Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/50c037f8-b0f5-3c3b-8ffe-4395e49c6756.roa
File:                     50c037f8-b0f5-3c3b-8ffe-4395e49c6756.roa (raw, json)
Hash identifier:          auiAU4mCahx5yXUcCMX7BkUJHBazo4/P20U3OlymQ3Q=
Subject key identifier:   06:79:FB:40:EB:36:BE:CD:BB:97:CA:53:43:D7:33:C4:9D:BD:A1:90
Certificate issuer:       /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
Certificate serial:       010D0C9F43285849FCAA83984BB94A3E5D4F9540
Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/50c037f8-b0f5-3c3b-8ffe-4395e49c6756.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     11650
IP address blocks:        199.96.96.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:83:98:4b:b9:4a:3e:5d:4f:95:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=0f935592-373b-4012-923b-e8f2b035d840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f2:82:9c:f7:90:87:e0:8d:05:1f:77:c6:7f:
                    ed:c3:0a:6e:57:61:a5:d6:02:1e:90:3d:e2:12:4b:
                    26:8e:cc:6a:97:da:6b:eb:ca:09:22:b6:26:bf:0e:
                    e6:70:e2:2d:49:3a:34:ba:33:de:11:68:27:ef:2c:
                    12:6f:68:63:1a:8b:b4:2a:8e:f3:ad:03:82:5c:0b:
                    08:4c:46:40:e7:92:fd:f2:4b:db:56:01:e0:2b:69:
                    1e:21:8a:3c:1a:3d:ab:cf:44:eb:c0:41:37:f7:3a:
                    ee:d9:e7:45:06:38:fb:d3:fc:7d:de:f9:df:b3:86:
                    5c:24:06:6a:b9:0d:60:55:c4:60:26:99:4c:9c:01:
                    52:77:53:b7:f7:29:bd:13:3c:99:ca:83:6e:63:01:
                    24:eb:fc:79:a9:90:62:60:c7:c6:65:b6:b9:d4:df:
                    6e:6c:62:8b:c2:8e:88:ee:db:fb:a6:77:c0:9c:23:
                    6a:7a:89:4b:b0:bf:2a:ac:96:9b:f0:6c:09:c1:0d:
                    b7:4a:0c:2b:7d:79:d6:36:17:a1:56:f7:3d:98:21:
                    e2:2d:d0:f2:55:74:84:19:b1:e2:a1:4f:05:ba:23:
                    60:b8:94:1e:d2:96:e8:8b:c2:c8:70:ff:aa:87:0c:
                    01:e9:f4:c3:54:2b:a7:b8:48:53:c0:09:b4:df:70:
                    05:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:79:FB:40:EB:36:BE:CD:BB:97:CA:53:43:D7:33:C4:9D:BD:A1:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/50c037f8-b0f5-3c3b-8ffe-4395e49c6756.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl

            X509v3 Authority Key Identifier:
                keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.96.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:b0:eb:6d:3f:54:60:b7:6b:bb:e9:6b:d3:87:8e:5c:da:a0:
         e1:c6:54:88:90:d0:63:7a:e2:1b:a3:40:f6:57:95:aa:ab:d5:
         19:33:6f:53:39:7a:f7:c0:64:30:c8:18:29:ea:4f:a7:17:e2:
         3b:3e:ff:26:6c:b1:ad:3c:65:dc:78:88:17:14:5b:d4:d1:c3:
         40:88:48:dc:fa:59:44:45:c9:08:5a:40:9b:7d:55:d6:9d:fb:
         bd:94:34:12:56:49:f3:6c:3a:10:b0:f3:2d:6f:99:ee:60:fe:
         e3:18:45:63:26:c1:2f:79:f9:f1:db:bc:3f:e5:c9:70:46:b5:
         8a:3c:dd:67:77:89:e9:f1:c4:9f:f0:fc:8f:70:22:36:80:72:
         25:7a:b6:58:cc:7c:5c:96:9e:7a:ec:4b:66:00:ca:36:10:79:
         47:e3:c5:3a:f6:5d:1e:10:b6:7f:7d:8d:f8:b2:f6:8f:0c:64:
         53:aa:1f:b3:91:ef:42:9b:c4:85:77:5a:a9:dd:f5:4d:fa:1e:
         b0:94:9e:c1:58:a6:6d:6d:49:3f:87:47:85:a6:9d:74:21:df:
         99:fd:4e:ae:5c:7a:d6:31:0d:6b:1b:48:fc:68:69:8c:32:86:
         51:2a:c5:98:31:94:8b:91:fe:f4:27:47:db:17:24:7e:82:12:
         81:59:df:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:55:08 2025 by rpki-client