Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f091fba-3585-3cd3-96ea-0bfa7ef7a39c.roa
File:                     3f091fba-3585-3cd3-96ea-0bfa7ef7a39c.roa (raw, json)
Hash identifier:          Qj0+oajJlad69kPFC/BYeio+HUcKrJCH1QUVWOtCq2s=
Subject key identifier:   69:BC:63:19:97:8B:34:6B:EB:78:C2:56:D3:C7:13:D3:E8:45:FD:F0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB7C2FA0C4B2F8DEDF81300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f091fba-3585-3cd3-96ea-0bfa7ef7a39c.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33668
IP address blocks:        50.220.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:c2:fa:0c:4b:2f:8d:ed:f8:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=32467945-636c-48e2-9c41-b2ebe45b01ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c8:f2:4c:1b:79:54:d5:d6:a5:73:8b:5e:f3:
                    3a:a2:eb:60:bf:46:43:e3:a2:cd:5f:3b:30:a6:f3:
                    02:b5:7a:fc:f1:0c:5f:4a:c9:31:7a:28:fe:3f:3a:
                    e5:49:58:2e:68:39:b6:23:8e:fb:39:95:28:5d:91:
                    71:44:9a:30:e6:85:7c:28:bf:cb:f9:b1:c9:13:5b:
                    49:6f:27:08:b1:59:e3:ce:e1:db:7d:c5:29:8f:85:
                    af:21:cb:cb:60:b9:17:09:fd:9f:2a:fa:35:a1:96:
                    95:0f:88:2f:d2:3a:62:55:36:67:85:63:22:a2:ec:
                    7a:41:d3:af:56:9c:01:91:7a:88:a5:9a:48:91:11:
                    09:0d:68:d7:c5:34:3b:0e:41:c8:a1:b6:fb:a6:48:
                    bd:24:24:4f:c5:08:c1:0f:16:f5:18:87:19:38:77:
                    5e:93:38:9f:45:25:a6:cc:ee:b6:92:03:5a:0e:16:
                    6a:0d:61:fd:30:9e:00:ff:f8:b2:04:85:1a:40:3b:
                    2e:ab:ad:88:2f:50:3d:76:20:39:7d:22:51:be:61:
                    0c:c1:f2:c1:e5:c1:3d:cf:19:cd:9d:08:83:86:46:
                    36:78:4d:f4:bb:05:7a:6c:13:68:ad:7c:0b:4f:30:
                    70:d6:b1:82:41:d5:8a:8d:bb:44:a7:72:a1:db:15:
                    8e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:BC:63:19:97:8B:34:6B:EB:78:C2:56:D3:C7:13:D3:E8:45:FD:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f091fba-3585-3cd3-96ea-0bfa7ef7a39c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.220.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:ad:1a:82:73:80:79:94:ad:5c:bf:ce:cd:69:67:08:37:84:
         46:2c:5b:bf:fb:2a:2d:8b:98:da:c8:86:00:12:3a:c4:93:0d:
         38:6d:f5:d5:37:12:38:7f:e1:45:05:bc:c4:5b:c8:fe:97:08:
         2a:4b:f5:8e:7d:7c:08:a6:49:b5:e8:58:e0:cf:18:29:ba:8c:
         c7:ef:ce:fa:0b:a7:74:69:dd:21:b6:e5:37:5f:80:cc:58:28:
         b1:f0:77:45:f3:5c:95:a2:f8:9a:ed:37:36:36:67:40:13:89:
         1c:a7:9c:b1:12:34:67:b1:fe:2b:8d:80:7c:80:4d:4c:59:b3:
         af:53:a3:47:f8:02:2f:7c:69:8b:94:b9:7e:e2:cb:10:fd:85:
         f4:68:c6:e5:e0:d7:07:f6:0d:fa:da:51:0f:0b:82:b0:a2:60:
         7e:53:ab:a9:1d:16:63:46:92:b5:f2:13:7f:d7:04:45:22:1c:
         d5:15:4b:ae:89:eb:6b:cd:89:b3:75:80:83:ff:24:3a:77:57:
         af:30:d1:f2:c9:31:01:79:c8:65:df:91:62:b9:ea:b2:98:05:
         80:68:5d:b4:c6:82:95:fa:b8:e0:bd:4c:f8:2a:21:47:fd:31:
         df:12:af:45:01:89:26:06:3d:87:03:a9:7f:04:20:48:9e:38:
         00:e0:6f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:03:56 2025 by rpki-client