Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ac48ea22-3c5a-3b43-a42b-7bb7d1e8f2a3.roa
File:                     ac48ea22-3c5a-3b43-a42b-7bb7d1e8f2a3.roa (raw, json)
Hash identifier:          meX8s2gLUvoBjRKgIl8pR3Dbh+mArdWSf8I2YJrJl8Q=
Subject key identifier:   24:E5:56:75:66:08:61:8D:77:91:FD:DF:1F:22:A7:57:0A:D3:15:18
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584A1F9015BE24F1F0D7AAF71480
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ac48ea22-3c5a-3b43-a42b-7bb7d1e8f2a3.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     29802
IP address blocks:        66.206.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:15:be:24:f1:f0:d7:aa:f7:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=3a90eb1d-e81d-459e-9686-a4f73043a8e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7a:94:3b:a4:99:fd:c8:33:ce:e2:7a:59:a3:
                    ed:c0:3a:58:45:61:53:4b:3d:39:ba:fc:97:d4:b2:
                    a1:3e:b7:53:dd:fb:b2:e4:3c:ad:0f:35:03:6f:dc:
                    e6:8f:16:ab:d1:28:10:97:38:db:ee:07:a6:27:85:
                    af:9a:1e:22:13:c2:9b:ca:28:4b:d3:41:59:06:da:
                    55:c2:c4:b6:4b:17:b6:f3:e0:69:5c:f7:a0:4e:d7:
                    2c:58:e3:91:39:ca:51:9b:75:32:b3:35:2e:6d:ff:
                    43:46:97:1d:6b:f0:b6:70:6b:91:fb:df:bf:5d:14:
                    d2:75:23:b5:80:1c:d3:3a:10:83:71:4a:a3:22:9f:
                    61:d4:63:f3:d8:0e:61:66:0c:32:92:0f:bc:c7:c1:
                    15:46:5d:50:6c:a4:9a:c9:2d:d2:2e:fa:a7:eb:7c:
                    53:10:1a:c5:d9:27:1f:76:5e:dc:06:2c:57:fb:3f:
                    93:ca:75:b5:fd:80:e8:eb:a4:54:b1:d4:42:e2:16:
                    7b:c3:3d:90:24:5b:e8:e2:a7:68:97:8c:a0:88:74:
                    05:67:66:8a:8f:1f:87:4e:70:c6:8d:b5:b5:fb:cb:
                    f8:4c:be:08:de:e1:40:b1:9a:43:5d:83:83:4e:33:
                    84:ef:20:73:99:d8:1a:03:4c:63:45:4e:b8:7e:f8:
                    54:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E5:56:75:66:08:61:8D:77:91:FD:DF:1F:22:A7:57:0A:D3:15:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ac48ea22-3c5a-3b43-a42b-7bb7d1e8f2a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.206.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:32:94:44:f3:7e:70:13:08:73:0e:5a:62:a4:33:6e:cf:09:
         ef:5c:4d:0a:78:d6:67:28:98:34:9a:39:26:30:ac:c1:15:83:
         ff:d6:88:4a:58:d4:52:59:39:c9:01:8d:28:c1:f7:a7:e7:2f:
         f4:84:6d:05:f7:ff:b6:69:7d:16:7e:01:f2:5b:96:45:70:a5:
         ff:a0:da:ba:67:55:e4:c8:35:11:87:7d:9b:51:1c:01:aa:62:
         6a:3a:3c:8b:76:bf:e6:c5:56:bd:b9:2b:f7:3b:3a:dd:5e:49:
         70:9a:9f:0a:32:7d:f3:44:87:f6:fd:c9:6d:15:1f:e1:2f:d4:
         91:67:9a:b5:a3:74:f7:e9:dd:15:ad:a9:60:4f:a3:62:76:c7:
         b5:47:78:7d:ed:10:0c:2e:cb:2d:e8:6b:4f:1c:14:67:9f:d5:
         a0:aa:e1:70:e9:42:3f:4d:9a:3a:aa:6e:b1:f5:c3:4a:4b:52:
         97:09:b8:27:a1:13:63:b3:c6:b6:cc:db:57:53:ba:12:95:bc:
         c1:6e:74:6d:68:10:6a:e5:be:3f:d0:85:19:bd:79:34:f9:ef:
         28:1a:44:a0:89:1f:ac:7e:0e:77:46:21:e1:fa:90:b5:6b:e9:
         6b:54:de:7b:f4:6a:69:34:64:10:30:ca:04:21:e6:9f:d5:25:
         60:21:0b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:09:48 2025 by rpki-client