Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0020b8ef-c38b-325b-8843-7235fbd7f71d.roa
File:                     0020b8ef-c38b-325b-8843-7235fbd7f71d.roa (raw, json)
Hash identifier:          pQLbHgEGK3gUEHw15te2cvBQlcoB5/9G8DpHXC8Ib/c=
Subject key identifier:   4A:21:1D:F9:B2:41:1F:1C:B5:0B:81:65:EC:B6:2D:FC:8C:08:21:58
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB88AE05E20570D0D5E4340
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0020b8ef-c38b-325b-8843-7235fbd7f71d.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     30620
IP address blocks:        50.231.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b8:8a:e0:5e:20:57:0d:0d:5e:43:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=6295dd10-54d3-4294-89c7-8bb943c291eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:66:d1:b3:a7:4c:eb:cf:dd:9b:1f:7d:cb:44:
                    3a:40:d7:9d:19:14:2d:d7:81:ba:54:70:93:65:6d:
                    c4:a6:d0:ec:cd:9b:1a:14:21:b6:b2:98:f0:49:79:
                    60:26:0e:ca:a2:90:1d:b7:cc:29:5b:63:03:99:62:
                    28:bb:fc:32:50:6c:cf:ba:03:9a:69:88:6d:67:89:
                    97:28:66:c5:25:d6:58:29:12:6f:b8:92:2f:88:7d:
                    a0:ab:e9:97:a8:6b:25:47:a6:a9:e6:87:e3:e0:50:
                    9f:df:ea:a4:de:fa:9c:dc:b7:90:ca:98:f4:8e:12:
                    87:72:3c:06:92:07:e0:55:54:f8:60:15:06:b1:b0:
                    69:71:a2:c9:25:32:c9:26:bf:e3:1f:7c:c2:1c:c2:
                    d5:56:63:d2:66:df:50:d7:19:57:13:98:9c:09:67:
                    d0:d1:1f:42:b8:5b:ef:53:66:d1:64:2f:ed:81:26:
                    55:32:6e:b6:ab:49:bd:a3:07:45:77:71:b5:b8:ec:
                    12:e2:57:a5:cd:8e:62:b0:7e:19:29:5d:72:5b:81:
                    23:52:81:ef:8f:44:ed:60:c7:84:13:9f:d8:d9:58:
                    e7:6e:17:42:ee:60:9b:40:2c:2f:2d:40:6a:4c:04:
                    66:92:3e:58:87:48:12:f8:1e:b9:76:6e:10:1d:9a:
                    26:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:21:1D:F9:B2:41:1F:1C:B5:0B:81:65:EC:B6:2D:FC:8C:08:21:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0020b8ef-c38b-325b-8843-7235fbd7f71d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.231.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:c2:cb:30:8b:14:84:99:48:81:a6:aa:22:24:ae:47:61:34:
         a4:55:ce:01:17:bb:11:2e:75:e8:97:0b:83:76:84:3b:f1:27:
         d5:1b:a7:56:c7:b7:26:98:a9:25:8a:b9:0d:9d:0d:74:88:c6:
         d8:5c:9a:3d:a4:61:c7:16:c7:91:b4:cd:a1:44:72:14:aa:c8:
         a7:97:ee:de:77:0b:55:91:b2:d8:a3:7d:1e:51:3b:4d:45:a6:
         2f:c2:2a:e5:c5:fc:05:09:3d:12:c7:a8:bd:cb:8a:66:d8:ea:
         67:73:5a:52:d3:da:52:4e:b5:07:e7:63:f1:25:86:65:e0:6e:
         1f:21:3c:10:28:a8:b0:1c:18:58:9d:01:f4:f4:e0:a7:40:80:
         9c:02:65:d9:92:ba:82:43:bd:26:56:59:31:3f:71:50:24:40:
         b5:77:ec:61:83:4c:6d:b9:8c:c1:14:0a:67:b3:d2:d8:f9:b5:
         fa:89:09:a1:e4:b7:29:37:7a:3f:ce:c3:0c:f5:4c:b4:5a:97:
         c3:47:54:95:e3:2e:55:89:e0:cc:71:d7:59:3c:40:60:6b:25:
         03:e4:48:78:05:fd:a9:ef:bc:50:00:0e:11:d0:85:3d:d2:32:
         64:b6:c9:89:33:c1:93:76:60:fa:62:1d:6f:88:77:1a:9b:89:
         98:f3:76:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:46:49 2025 by rpki-client