f:a3:5b:19:f0:c0:b4:1b:77:
                    b9:15:08:7c:fb:a0:e0:70:07:de:0d:d2:03:ed:9a:
                    b1:a4:19:2e:3d:90:5f:05:b2:cc:51:70:fe:61:2d:
                    09:cd:8d:25:88:08:eb:4a:40:bc:4a:5c:47:ad:2c:
                    ed:7f:3d:8e:ea:03:5c:34:3d:c9:45:1c:00:95:78:
                    07:94:c1:37:61:c2:01:2e:08:b0:98:5a:86:db:48:
                    fe:70:11:79:69:bf:52:c1:f7:bc:70:b4:ba:c4:5c:
                    1b:8b:ec:5b:a4:2d:0b:43:b5:73:18:7a:ef:4a:4b:
                    d4:b1:cb:53:8d:69:9b:ec:4f:b8:8e:73:44:59:12:
                    9a:27:67:b6:69:54:30:5d:67:02:a7:6d:13:2c:7f:
                    47:03:96:8e:56:e7:d6:59:c1:35:83:45:44:97:aa:
                    55:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A3:8F:8A:9F:4C:3F:EE:A4:C4:57:D0:CB:C4:C3:EF:DA:D2:28:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e50fc226-9e47-3ac7-8228-a992989c0809.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.66.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:77:b7:cb:ce:c1:91:d1:d1:29:3d:df:2f:9f:f2:44:fd:f3:
         95:fe:2a:12:28:3c:f8:bf:2f:9e:a3:5c:69:4f:67:78:ac:9d:
         14:73:bd:2b:35:17:65:29:66:ae:84:9c:e0:af:30:f3:72:ba:
         45:d6:d7:67:c3:74:78:79:77:73:0f:99:f0:8e:bd:d5:c2:63:
         ee:95:53:97:b3:03:15:8e:b9:a8:29:93:6c:9b:74:31:88:fe:
         12:fa:3b:b4:f4:d7:aa:7c:28:c8:28:97:c8:ce:91:c4:2e:b5:
         99:17:89:f9:16:b3:a6:f9:27:09:d3:c8:be:b3:30:4b:90:93:
         ac:95:19:82:f5:1b:0f:79:19:e1:41:47:2d:e4:62:1b:fa:62:
         f5:51:0b:43:4e:ae:14:44:f2:e9:59:3b:60:8e:99:fe:f5:9d:
         f9:e9:08:b2:f0:ec:90:c0:65:3b:03:c5:53:7b:4b:44:ba:84:
         48:95:f2:e9:38:b9:c9:bb:56:7e:8d:39:67:49:33:15:42:51:
         87:10:0e:50:dd:20:9b:b5:22:a0:59:2f:39:36:d7:34:94:06:
         45:03:85:3a:37:5d:6b:a8:9b:ae:14:7a:cb:55:f3:06:8f:ed:
         32:84:4a:99:d5:4b:0c:0f:14:ed:b5:66:a2:be:53:a3:be:4b:
         44:e4:c9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:47:42 2025 by rpki-client