Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24f7cdcb-bc17-3128-a8f2-e73e246ee0fe.roa
File:                     24f7cdcb-bc17-3128-a8f2-e73e246ee0fe.roa (raw, json)
Hash identifier:          cCeEkmMf4JZ9tuERySbB+3myiuDXSTioevTNCq4NQBY=
Subject key identifier:   CD:1B:4F:48:51:E2:AA:42:A8:C0:5E:C1:D3:C4:C4:03:B5:2F:8F:24
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB907365999E042BF9A6D10
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24f7cdcb-bc17-3128-a8f2-e73e246ee0fe.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     20214
IP address blocks:        50.233.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b9:07:36:59:99:e0:42:bf:9a:6d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=fa002c2c-a5e4-4dce-9ceb-f994ecfc401a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a5:5a:21:09:94:92:fb:34:08:42:de:d0:e4:
                    10:fe:d7:76:a7:3f:27:a3:6d:d6:73:b3:05:35:98:
                    78:05:cc:e8:f2:26:dc:42:46:ee:5c:6b:40:c0:8a:
                    41:7b:c4:b4:4d:45:90:d6:e2:66:23:b4:fb:f0:5f:
                    6d:d7:c5:7f:59:05:10:be:b6:2a:4e:19:1d:e2:fb:
                    86:3f:66:f2:6b:05:0c:ab:2b:57:06:4c:92:2f:b1:
                    e6:29:e4:1b:f2:00:21:ae:25:d0:b4:38:d0:ec:48:
                    79:93:fb:37:90:95:ef:3f:ec:f6:a0:2d:03:c3:15:
                    e3:55:f9:00:1d:2b:b2:47:a3:67:ec:30:92:1f:c4:
                    73:f5:db:6f:e4:f3:f5:83:1d:9b:5f:9f:e9:8f:88:
                    a4:ed:f3:f0:ec:cd:38:67:95:f1:18:ee:d4:31:2c:
                    1d:e6:d1:f9:f5:d3:92:e9:a3:1b:31:51:a8:d4:76:
                    67:26:6f:73:b6:90:df:05:9f:8c:65:e2:42:91:f4:
                    2b:0f:55:35:98:47:60:bb:db:44:5d:74:54:fc:26:
                    9a:c7:af:c5:12:35:6c:67:67:fc:59:ec:2f:94:3f:
                    03:8a:4e:40:81:0d:15:e3:8e:04:9b:63:af:6d:a5:
                    11:42:86:a0:e7:3c:12:d0:2f:36:6c:b3:bf:29:9b:
                    3a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:1B:4F:48:51:E2:AA:42:A8:C0:5E:C1:D3:C4:C4:03:B5:2F:8F:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24f7cdcb-bc17-3128-a8f2-e73e246ee0fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.233.138.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:2b:f9:b9:c8:69:07:9a:27:5f:f2:74:1a:58:c9:a2:67:9c:
         ae:3e:91:7e:f5:51:e3:ac:d7:00:a7:6b:a8:0d:97:ae:e3:b4:
         1c:0f:aa:b5:7b:4e:75:1a:d5:fe:6c:11:49:32:73:81:24:92:
         f0:41:16:18:c2:c3:84:30:f9:73:49:13:f4:ca:69:99:60:d8:
         de:99:e6:3e:cc:c7:ee:0d:7f:e0:37:2a:19:51:22:32:91:7c:
         91:fe:57:78:8b:bd:e1:40:d0:a9:5b:61:22:7d:e8:42:ab:f7:
         5c:1d:89:c1:f9:09:93:97:9d:13:94:94:04:3b:33:b7:2d:67:
         6d:b2:fa:91:b6:d4:ee:e3:87:6d:b1:9b:9e:49:a4:ef:5e:e0:
         a5:03:8c:e8:81:40:4d:b5:0c:d8:2e:3c:8e:fe:59:f0:52:99:
         6a:62:da:69:09:fb:53:e6:30:af:f2:1d:ce:54:b4:8c:85:33:
         27:99:85:4e:48:9f:00:fd:8a:f2:46:a3:2e:34:73:e8:cb:94:
         ac:14:09:4d:94:73:bf:09:34:4b:bd:c4:e3:86:41:ee:e6:3c:
         e0:5d:99:5c:cd:9c:d6:80:f5:63:bd:24:f0:ef:bb:2b:9e:f4:
         cd:73:13:b7:2a:01:18:c6:5f:45:d5:0d:89:16:cf:5e:2d:85:
         65:12:1d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:27:00 2025 by rpki-client