Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49d0e137-2a00-32f5-8519-c1ef2ef40a36.roa
File:                     49d0e137-2a00-32f5-8519-c1ef2ef40a36.roa (raw, json)
Hash identifier:          C9EwfucKvPPayGrDJPNWjmSlUWqS/JyfLEXyJPFlEok=
Subject key identifier:   93:B7:ED:15:6C:C6:1E:9B:71:3B:47:45:32:5F:9B:89:81:D8:F8:DA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC4FDB04BBC6A08C12E7820
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49d0e137-2a00-32f5-8519-c1ef2ef40a36.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33651
IP address blocks:        24.4.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c4:fd:b0:4b:bc:6a:08:c1:2e:78:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=f9a23bf1-b560-41d6-8685-01ab6077f817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d2:38:0b:d8:cf:fc:61:00:a7:47:da:56:56:
                    d9:d5:1f:59:52:d8:78:8c:54:fb:a4:9d:96:6a:24:
                    a4:9e:2e:84:e3:ee:c7:95:82:6e:e2:ac:7d:df:d4:
                    19:46:38:3e:1b:ca:79:cf:dc:76:86:e2:ca:ad:3c:
                    17:a3:45:e2:38:ac:67:f9:9c:72:f0:a2:c3:3c:e7:
                    54:7f:d0:01:28:46:26:ae:48:60:de:d0:4c:91:df:
                    e7:ed:48:17:06:49:aa:24:44:e3:73:dc:9e:88:f0:
                    c8:d2:bc:81:cd:e9:52:2a:b0:9c:ba:0b:e7:5c:e3:
                    2c:ae:6a:d9:2f:c7:58:fd:fd:55:0e:4a:60:f9:01:
                    39:6c:83:6a:92:14:72:76:ab:d9:d4:6e:95:cb:c8:
                    38:66:af:21:47:78:fd:f3:08:80:5b:40:15:d2:4d:
                    7d:4a:7b:69:85:ba:db:85:e5:4c:27:c9:f3:a0:77:
                    d4:98:ad:0c:6a:94:e8:03:c2:12:84:d0:ff:bf:a5:
                    aa:4d:03:5d:11:81:b1:93:ab:16:cc:d1:91:3f:b7:
                    bd:ec:c6:32:ad:0e:a2:9a:b4:28:0f:27:63:4f:f8:
                    88:04:f3:15:6b:9a:51:0a:42:f6:0a:12:34:43:e5:
                    ef:1f:8d:ea:12:8e:20:c5:5a:d4:2e:bb:00:84:94:
                    f0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B7:ED:15:6C:C6:1E:9B:71:3B:47:45:32:5F:9B:89:81:D8:F8:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49d0e137-2a00-32f5-8519-c1ef2ef40a36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.4.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:53:b4:89:c5:d5:8e:95:78:56:03:dd:1f:4c:a2:e9:f1:f4:
         5c:ad:07:b0:a0:35:6d:c2:be:b8:d8:20:68:dc:a3:f8:d9:0b:
         0d:68:d4:31:a2:59:d4:e0:7b:05:27:a6:de:b9:42:14:78:da:
         dd:d6:46:18:5e:70:c5:a9:be:94:06:2f:65:89:bd:13:3d:d6:
         5f:ee:b8:77:28:37:ed:d0:47:39:13:24:15:63:7e:2c:97:0a:
         d5:d5:c1:e9:f6:e4:e0:d1:3b:e7:86:3a:20:3a:6c:90:bb:79:
         7e:d9:f6:7c:6e:ca:b3:6c:a5:65:25:9e:c2:d9:a2:ec:13:5e:
         21:06:ec:ec:a9:88:e2:e8:c2:64:d5:ca:4d:7a:88:72:5a:83:
         97:fb:bf:36:81:2e:e8:2d:6f:36:14:e7:89:53:ec:b5:0b:94:
         09:55:e0:c3:60:1e:2d:d8:b8:c7:dc:72:44:82:fb:d1:b7:95:
         34:d1:c9:a5:43:a8:20:68:95:7a:08:f5:52:6f:4f:66:93:59:
         ac:80:7b:6d:d8:8b:7d:86:6e:cf:51:07:a2:62:1b:47:df:0e:
         a1:d0:ae:89:c7:d6:8d:d2:f1:6e:bb:3a:88:e8:c5:aa:c7:b4:
         79:85:e8:9d:fc:05:78:ec:e4:46:ca:f6:6d:58:20:2d:92:eb:
         07:55:c5:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxP2wS7xqCMEueCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk
ZjlhMjNiZjEtYjU2MC00MWQ2LTg2ODUtMDFhYjYwNzdmODE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNI4C9jP/GEAp0faVlbZ1R9ZUth4jFT7pJ2W
aiSkni6E4+7HlYJu4qx939QZRjg+G8p5z9x2huLKrTwXo0XiOKxn+Zxy8KLDPOdU
f9ABKEYmrkhg3tBMkd/n7UgXBkmqJETjc9yeiPDI0ryBzelSKrCcugvnXOMsrmrZ
L8dY/f1VDkpg+QE5bINqkhRydqvZ1G6Vy8g4Zq8hR3j98wiAW0AV0k19Sntphbrb
heVMJ8nzoHfUmK0MapToA8IShND/v6WqTQNdEYGxk6sWzNGRP7e97MYyrQ6imrQo
DydjT/iIBPMVa5pRCkL2ChI0Q+XvH43qEo4gxVrULrsAhJTwFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJO37RVsxh6bcTtHRTJfm4mB2PjaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDlkMGUxMzctMmEwMC0z
MmY1LTg1MTktYzFlZjJlZjQwYTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGAQwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKRTtInF1Y6VeFYD3R9Mounx9FytB7CgNW3CvrjYIGjco/jZCw1o1DGi
WdTgewUnpt65QhR42t3WRhhecMWpvpQGL2WJvRM91l/uuHcoN+3QRzkTJBVjfiyX
CtXVwen25ODRO+eGOiA6bJC7eX7Z9nxuyrNspWUlnsLZouwTXiEG7OypiOLowmTV
yk16iHJag5f7vzaBLugtbzYU54lT7LULlAlV4MNgHi3YuMfcckSC+9G3lTTRyaVD
qCBolXoI9VJvT2aTWayAe23Yi32Gbs9RB6JiG0ffDqHQronH1o3S8W67OojoxarH
tHmF6J38BXjs5EbK9m1YIC2S6wdVxcA=
-----END CERTIFICATE-----
Generated at Sat Aug 23 23:04:51 2025 by rpki-client