Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b21df912-c6e7-36ee-b1c1-ba8c46bc456f.roa
File:                     b21df912-c6e7-36ee-b1c1-ba8c46bc456f.roa (raw, json)
Hash identifier:          GMW3LBYH2SAfKuBBkTw6aqkxspctq4qZC55hisWXJ3Y=
Subject key identifier:   2D:13:59:71:D4:8E:EB:00:B8:9D:60:70:D7:5D:96:F9:03:44:A8:8F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584AB0BB7CFC96B86E1513C39700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b21df912-c6e7-36ee-b1c1-ba8c46bc456f.roa
Signing time:             Wed 30 Jul 2025 13:00:40 +0000
ROA not before:           Wed 30 Jul 2025 13:00:40 +0000
ROA not after:            Tue 28 Oct 2025 13:00:40 +0000
asID:                     44477
IP address blocks:        50.114.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b0:bb:7c:fc:96:b8:6e:15:13:c3:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 30 13:00:40 2025 GMT
            Not After : Oct 28 13:00:40 2025 GMT
        Subject: CN=f2fd3c20-368e-45bd-9fc6-e5c750a4906a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a1:a6:7e:89:82:fe:b6:8f:68:fc:7a:f0:bb:
                    b1:54:a9:f3:74:e4:87:1c:b8:fb:00:69:11:d8:a4:
                    5c:11:f7:1a:37:4a:48:12:38:22:9e:66:a6:d8:4e:
                    29:54:75:fb:fc:37:92:66:7b:f6:e2:a4:c2:a6:81:
                    c6:2d:10:2d:1e:19:66:78:59:c3:da:60:e4:d2:ef:
                    21:31:1d:69:b5:6c:e6:9b:69:0e:26:5d:e3:9c:7d:
                    a8:a9:98:88:dc:af:17:a8:86:68:22:14:f0:8b:23:
                    9e:02:66:6c:f3:cb:89:ca:a5:70:45:16:69:1a:92:
                    2e:30:65:d7:68:c0:62:0d:51:9c:8e:67:a7:42:36:
                    04:c0:ed:4f:08:0e:b4:89:58:db:9a:bd:75:15:3a:
                    da:0d:8b:44:42:1a:3d:5c:e9:19:8b:3a:0a:d6:32:
                    64:75:03:f7:a5:cd:f0:04:2b:89:b1:41:ee:b0:c4:
                    34:b8:fd:d3:cf:b2:ed:b8:fa:69:a4:dc:03:f4:36:
                    6b:ed:84:c4:5e:ff:5a:b4:63:d5:63:05:b6:de:d5:
                    1b:eb:8a:cc:61:d7:47:11:c5:cf:ab:10:e5:df:31:
                    21:50:2e:fa:fe:c6:2c:04:f3:39:ae:eb:69:e8:b0:
                    23:de:b4:1f:be:81:ae:ca:eb:ef:cd:84:05:85:c9:
                    39:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:13:59:71:D4:8E:EB:00:B8:9D:60:70:D7:5D:96:F9:03:44:A8:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b21df912-c6e7-36ee-b1c1-ba8c46bc456f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:f8:41:e6:7e:6b:42:65:9e:56:28:57:2f:21:f2:1b:9f:f7:
         2d:a3:8f:58:02:00:c9:39:26:c6:a6:38:49:28:ed:bd:4a:f1:
         e2:1d:0b:72:d4:75:59:c7:f4:01:f4:b6:3b:cc:66:4d:54:4e:
         e7:53:21:29:a4:80:45:df:74:90:26:3b:e4:47:17:0d:97:58:
         90:ef:11:98:9e:7b:6f:db:8e:8c:ba:9b:56:56:12:1c:d4:93:
         ac:ff:74:d3:fb:1f:fd:fe:6f:b6:21:63:36:84:f7:fd:a1:3d:
         e4:4a:18:58:0b:c7:51:ec:23:c4:2b:96:78:f7:b2:f5:9c:75:
         d5:ab:4c:73:cf:62:1b:78:77:f9:01:a9:de:5c:46:3e:12:c5:
         5a:c8:0d:01:90:c8:ce:a3:7a:f4:01:a8:36:ba:3a:b4:10:d3:
         dc:99:7e:96:bf:25:e1:2f:27:cd:94:c4:8c:ff:c6:20:49:55:
         99:47:60:43:f6:e7:25:8f:d4:a3:5c:15:3e:b5:4f:c9:a8:ce:
         b3:1f:a2:7a:d2:ea:dc:d8:d1:11:23:c6:f8:af:3a:bd:75:d6:
         51:b2:c6:04:b9:48:81:d6:da:19:6f:a8:f1:5a:c4:c3:b2:b3:
         a6:c7:1c:0a:97:be:9e:b2:70:59:55:82:1d:ce:6d:b6:62:e0:
         9d:d6:ee:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:47:11 2025 by rpki-client