Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/50e38687-6764-3cf4-b44b-0f3741733f81.roa
File:                     50e38687-6764-3cf4-b44b-0f3741733f81.roa (raw, json)
Hash identifier:          o/YdjDgjH1xE7JR79VOfgT9HTE9L8sNxnwz6n5SwsMs=
Subject key identifier:   35:2B:1E:86:37:F7:4F:BB:00:56:0E:23:99:39:64:CC:D4:15:D2:9C
Certificate issuer:       /CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
Certificate serial:       010D0C9F4328584AFAB682A98332E52BE2D88E98
Authority key identifier: A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/50e38687-6764-3cf4-b44b-0f3741733f81.roa
Signing time:             Tue 26 Aug 2025 01:00:32 +0000
ROA not before:           Tue 26 Aug 2025 01:00:32 +0000
ROA not after:            Mon 24 Nov 2025 02:00:32 +0000
asID:                     200288
IP address blocks:        69.168.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fa:b6:82:a9:83:32:e5:2b:e2:d8:8e:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
        Validity
            Not Before: Aug 26 01:00:32 2025 GMT
            Not After : Nov 24 02:00:32 2025 GMT
        Subject: CN=229ec92f-394b-4800-a960-3cdf5cb89f3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b5:8f:75:fd:75:a2:b0:43:6e:4b:68:df:69:
                    7b:03:21:31:cb:4b:3e:4d:0e:dc:0a:8b:74:8c:b3:
                    2d:e1:6f:be:d9:0a:ff:5f:b1:e0:a8:e0:aa:81:95:
                    97:83:eb:87:c2:d0:1c:70:8b:2c:66:7e:8c:10:31:
                    85:79:00:06:61:d8:db:c3:96:b2:ad:4f:4f:5c:fa:
                    94:06:21:c9:32:ec:3e:1c:09:34:8f:43:5f:90:9d:
                    73:f9:f7:fe:d6:51:2f:5f:68:63:97:fa:42:1d:57:
                    2f:af:a8:88:a4:5f:d4:59:d0:3b:f1:de:2e:cf:10:
                    20:a7:19:fb:a1:c7:67:8d:49:a1:c8:8d:da:df:e1:
                    33:dc:bf:47:4a:7f:79:b4:e7:76:fe:d3:d5:7f:c8:
                    30:26:e7:cf:0d:ad:12:4b:a3:44:41:a1:cf:cc:c4:
                    a7:51:99:9c:92:f6:a3:b5:90:63:8f:5b:ac:dd:09:
                    f1:94:b4:b8:95:c0:8d:25:15:be:c5:1a:d0:47:41:
                    82:f9:77:a3:6f:89:cc:90:c2:9e:04:ef:53:37:6e:
                    2e:16:05:ba:2a:7c:63:3c:3f:28:0f:6b:95:1a:cc:
                    aa:aa:2c:e5:03:b1:af:a9:3a:e8:19:ae:ea:c6:53:
                    6a:55:32:a1:9c:97:63:97:ec:74:80:ba:a3:0e:0e:
                    27:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:2B:1E:86:37:F7:4F:BB:00:56:0E:23:99:39:64:CC:D4:15:D2:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/50e38687-6764-3cf4-b44b-0f3741733f81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl

            X509v3 Authority Key Identifier:
                keyid:A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.168.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:73:89:75:2b:26:d0:e4:9a:4b:84:37:bd:6d:05:da:e2:91:
         1a:dd:ee:1f:84:1b:4f:7b:61:9c:8b:e9:98:64:8a:95:ab:c8:
         13:e1:ac:b6:1a:bf:4e:4b:ee:29:c5:84:af:4c:b7:e0:44:da:
         f3:0a:58:92:d4:22:9a:15:c2:69:11:30:9d:6e:d9:c4:87:a4:
         b5:83:ef:cd:22:cc:0f:8f:ca:30:4f:ce:46:e4:1b:ac:54:23:
         c0:3f:22:5e:6d:8d:74:cd:8c:07:ad:bd:ed:41:49:f0:de:44:
         17:99:59:48:6e:98:76:dd:ca:d7:1a:f7:9e:99:5d:06:22:ef:
         4d:49:d6:18:42:fa:37:60:d9:cc:cf:1b:7c:b5:2f:ac:8d:7c:
         91:b7:82:89:cb:b3:d6:a0:8e:d9:3b:9b:8b:f1:84:4e:f0:48:
         b8:1e:77:57:f6:c0:d3:b4:e9:29:a0:73:33:ca:31:19:63:00:
         bd:a2:ed:29:03:85:cf:d5:ec:a4:92:30:e6:fd:6e:bd:e6:ad:
         9d:71:82:e8:cf:ca:f3:4c:c8:fb:d4:42:9e:cc:63:fc:81:5e:
         01:05:46:80:ff:54:b5:fe:ef:b9:78:d3:e7:99:7d:6e:ad:0f:
         21:b9:64:be:58:25:c1:02:94:bb:d2:8c:c7:23:ee:97:ce:0e:
         78:c3:f1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 04:59:02 2025 by rpki-client