Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/49950327-e458-3c3a-8593-2cea9f0380f0.roa
File:                     49950327-e458-3c3a-8593-2cea9f0380f0.roa (raw, json)
Hash identifier:          snZS+PogFikA1dSAcrrK7p4p5rnwA0TEgGgs0tzR8uY=
Subject key identifier:   21:80:D6:3D:4F:93:61:E7:56:C0:D7:64:59:2E:B0:A8:8F:1E:41:98
Certificate issuer:       /CN=35c465ca-0a44-43ea-a23f-e0d2de220e1a
Certificate serial:       010D0C9F4328584AB91B957BC09BE1E837B04C00
Authority key identifier: B7:37:30:1E:20:83:CB:C9:14:43:9B:7C:6E:43:4A:B7:7A:42:42:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/49950327-e458-3c3a-8593-2cea9f0380f0.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     3737
IP address blocks:        24.55.128.0/19 maxlen: 24
                          24.102.128.0/17 maxlen: 24
                          24.115.0.0/16 maxlen: 24
                          24.152.192.0/18 maxlen: 24
                          24.229.0.0/16 maxlen: 24
                          24.238.32.0/19 maxlen: 24
                          24.238.64.0/19 maxlen: 24
                          24.246.224.0/19 maxlen: 24
                          50.29.128.0/17 maxlen: 24
                          64.67.0.0/16 maxlen: 24
                          69.12.12.0/22 maxlen: 24
                          70.15.0.0/16 maxlen: 24
                          70.44.0.0/16 maxlen: 24
                          75.97.0.0/16 maxlen: 24
                          104.36.124.0/22 maxlen: 24
                          216.49.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/35c465ca-0a44-43ea-a23f-e0d2de220e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/35c465ca-0a44-43ea-a23f-e0d2de220e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:95:7b:c0:9b:e1:e8:37:b0:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35c465ca-0a44-43ea-a23f-e0d2de220e1a
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=3891b5dd-6006-4492-b64b-9ea08b7ba657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a0:21:c5:87:7e:de:63:a2:6d:66:dc:65:3b:
                    f4:26:e2:d6:10:34:e3:00:26:f9:66:d7:d8:2d:e6:
                    9b:aa:74:32:c6:43:a0:f0:74:ad:f2:1f:c6:8c:c7:
                    da:18:c5:57:d7:80:08:17:48:bb:8a:a9:40:d7:85:
                    b3:88:85:b7:71:d9:6a:ea:66:b5:b0:d5:03:2c:53:
                    6a:49:de:f0:ef:59:42:02:3b:05:4e:08:d0:f5:59:
                    93:24:28:e1:dc:3d:ea:e8:2d:37:1a:26:dc:5a:12:
                    35:74:14:37:e5:f3:46:f7:9a:d7:fc:4e:6f:93:c3:
                    ae:3a:77:d9:5f:62:7a:d7:4c:5c:df:64:7b:ca:7e:
                    64:69:03:16:6d:bf:11:13:f0:8b:5d:21:18:5c:cd:
                    a2:bd:31:2d:19:e9:70:c0:5b:71:bf:1f:a5:ac:17:
                    9e:18:c1:6b:d9:0a:cf:a9:16:71:9c:66:13:4d:33:
                    36:54:f0:a5:7a:60:70:59:70:7b:68:a0:7d:82:5d:
                    eb:55:e1:bf:dd:34:e9:c4:60:0b:93:29:f7:d6:94:
                    62:19:f7:b1:76:1a:2d:9b:c6:9c:fb:08:c4:dc:2e:
                    1d:9a:57:47:75:5b:44:b7:33:f0:28:de:08:e8:4d:
                    8b:69:20:18:63:b3:09:68:6e:e3:e0:bc:fa:55:30:
                    f7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:80:D6:3D:4F:93:61:E7:56:C0:D7:64:59:2E:B0:A8:8F:1E:41:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/49950327-e458-3c3a-8593-2cea9f0380f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/35c465ca-0a44-43ea-a23f-e0d2de220e1a.crl

            X509v3 Authority Key Identifier:
                keyid:B7:37:30:1E:20:83:CB:C9:14:43:9B:7C:6E:43:4A:B7:7A:42:42:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.55.128.0/19
                  24.102.128.0/17
                  24.115.0.0/16
                  24.152.192.0/18
                  24.229.0.0/16
                  24.238.32.0-24.238.95.255
                  24.246.224.0/19
                  50.29.128.0/17
                  64.67.0.0/16
                  69.12.12.0/22
                  70.15.0.0/16
                  70.44.0.0/16
                  75.97.0.0/16
                  104.36.124.0/22
                  216.49.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:15:b8:8b:65:0a:f4:69:e5:e2:37:8c:80:0f:51:88:25:df:
         63:f5:f1:eb:db:b3:a0:be:52:7a:00:3d:76:ca:7d:f0:b1:d8:
         bf:22:d4:ba:01:d1:69:bf:54:e7:d3:f2:53:a1:30:f7:34:ab:
         d6:b7:aa:75:05:ef:2f:18:ad:6e:20:ff:31:61:75:8b:a7:ac:
         61:a7:80:ed:a2:de:04:eb:28:b9:91:bc:e6:80:7e:34:63:3e:
         7d:af:66:dc:1a:2b:5c:56:b0:2e:00:eb:9c:ee:a2:bc:0e:c8:
         f7:e8:82:69:e0:4e:79:ed:eb:10:33:92:21:35:17:8a:dd:32:
         76:e8:68:da:a5:08:de:19:d4:f3:dd:ea:8c:17:27:be:ae:93:
         7c:00:9d:e3:cf:8e:7a:b4:c5:cf:d9:af:94:a2:21:bf:ea:ab:
         84:aa:8a:31:68:0f:38:fd:e4:e5:c3:5f:6a:a2:cf:c3:55:3b:
         6b:e2:84:cc:f4:0a:91:9d:f0:26:91:64:aa:41:01:94:0a:76:
         53:dd:49:a9:d6:26:19:21:34:24:0f:6c:0f:de:50:16:96:06:
         76:94:3e:1a:30:2b:ba:ea:a4:72:2e:2b:6b:87:1f:99:c4:eb:
         68:68:bd:17:7f:39:f4:6d:3e:b7:ab:2e:93:20:b8:92:20:39:
         b7:e4:18:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:29:26 2025 by rpki-client