Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/122caafb-62bf-3740-ac5c-eb50814515d9.roa
File:                     122caafb-62bf-3740-ac5c-eb50814515d9.roa (raw, json)
Hash identifier:          b5mWm/o+M29nFHibBo80JuKh5XVGTz3ajsSBJeU8y1k=
Subject key identifier:   85:EF:39:13:E4:83:DF:85:2F:01:B9:4C:AB:D4:A7:65:59:48:7B:AB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B620210AC93E10A4C8BF6F300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/122caafb-62bf-3740-ac5c-eb50814515d9.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     21508
IP address blocks:        50.147.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:10:ac:93:e1:0a:4c:8b:f6:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=e510d218-acd8-434c-be3b-e9860f712fa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:de:41:7f:ef:5a:eb:e6:26:65:75:e4:c6:69:
                    b4:75:68:00:c6:e1:52:08:94:fd:37:a9:1c:dc:d6:
                    89:a9:0d:16:3d:76:9c:e2:42:c1:e5:da:e8:92:a7:
                    55:b7:49:8e:59:3a:fc:e0:b3:73:37:3a:b9:8e:dc:
                    e2:52:a7:ff:fb:6e:79:d0:3a:01:bc:eb:d3:e0:92:
                    57:18:58:32:3f:f9:22:ac:14:de:8c:58:e7:71:b5:
                    94:fc:24:fb:60:72:94:51:76:91:c3:66:03:3d:8b:
                    47:22:42:5a:1d:98:9a:7c:81:84:61:1d:41:f5:0f:
                    37:bf:20:e9:63:76:f8:b9:de:4c:74:d4:3a:87:e0:
                    35:0f:f5:39:3f:40:1c:2b:75:48:23:d5:91:8b:86:
                    26:6d:bb:53:f7:30:09:3a:62:4a:ac:b2:a6:3f:83:
                    12:76:56:2e:ea:02:83:e4:09:7d:f9:9c:ad:38:ba:
                    ef:20:81:d4:15:5f:0d:4c:b3:5d:85:b0:2c:8e:36:
                    45:02:f5:3c:76:86:d0:a6:28:1d:96:8a:35:37:ec:
                    c2:11:26:74:09:11:b4:2e:28:21:7b:13:eb:11:88:
                    13:84:47:73:65:20:5f:27:f4:1c:8c:55:3b:5e:52:
                    ed:f8:5e:fb:20:b6:f5:33:92:dd:df:e9:b9:43:48:
                    94:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:EF:39:13:E4:83:DF:85:2F:01:B9:4C:AB:D4:A7:65:59:48:7B:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/122caafb-62bf-3740-ac5c-eb50814515d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.147.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:a8:5d:94:bc:dc:a1:32:ac:0f:65:43:e4:94:f0:33:12:ba:
         84:bc:99:a8:1d:8b:6d:35:b4:de:6e:c2:a5:2b:9f:f2:32:3f:
         1f:8b:b1:f9:cb:95:44:8d:6b:3f:32:ba:99:f7:6e:0a:ee:61:
         2f:15:c6:9f:dd:c4:bf:dc:15:1c:a5:37:f0:ae:31:aa:27:4e:
         d1:73:6e:4c:63:d3:cd:a7:e7:88:2d:06:ca:bd:ac:29:7a:9c:
         1f:60:22:b1:fc:6d:c8:08:29:1a:fc:80:92:6b:6d:4f:88:77:
         73:74:7a:d1:38:ce:9f:83:a6:aa:40:f9:cc:7a:41:6c:8c:a9:
         08:12:eb:48:5b:60:c3:ef:3a:77:0b:a0:1a:0b:36:da:dc:55:
         66:84:2d:e1:82:27:17:e4:58:28:e2:57:4c:bc:3d:f2:87:f7:
         7b:85:f0:ed:8c:64:df:91:84:1f:0d:6c:20:ac:f4:cb:47:37:
         d1:83:0b:cb:c1:2c:99:7a:df:a7:57:e2:d1:23:cb:40:31:01:
         7b:da:4e:57:e8:39:09:06:34:da:ab:af:67:d8:a9:c0:3b:8d:
         d6:2a:c1:51:5a:b3:e8:93:ba:e1:95:d5:0d:da:f7:da:50:6f:
         f4:c9:e0:78:6e:47:a4:fd:60:ec:50:d2:82:b0:28:54:ae:0e:
         cc:5e:ad:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:26:15 2025 by rpki-client