Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c50ceed7-20c9-4a01-942e-e8d005afb51a/30990cde-23dc-310f-b3e7-dc3fbe37ab1e.roa
File:                     30990cde-23dc-310f-b3e7-dc3fbe37ab1e.roa (raw, json)
Hash identifier:          0ZniGsXX6zUtst+W95mzSHErNtvXsOqH5P1GWp9P+cc=
Subject key identifier:   95:FB:5F:19:B3:8D:FF:1B:49:5F:22:65:AF:CF:3B:CD:89:FB:CD:CE
Certificate issuer:       /CN=c50ceed7-20c9-4a01-942e-e8d005afb51a
Certificate serial:       010D0C9F4328584AF2567EBABA4A1A79B60C4400
Authority key identifier: 09:10:C9:44:4F:3C:23:6E:4B:EE:59:3B:E2:F8:3F:CC:A6:31:68:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c50ceed7-20c9-4a01-942e-e8d005afb51a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c50ceed7-20c9-4a01-942e-e8d005afb51a/30990cde-23dc-310f-b3e7-dc3fbe37ab1e.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     11404
IP address blocks:        141.174.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c50ceed7-20c9-4a01-942e-e8d005afb51a/c50ceed7-20c9-4a01-942e-e8d005afb51a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c50ceed7-20c9-4a01-942e-e8d005afb51a/c50ceed7-20c9-4a01-942e-e8d005afb51a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c50ceed7-20c9-4a01-942e-e8d005afb51a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:7e:ba:ba:4a:1a:79:b6:0c:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c50ceed7-20c9-4a01-942e-e8d005afb51a
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=9c942873-f91a-4f47-8152-14cf859015e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:13:15:07:59:d8:29:9c:f1:1a:e1:98:d6:0b:
                    de:86:2d:a4:f9:f5:dc:17:fa:cd:52:ad:2f:8a:29:
                    8e:0b:a1:6a:a0:5d:1b:79:07:05:b3:38:52:7a:84:
                    66:ec:11:6c:6e:ed:70:36:4a:af:22:ca:4e:28:bd:
                    f2:17:e0:95:64:d8:37:81:89:78:c2:ab:b6:a0:fc:
                    b3:64:4f:fa:6c:06:fa:02:74:32:c5:b0:c4:01:c5:
                    06:e7:b1:6b:dd:4d:14:af:4e:fa:c7:4b:a7:f4:70:
                    a7:ae:a5:a8:91:41:af:ac:0f:70:04:ad:41:c6:1e:
                    93:74:85:a2:32:48:6f:ae:05:8d:d3:89:2c:89:be:
                    e1:67:21:b0:c5:4b:85:d4:69:aa:3d:c5:73:ec:02:
                    9b:a7:07:c8:60:87:be:fa:f3:72:a2:25:aa:57:f8:
                    3d:80:97:29:ac:85:e9:17:d5:5c:29:92:d0:1e:c7:
                    ea:90:58:a3:90:76:fc:1e:0f:d6:de:86:12:b2:20:
                    56:60:28:76:bc:6c:38:98:76:b7:84:80:e3:0c:e8:
                    55:80:5d:0c:ef:4c:4f:ea:98:22:db:99:e1:5b:a6:
                    35:0a:d1:d7:51:31:2e:b3:f2:0c:ea:59:e2:ad:d3:
                    c1:c5:99:57:d0:06:72:e4:f6:2b:6f:b9:3f:d1:6d:
                    e4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:FB:5F:19:B3:8D:FF:1B:49:5F:22:65:AF:CF:3B:CD:89:FB:CD:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c50ceed7-20c9-4a01-942e-e8d005afb51a/30990cde-23dc-310f-b3e7-dc3fbe37ab1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c50ceed7-20c9-4a01-942e-e8d005afb51a/c50ceed7-20c9-4a01-942e-e8d005afb51a.crl

            X509v3 Authority Key Identifier:
                keyid:09:10:C9:44:4F:3C:23:6E:4B:EE:59:3B:E2:F8:3F:CC:A6:31:68:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c50ceed7-20c9-4a01-942e-e8d005afb51a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.174.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:62:cc:82:65:02:45:84:71:5f:ae:b7:17:9b:3c:e0:09:f2:
         3c:c5:15:8d:54:e7:13:16:5e:b8:c7:07:a4:22:f5:3e:39:a5:
         8a:c4:c4:03:8f:57:a5:7a:77:96:81:10:56:3a:4d:60:c7:88:
         e4:5f:06:22:c2:26:83:57:88:22:c0:f1:8e:76:2a:5f:f9:d8:
         84:b0:09:f2:f7:bb:86:73:7c:92:bc:e0:4f:4e:77:9f:4a:cd:
         98:14:36:a0:32:5d:b8:e0:c8:76:2c:6d:e9:e8:06:ad:11:71:
         8f:6e:59:cd:52:e7:3f:e4:68:2f:3c:48:7e:91:2b:a5:7a:fa:
         58:ff:02:ec:1e:33:b8:7f:e9:e4:f2:36:61:14:17:ab:02:05:
         7f:fc:2b:aa:6b:8d:e8:77:b8:77:e5:9a:b2:59:f7:20:30:e9:
         24:3d:65:eb:40:37:7d:13:b3:ab:e3:a1:ca:a5:ad:a6:9c:29:
         e4:66:92:ed:08:12:45:9c:21:94:f3:a5:20:28:05:82:6f:46:
         8a:c0:41:2e:49:a1:29:b8:08:0c:bb:a9:8d:2d:e0:fc:86:70:
         0f:f1:3e:df:b8:19:a5:cb:b4:3a:6d:02:db:aa:cc:36:47:a0:
         c6:46:f4:9d:4d:fe:e6:96:84:15:88:ee:a6:34:dc:4b:98:9d:
         fb:36:5d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:46:02 2025 by rpki-client