Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ee91aa83-da33-33c2-80da-01acf345b567.roa
File:                     ee91aa83-da33-33c2-80da-01acf345b567.roa (raw, json)
Hash identifier:          iyt8MsXw6UkGwRoncRRzbNORzzo3d6ERIPDHRIU73RQ=
Subject key identifier:   79:34:04:F1:D8:02:1F:BB:1E:42:0D:7C:05:AF:91:22:53:9F:2A:FD
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A480AEE23D04C843510E44BA0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ee91aa83-da33-33c2-80da-01acf345b567.roa
Signing time:             Mon 23 Jun 2025 01:00:49 +0000
ROA not before:           Mon 23 Jun 2025 01:00:49 +0000
ROA not after:            Sun 21 Sep 2025 01:00:49 +0000
asID:                     401152
IP address blocks:        50.114.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:48:0a:ee:23:d0:4c:84:35:10:e4:4b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 23 01:00:49 2025 GMT
            Not After : Sep 21 01:00:49 2025 GMT
        Subject: CN=66b72bf4-2305-4fcd-b65a-3734e6afaa79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ba:95:2a:be:3b:2b:13:c0:89:25:08:07:dd:
                    03:06:31:18:3b:8d:b4:4d:db:c5:65:41:c9:ca:66:
                    d3:f5:85:e3:66:1e:a9:24:f3:35:7a:d8:0e:f7:b1:
                    99:6a:ee:7b:f5:cc:ad:f6:04:e0:89:3c:40:70:fe:
                    51:ae:41:16:92:5b:a6:77:33:bc:a5:69:e6:c9:a3:
                    9d:fb:3d:a5:dc:c2:36:ec:d3:38:53:61:19:cc:2d:
                    00:1b:87:43:fb:7b:8e:d1:00:0e:c7:62:c8:f5:64:
                    e0:f7:e1:66:cc:16:d1:7c:dc:92:19:f1:01:b8:4f:
                    e3:52:47:80:bf:2f:c8:3f:58:62:b4:ed:c8:7a:fd:
                    4f:3d:32:2c:ce:8c:44:f4:0e:43:63:a4:1a:3a:d0:
                    df:25:e8:e5:e0:79:fa:02:b1:16:dc:48:fd:e9:dd:
                    c8:b2:d5:01:69:bf:9e:37:0f:e8:8d:95:da:10:e8:
                    f1:85:66:8d:6a:c8:73:d1:75:f4:12:2d:1b:eb:88:
                    01:aa:32:6d:04:05:f1:33:7c:26:e1:be:c0:89:87:
                    16:f2:b6:77:1c:ac:78:16:45:f4:07:90:d1:db:de:
                    eb:da:29:b7:b1:aa:6b:8e:a8:4a:ea:a4:e1:ed:47:
                    38:d2:50:0a:f0:8f:9d:bc:47:a1:b2:6b:9b:f5:4d:
                    dd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:34:04:F1:D8:02:1F:BB:1E:42:0D:7C:05:AF:91:22:53:9F:2A:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ee91aa83-da33-33c2-80da-01acf345b567.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:db:fd:ad:73:fc:47:fd:0b:9c:fc:45:77:cd:93:35:17:dc:
         48:61:83:a3:53:a9:ca:d9:a4:89:4c:7c:37:89:7f:38:37:2b:
         6b:b9:fa:c3:88:6b:32:b2:1e:59:6d:90:de:64:ae:96:4d:77:
         40:24:d1:5b:5f:a2:67:69:45:d5:70:fb:20:6e:c9:c0:48:99:
         71:bc:4b:5f:c0:68:34:be:23:44:0b:18:c7:8e:f7:1e:4e:67:
         d6:d2:9b:d5:60:1d:dd:f8:57:98:65:90:2c:b9:ec:6b:83:f2:
         b6:84:cb:34:d9:77:9d:b6:34:61:4e:f7:a6:ee:14:4e:40:b6:
         87:92:f5:eb:26:47:be:ff:70:f0:fc:9e:c0:fb:18:bd:f3:d4:
         22:4a:2d:58:b3:34:ca:39:9f:7c:16:23:3d:c9:a0:bd:33:2c:
         e6:d1:a0:ae:d2:43:fc:99:be:33:ef:49:3b:9a:ec:c3:d8:bc:
         97:c8:f5:d9:2b:ac:96:1c:9e:d0:06:5d:5c:d1:f2:47:3c:82:
         bc:3b:a6:1f:c6:86:5d:7d:11:e5:e6:f1:1c:11:7a:9b:ba:74:
         a4:56:9d:57:9b:61:64:6f:1a:1f:7a:68:2c:c3:31:4f:ca:f2:
         e9:91:d6:7a:40:4a:98:f9:69:af:6c:33:e7:89:94:c3:a5:5c:
         0a:8f:d6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:05:40 2025 by rpki-client