Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/46cee009-962e-3bbc-8ca0-86f73487456e.roa
File:                     46cee009-962e-3bbc-8ca0-86f73487456e.roa (raw, json)
Hash identifier:          m27j1ms53I5r6O4/pRMtY458l5zGyKlm4zsGQ9ZeHqQ=
Subject key identifier:   6C:FE:1D:0F:F5:C8:34:FF:E6:C7:D3:28:30:E6:22:00:5A:2C:FD:10
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB8E994BBF734CC1B9C7CE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/46cee009-962e-3bbc-8ca0-86f73487456e.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     63483
IP address blocks:        50.238.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b8:e9:94:bb:f7:34:cc:1b:9c:7c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=2ff44a67-e7dd-4e5f-9820-0ea42378cc00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ed:cb:c4:c9:66:e0:1b:d1:f1:e8:8c:bf:ef:
                    ab:9a:28:9e:d1:f1:95:5c:7c:ac:7c:a2:51:4d:88:
                    c7:ea:6d:01:46:8d:8c:de:60:3e:f8:bc:a2:ba:68:
                    d2:fd:2c:fb:2b:e1:27:50:ca:26:02:21:d9:45:c6:
                    bb:a7:64:16:f9:2d:a9:be:a8:81:6d:8f:e1:a1:0c:
                    c9:46:e1:80:f5:8d:39:cb:c3:76:cf:53:89:4a:e3:
                    b5:c2:21:8f:18:7a:b4:47:f6:06:de:73:f6:67:85:
                    86:9b:43:e5:e3:a2:60:dc:ff:c4:61:61:e5:84:df:
                    27:a5:79:42:92:88:d7:87:30:e2:79:4a:67:a5:ec:
                    21:e7:d7:17:3c:9b:cb:f4:d5:46:35:6d:f4:b5:fb:
                    31:2c:fa:c8:0b:d0:db:02:69:48:2f:5a:b6:fe:7c:
                    f9:c4:c6:dc:0a:6d:03:9e:4a:33:3d:d5:5b:2b:7a:
                    b4:01:58:69:e0:61:40:8c:44:70:57:d8:09:6e:61:
                    93:de:33:ad:7a:fc:84:fe:e8:0c:32:43:a4:8f:d1:
                    63:28:9e:c8:76:7c:66:f8:f4:8e:22:58:1b:ba:09:
                    3b:23:e1:d7:af:5e:b2:1a:4d:74:7f:c2:92:0a:60:
                    8a:77:22:34:a0:01:a8:88:16:ac:7b:97:a6:4a:36:
                    56:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:FE:1D:0F:F5:C8:34:FF:E6:C7:D3:28:30:E6:22:00:5A:2C:FD:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/46cee009-962e-3bbc-8ca0-86f73487456e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.238.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:9a:a5:d1:ba:03:98:a0:17:f9:57:e3:ff:ba:15:a4:de:9a:
         28:3c:da:24:65:b2:65:29:ee:ff:17:1c:ed:ac:ea:96:fc:41:
         3a:61:19:42:9c:1d:d9:16:d6:a4:c8:a1:f9:d3:0f:d8:a4:41:
         84:f9:f3:7e:5d:32:30:36:0f:7c:02:9d:e2:4f:80:c4:31:4d:
         00:cc:68:60:e8:34:42:3e:1a:18:f5:52:ff:30:dd:63:57:09:
         bf:e1:59:31:0a:38:b5:bf:20:a2:43:35:d1:81:0d:56:13:ad:
         71:fd:39:63:a7:c7:43:c5:85:88:84:20:46:09:ed:68:79:44:
         5e:cf:9e:50:14:b2:f0:0d:59:d7:46:82:87:90:65:fc:ef:d1:
         6c:5d:06:2e:b8:15:32:c7:3e:c0:19:73:07:87:11:52:6e:eb:
         3e:ac:c6:45:10:ce:ba:74:52:6c:9d:20:0c:bc:9b:a1:90:3d:
         5c:ef:a6:2d:b8:98:82:75:03:8f:25:b9:28:f6:96:8a:93:36:
         65:36:dd:83:8c:23:36:13:bc:32:01:5f:d5:27:3d:0b:ef:bf:
         ac:93:8e:08:4c:8a:f0:87:01:91:3a:f5:89:b1:55:c4:5d:05:
         eb:4a:ff:36:9b:98:be:41:3a:f5:cb:46:a1:d8:3c:54:5d:a5:
         e7:c6:f9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:13:30 2025 by rpki-client