Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e767c13-ae23-3f5d-856f-4c7283710bad.roa
File:                     0e767c13-ae23-3f5d-856f-4c7283710bad.roa (raw, json)
Hash identifier:          6QL7cSmf7xQy0SN6zcV0QhAjlJXe/zYfMbmSJHb2WSo=
Subject key identifier:   FE:4B:37:D7:E0:A3:35:B7:55:C6:35:2C:A6:E5:89:C1:3A:13:9D:6D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB91CF9056D57C41134E580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e767c13-ae23-3f5d-856f-4c7283710bad.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33489
IP address blocks:        50.238.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b9:1c:f9:05:6d:57:c4:11:34:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=07a0c18f-b677-41b8-81c1-8fc55d54683a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0f:94:7e:ed:ad:74:8a:a3:92:3e:43:a1:16:
                    cd:be:3a:c4:1b:03:c7:60:26:7f:77:1d:e0:9a:72:
                    5b:57:73:06:66:3a:e5:58:15:30:5b:4b:6e:04:2c:
                    5e:5f:5f:6f:d7:8c:1a:5e:50:c5:ab:dd:9b:ae:78:
                    b8:93:33:c2:ce:f2:9d:22:d5:2d:1b:af:de:22:59:
                    17:53:b9:e1:85:bb:87:4d:51:54:23:aa:6e:f5:6e:
                    60:ad:d7:ef:c7:1a:43:b5:d3:1d:e2:20:69:37:80:
                    db:a2:f1:be:2f:4c:9d:80:73:97:46:97:b9:26:2d:
                    09:5a:00:82:26:e0:1d:12:57:3b:26:d1:53:3d:69:
                    7c:84:56:bc:54:95:cd:31:ab:10:8f:6a:e2:cc:2a:
                    2e:94:4d:c2:91:b0:bc:2f:e6:dd:82:0c:4d:0d:ed:
                    67:8b:5b:c3:b0:dc:34:4d:ae:68:51:2f:02:47:33:
                    50:d0:4c:26:0e:d2:92:ca:e3:85:86:e0:97:9a:97:
                    7a:90:ef:95:69:30:3a:0c:12:bf:6a:c7:4a:4a:dc:
                    92:15:b8:4b:35:39:fa:f0:48:26:46:d8:a9:8c:34:
                    c6:dc:7f:ae:8b:f9:3c:3e:ab:f7:2a:50:77:e0:2f:
                    37:72:f5:b6:e4:7c:a0:20:a9:84:31:17:80:a0:04:
                    fc:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:4B:37:D7:E0:A3:35:B7:55:C6:35:2C:A6:E5:89:C1:3A:13:9D:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e767c13-ae23-3f5d-856f-4c7283710bad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.238.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:f1:d6:b4:e9:1c:b1:37:f5:1d:57:1e:df:67:5e:7c:f1:0f:
         d6:5a:34:c6:53:b2:49:01:28:85:88:bf:fe:01:33:e4:2f:bd:
         03:40:62:b5:53:ff:59:c5:a2:04:a8:9c:67:c1:ad:e0:b4:6d:
         88:86:5e:f3:5a:40:d5:8a:1f:ba:38:ba:02:08:41:2e:b9:15:
         9d:73:74:1e:7f:02:ba:db:88:af:bb:d2:53:fb:24:b4:09:23:
         68:f3:87:03:98:28:0c:51:81:69:5a:df:37:45:84:07:63:55:
         ab:2b:8b:73:e3:fc:fa:87:d7:a3:4d:f5:20:15:b6:60:5a:a4:
         58:d0:dc:ff:1f:8a:09:e8:67:d6:f1:88:a1:2d:60:b1:40:d8:
         3c:ef:bc:5c:24:c4:7e:b3:ca:c2:17:c7:62:71:3c:0b:a6:c4:
         a7:9c:e7:84:c9:49:43:04:39:f1:83:31:82:fb:44:ec:18:22:
         50:ff:2b:e0:82:b7:48:34:8c:b3:4e:dc:f8:a1:e0:e4:39:32:
         54:7c:ae:c6:2a:97:23:2a:49:2f:00:6a:9b:a5:4e:54:5a:d7:
         c3:8b:92:27:e0:e3:06:22:11:f9:08:ce:e7:de:67:65:90:c2:
         42:e9:2b:83:04:fb:9a:02:cc:28:93:8d:81:08:ec:fc:a6:fe:
         8a:c9:6b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:44:54 2025 by rpki-client