Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/3b43a7c9-4641-3b4d-8e32-a294f5201f8f.roa
File:                     3b43a7c9-4641-3b4d-8e32-a294f5201f8f.roa (raw, json)
Hash identifier:          OrVqR8WpKeo6e4+IwxUmovHY7YoreadzMVocmlPzHMw=
Subject key identifier:   D5:A1:DB:A5:DC:1D:37:20:8A:22:CC:A4:00:09:D2:6F:75:6D:E0:FF
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584B8EAD0F455272BA946F3A5800
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/3b43a7c9-4641-3b4d-8e32-a294f5201f8f.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     31898
IP address blocks:        50.6.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ad:0f:45:52:72:ba:94:6f:3a:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=05537b1d-f2a8-4b3e-bae5-a27631dfbe73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f7:ab:ee:7f:e7:ba:c5:f4:1e:dc:c9:eb:f6:
                    b9:71:1b:9c:25:50:fc:89:36:cb:83:5e:fe:7b:ad:
                    d4:f1:eb:32:87:75:a3:43:8e:8b:93:c5:73:90:94:
                    ec:3a:0e:9c:fb:12:b5:76:5f:f0:f5:be:f1:58:25:
                    f5:32:d8:37:99:82:98:d2:9b:82:a4:09:de:90:bc:
                    78:c8:e5:25:0d:f4:b4:7f:7b:63:85:9c:f8:15:00:
                    d9:f8:9f:70:23:3c:60:4c:cf:81:5d:14:b4:76:50:
                    55:9c:00:84:e0:eb:db:b0:61:f5:1e:1e:68:ef:b4:
                    69:4d:31:69:0c:cc:e1:4b:f6:26:81:fa:8d:fe:92:
                    a5:e0:38:2a:bb:04:a9:6a:42:96:68:87:8c:2d:8f:
                    03:c7:95:c6:52:3c:fd:26:80:3d:61:78:52:60:ce:
                    f1:c1:75:98:7a:ec:30:47:6d:11:ba:0e:56:1a:2d:
                    af:7f:48:d5:f4:98:e2:4f:bc:9b:0f:69:45:58:da:
                    59:26:33:52:f9:b7:e1:57:f0:da:4d:4b:7f:11:e2:
                    df:2e:ef:e0:0e:02:fa:52:21:3f:c3:bf:d5:55:8b:
                    6b:bc:48:0b:2c:a0:f9:d6:df:e9:bc:b1:cc:7e:e5:
                    9a:9f:c9:6d:2f:64:f9:52:bf:5b:55:d0:cb:76:39:
                    91:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:A1:DB:A5:DC:1D:37:20:8A:22:CC:A4:00:09:D2:6F:75:6D:E0:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/3b43a7c9-4641-3b4d-8e32-a294f5201f8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.6.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:e4:3f:57:ba:da:af:0a:b9:35:d9:61:07:14:82:80:45:40:
         7a:28:bf:9e:18:3a:2a:6c:f8:de:3d:fd:57:0a:00:fa:b7:ca:
         1f:23:ab:3b:a5:85:ae:df:ef:d8:b2:bf:35:b1:df:79:ec:71:
         69:96:b1:d3:4b:52:ca:d5:f4:f1:dd:ed:cf:87:91:2e:c6:73:
         5a:97:8d:ac:e5:ed:b9:46:55:b8:d7:77:48:64:eb:4d:c8:95:
         4d:49:fd:86:a8:3b:20:3b:9d:29:31:c6:93:bd:03:76:b3:37:
         5a:14:32:2c:e8:48:3c:13:0d:e8:1f:cf:fd:ad:51:b8:90:bb:
         c3:a6:35:9d:c6:e9:99:9a:9f:7d:bc:dc:0a:3c:70:39:1a:86:
         07:44:a5:d1:ee:fe:7e:c8:f9:19:f1:7f:10:6a:4f:cf:78:ab:
         bb:e0:95:43:c2:57:1f:e5:22:93:fd:85:83:5c:be:ff:4f:f7:
         52:b0:2f:ca:fa:64:68:72:0f:7c:00:b8:73:87:5c:90:7a:80:
         0f:17:7d:dd:14:a4:94:6a:d8:d4:5a:3f:f5:0b:21:73:90:c6:
         71:18:76:db:ea:2d:83:d8:57:26:04:93:d1:f1:f3:0f:08:73:
         85:f3:68:50:ef:e6:9f:42:c9:c1:5d:5e:a8:b4:ea:38:0c:e2:
         e6:12:13:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:21:24 2025 by rpki-client