Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1b58e379-adfe-3b8c-9fb0-5ddcb3836906.roa
File:                     1b58e379-adfe-3b8c-9fb0-5ddcb3836906.roa (raw, json)
Hash identifier:          6Sbjh1a7RSuq0Co6XMI4qXl/9ObHdnqeQsWisjJ6098=
Subject key identifier:   43:1A:00:C7:EC:82:40:EE:37:E0:E6:82:0A:1E:33:A1:6C:C5:C3:66
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849B8D23493833BB3561CF40380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1b58e379-adfe-3b8c-9fb0-5ddcb3836906.roa
Signing time:             Fri 02 May 2025 17:46:06 +0000
ROA not before:           Fri 02 May 2025 17:46:06 +0000
ROA not after:            Thu 31 Jul 2025 17:46:06 +0000
asID:                     401152
IP address blocks:        50.114.66.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b8:d2:34:93:83:3b:b3:56:1c:f4:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  2 17:46:06 2025 GMT
            Not After : Jul 31 17:46:06 2025 GMT
        Subject: CN=b86492a7-e919-4b2d-8763-135ca9e52711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:59:57:27:58:c3:42:c4:58:ea:3d:5e:10:fc:
                    bb:fe:89:73:cc:08:6d:ed:61:22:21:0a:63:21:cc:
                    26:63:e3:98:ec:5e:dc:09:23:2f:f8:94:de:a7:e1:
                    fa:63:5b:38:00:3c:77:0d:ee:64:ba:c1:05:34:83:
                    d4:41:21:fd:c0:23:89:21:05:00:7e:cf:e9:70:10:
                    3a:0a:11:db:c0:f8:9f:ab:5e:ba:9d:61:13:f8:d3:
                    68:94:1f:96:8d:1b:79:c5:24:ab:7a:30:3a:78:bd:
                    c5:29:fe:5a:4a:ce:3d:c9:02:22:4e:96:96:62:74:
                    df:15:68:12:06:55:fc:48:fc:d5:3d:13:74:76:82:
                    0b:36:23:9e:13:e0:1e:2a:27:51:b2:55:ae:70:7e:
                    c6:81:0a:09:66:0a:67:5f:2a:45:41:85:23:11:56:
                    c1:0f:66:ca:e0:6c:0a:1f:61:db:a8:dd:f7:5e:85:
                    e8:14:a1:3e:f4:a6:a3:01:e1:6b:ad:16:51:25:3e:
                    77:e4:24:6d:15:63:c4:ba:ea:f5:27:95:d8:a0:e8:
                    06:0c:48:87:6c:a1:8a:16:00:2e:46:aa:f4:7f:50:
                    75:fe:82:6f:6c:09:5b:01:8f:db:6f:49:09:2f:b9:
                    7a:bc:c9:55:85:db:26:42:94:42:a4:ce:bb:59:c3:
                    00:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:1A:00:C7:EC:82:40:EE:37:E0:E6:82:0A:1E:33:A1:6C:C5:C3:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1b58e379-adfe-3b8c-9fb0-5ddcb3836906.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:69:70:0a:d0:0b:5e:21:d0:c9:44:4e:50:f6:89:58:c9:45:
         7a:3e:75:35:02:25:9b:18:d0:13:25:f0:f1:7c:50:32:57:87:
         ca:99:ef:55:98:6c:0d:7c:30:dc:68:41:24:e6:a3:37:e9:fc:
         0c:e3:bd:41:7a:7b:5c:aa:41:96:53:9e:bf:d9:7f:84:b8:7c:
         58:0b:bd:98:c8:ff:4c:e7:12:78:08:8b:07:19:b2:a4:57:91:
         cb:16:1e:09:de:e0:ef:b9:0c:99:22:a2:f9:f5:47:55:c7:d3:
         b7:f3:4d:af:50:2e:bd:7a:a9:fb:c0:44:dc:90:e1:b3:55:26:
         ce:8f:c6:77:b5:01:4f:0d:5b:89:5f:2c:c2:a9:e5:e1:ec:c4:
         b0:10:15:fa:da:b5:72:8a:94:b9:70:65:c5:e8:57:e2:d8:df:
         b3:35:33:3a:bb:c6:1c:ba:2a:f6:a3:72:0b:87:10:cc:48:39:
         37:9f:0c:8b:d1:9a:e3:4c:24:c6:e0:51:2e:91:fb:cf:65:40:
         9e:9d:10:5d:86:a2:3c:53:5b:f4:43:57:02:35:d2:bc:13:c8:
         6f:5d:83:d0:14:cd:ce:80:28:e2:40:f7:5c:81:11:1f:d4:25:
         6a:0b:56:a5:77:d1:37:13:ad:b3:99:4f:4c:69:68:73:78:10:
         a9:f0:11:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:21:57 2025 by rpki-client