Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ac48ea22-3c5a-3b43-a42b-7bb7d1e8f2a3.roa
File:                     ac48ea22-3c5a-3b43-a42b-7bb7d1e8f2a3.roa (raw, json)
Hash identifier:          DObEdkFeiihbPUnUgNNnKan/p4JusMPuFBnyv/eQ224=
Subject key identifier:   52:90:3C:B9:84:18:D3:1B:3C:22:C0:21:98:5B:42:AA:F5:AC:13:63
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584B004BE315C62A96319F510300
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ac48ea22-3c5a-3b43-a42b-7bb7d1e8f2a3.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     29802
IP address blocks:        66.206.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Sep 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4b:e3:15:c6:2a:96:31:9f:51:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=15757254-d5d2-4667-a078-cb93dc251a08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2b:32:8d:5d:75:3e:7e:4f:73:ee:32:36:71:
                    ec:42:e1:59:60:fe:ee:52:e2:1d:50:6f:69:8e:96:
                    b9:1b:02:61:b4:43:55:37:bf:92:ab:d9:af:78:ba:
                    41:be:34:06:07:25:2d:67:e2:9b:7c:64:43:57:4f:
                    2d:95:69:1b:c8:04:d9:d7:ef:77:d9:44:0e:5b:94:
                    4f:88:ad:db:9a:e9:9e:1f:e9:96:57:b3:cb:bc:25:
                    25:90:f6:27:f4:9e:bc:9e:f4:b4:8c:ad:67:27:b9:
                    f2:0b:ee:3a:78:ac:37:ed:68:18:d6:01:0b:85:d7:
                    a7:f9:2a:97:7b:f8:b6:3a:af:36:ec:c0:c8:c8:2e:
                    df:f2:0c:84:2a:c7:6e:5a:d7:cc:2c:51:ee:12:f2:
                    a1:59:9b:ce:74:79:64:1a:ad:c6:87:53:85:fc:fa:
                    87:69:44:cc:fe:73:70:eb:ff:e7:65:ab:ff:97:35:
                    4d:7e:f7:0f:4c:86:4f:44:33:7e:1a:e2:40:35:8d:
                    e4:14:90:2f:62:ca:37:f4:8d:59:fc:bd:d7:c2:cb:
                    39:fb:c5:9b:13:da:ab:07:78:e5:63:30:51:3e:25:
                    e5:92:d0:ae:59:00:16:99:05:b4:92:d3:00:3c:de:
                    ee:0e:c4:23:98:2b:ff:92:03:ce:d5:a4:67:85:25:
                    3c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:90:3C:B9:84:18:D3:1B:3C:22:C0:21:98:5B:42:AA:F5:AC:13:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ac48ea22-3c5a-3b43-a42b-7bb7d1e8f2a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.206.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:4e:54:23:29:cc:fa:71:70:07:c4:11:62:40:ec:ee:a5:22:
         4f:0d:da:03:74:8a:f4:11:fb:e6:cd:38:1a:f9:9d:6f:36:53:
         5b:b8:50:44:8b:42:f5:e8:30:73:6a:40:de:e7:84:b8:f8:aa:
         18:1a:40:b3:b7:98:cd:39:35:77:de:ef:21:26:55:81:68:22:
         d4:3f:43:e2:69:a5:e4:3a:87:4a:16:6c:aa:20:46:2f:4c:cc:
         8d:ae:10:04:e9:80:44:0d:6d:6f:2a:a0:05:ab:75:ef:14:c6:
         c1:bc:29:8f:5e:45:88:82:2b:62:7e:4d:7f:0c:7c:c8:6a:f4:
         88:f7:4c:ce:9b:90:1a:7c:89:78:84:b0:88:1f:64:e1:b1:4b:
         30:73:c5:c7:8e:57:f9:78:c0:6e:ee:97:93:09:a5:52:04:1e:
         17:15:ac:da:85:12:3b:80:83:2a:3f:18:2e:b5:77:f2:c9:94:
         87:79:01:55:23:45:7e:26:99:9f:0c:4f:3a:76:ab:e7:bb:a6:
         38:c6:3c:e6:be:b4:c5:79:2d:91:ee:30:d4:14:b5:09:a8:68:
         2f:54:10:fa:b5:c7:b2:e6:0f:94:d6:ba:73:e9:ff:1c:3e:65:
         ec:b2:74:a2:c4:83:cc:75:df:92:fd:7b:c1:69:c3:df:18:01:
         fc:3d:27:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 13:50:58 2025 by rpki-client