Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3db7ca43-ca78-353d-89ba-635fa8e96323.roa
File:                     3db7ca43-ca78-353d-89ba-635fa8e96323.roa (raw, json)
Hash identifier:          c4W6qYbmCc0eOkZr+vIasc9KWJuTgEcnk+0+CnU2GmI=
Subject key identifier:   ED:22:23:E2:FD:72:F7:09:52:C4:AC:52:44:CF:AA:61:42:FF:66:F6
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584AB0BB7DDE1501116266045820
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3db7ca43-ca78-353d-89ba-635fa8e96323.roa
Signing time:             Wed 30 Jul 2025 13:00:40 +0000
ROA not before:           Wed 30 Jul 2025 13:00:40 +0000
ROA not after:            Tue 28 Oct 2025 13:00:40 +0000
asID:                     44477
IP address blocks:        50.114.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b0:bb:7d:de:15:01:11:62:66:04:58:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 30 13:00:40 2025 GMT
            Not After : Oct 28 13:00:40 2025 GMT
        Subject: CN=0212ca48-75c7-4529-ab84-76e69cb0b898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c7:05:b2:5f:e4:bb:9c:c4:d2:a8:fb:7f:88:
                    63:11:39:f5:38:b4:57:6e:fd:43:5b:96:30:87:e9:
                    6d:0d:ae:b7:74:0b:b7:85:ba:cb:90:c9:b6:d0:37:
                    c7:d6:40:84:80:ee:ce:ff:ad:9e:60:1d:c4:b5:1a:
                    68:d4:25:bb:4d:40:b3:02:9a:04:d5:ca:15:06:d6:
                    9c:31:6a:7b:25:09:28:47:5d:24:bc:aa:c3:5e:4f:
                    9b:4b:42:15:1c:35:0e:60:30:0b:d6:58:80:9d:07:
                    a3:85:46:c9:79:54:7d:61:4a:dd:b4:c9:42:99:a7:
                    65:bc:42:3b:60:aa:22:c0:89:72:7a:7e:0b:98:ba:
                    fa:5c:9b:67:f9:c2:8c:fa:84:ad:b7:00:93:5d:a3:
                    19:0a:8e:7a:0c:3b:ac:30:f6:42:c5:61:f5:f0:40:
                    44:b3:2f:c6:32:a4:23:91:13:6f:36:c9:63:a6:2c:
                    b4:97:c3:08:1e:b8:f7:0b:bc:59:f4:80:7a:c7:e7:
                    a4:1e:49:dd:74:56:42:45:27:36:a5:2f:cc:49:f4:
                    83:a0:00:97:20:1d:5c:59:b3:8d:71:3c:d9:89:06:
                    0e:63:4a:23:b0:30:77:e0:11:3a:2c:c4:7a:40:54:
                    8b:7f:8e:d6:63:58:e8:0e:c2:15:d3:e0:35:02:06:
                    08:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:22:23:E2:FD:72:F7:09:52:C4:AC:52:44:CF:AA:61:42:FF:66:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3db7ca43-ca78-353d-89ba-635fa8e96323.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:65:5e:63:4c:52:d8:b8:3f:56:2e:b0:93:12:ec:3f:85:9f:
         b6:60:bc:0c:e5:da:e1:aa:9c:5d:51:75:e1:cf:32:e0:1a:90:
         4c:18:d8:5d:0a:d2:a0:77:f0:8d:53:1a:f0:8b:21:85:d3:dd:
         e5:68:e1:76:fc:d5:53:76:8e:df:c5:7e:3b:1d:1e:54:62:53:
         dc:59:eb:9d:90:95:0d:d9:00:6e:04:f5:b4:e8:04:a3:50:78:
         d1:1d:57:7d:65:ec:e9:83:d8:d8:1b:85:17:9a:ab:06:25:2f:
         a1:ec:8b:a2:2f:3d:73:3d:7f:02:01:aa:25:91:dc:30:8b:f2:
         0c:80:b3:b1:9a:1a:49:6a:a9:5f:e9:20:72:bf:c9:ce:ce:53:
         64:d1:62:23:73:6a:75:40:0b:ad:a0:ec:3d:53:02:d1:aa:84:
         11:38:1a:ee:3a:d6:ac:65:b4:8f:c7:a8:c2:e7:2d:06:66:cb:
         92:07:6a:97:da:9b:a6:b2:b0:a8:ef:07:a5:6a:91:38:c4:46:
         05:81:ff:1e:4a:ed:a5:f1:50:52:d2:61:fb:0d:d2:30:8a:74:
         25:32:d5:fc:ea:e4:ba:39:7a:cd:16:78:df:a9:ed:76:76:e6:
         0a:62:c5:30:1d:6e:8e:50:ee:8b:2a:13:23:df:a7:49:44:ec:
         9e:c7:5c:a0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqwu33eFQERYmYEWCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDczMDEzMDA0MFoXDTI1MTAyODEzMDA0MFowLzEtMCsGA1UEAxMk
MDIxMmNhNDgtNzVjNy00NTI5LWFiODQtNzZlNjljYjBiODk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMcFsl/ku5zE0qj7f4hjETn1OLRXbv1DW5Yw
h+ltDa63dAu3hbrLkMm20DfH1kCEgO7O/62eYB3EtRpo1CW7TUCzApoE1coVBtac
MWp7JQkoR10kvKrDXk+bS0IVHDUOYDAL1liAnQejhUbJeVR9YUrdtMlCmadlvEI7
YKoiwIlyen4LmLr6XJtn+cKM+oSttwCTXaMZCo56DDusMPZCxWH18EBEsy/GMqQj
kRNvNsljpiy0l8MIHrj3C7xZ9IB6x+ekHknddFZCRSc2pS/MSfSDoACXIB1cWbON
cTzZiQYOY0ojsDB34BE6LMR6QFSLf47WY1joDsIV0+A1AgYINwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO0iI+L9cvcJUsSsUkTPqmFC/2b2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvM2RiN2NhNDMtY2E3OC0z
NTNkLTg5YmEtNjM1ZmE4ZTk2MzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnKlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIllXmNMUti4P1YusJMS7D+Fn7ZgvAzl2uGqnF1RdeHPMuAakEwY2F0K
0qB38I1TGvCLIYXT3eVo4Xb81VN2jt/FfjsdHlRiU9xZ652QlQ3ZAG4E9bToBKNQ
eNEdV31l7OmD2NgbhReaqwYlL6Hsi6IvPXM9fwIBqiWR3DCL8gyAs7GaGklqqV/p
IHK/yc7OU2TRYiNzanVAC62g7D1TAtGqhBE4Gu461qxltI/HqMLnLQZmy5IHapfa
m6aysKjvB6VqkTjERgWB/x5K7aXxUFLSYfsN0jCKdCUy1fzq5Lo5es0WeN+p7XZ2
5gpixTAdbo5Q7osqEyPfp0lE7J7HXKA=
-----END CERTIFICATE-----
Generated at Mon Aug 4 08:24:26 2025 by rpki-client