Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/63fdab11-87fa-32a3-bab3-8dc9b3fd4340.roa
File:                     63fdab11-87fa-32a3-bab3-8dc9b3fd4340.roa (raw, json)
Hash identifier:          CkRBdpwAnQUAI7DxFDtkeOYC1Da5ZFHpjyVPnrdoonQ=
Subject key identifier:   C5:BB:49:B0:07:34:84:0E:37:54:EC:BB:E4:D6:F5:C1:AF:1E:2F:38
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D44FA710C4D8604A0B63BEE00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/63fdab11-87fa-32a3-bab3-8dc9b3fd4340.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     33491
IP address blocks:        50.153.148.0/24 maxlen: 24
                          50.153.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:71:0c:4d:86:04:a0:b6:3b:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=59070f7b-b9ca-4e90-93e8-29a53f535e24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b0:e8:a9:cf:8d:9d:d0:2e:fd:3f:17:9a:55:
                    40:b8:67:2e:75:9f:5e:57:ac:7e:2a:0f:d6:f9:78:
                    3f:66:5f:18:83:d0:7a:73:52:d3:e7:a6:44:71:c0:
                    fe:7e:81:cb:8d:d0:5b:9e:80:e6:ec:f7:7d:94:65:
                    2b:c0:fa:e2:ca:2f:32:1b:68:5b:53:0c:fd:7c:17:
                    5c:f2:6d:f3:11:ae:98:e5:64:5f:e7:66:fc:04:f0:
                    5c:4b:f7:0c:ed:d8:7d:8b:8f:6c:2a:a5:f8:1c:70:
                    3b:b3:e1:8c:90:86:57:d7:cf:1f:7a:31:c5:5c:df:
                    42:96:ab:91:c4:e0:f4:23:e6:be:b0:17:c6:7a:c7:
                    ec:26:99:3f:e6:f4:19:a8:9f:78:4e:b1:f1:5a:d4:
                    82:bf:b2:b2:98:fa:db:c0:f3:09:d9:29:68:c3:51:
                    52:6d:6b:fe:72:7d:33:4e:5c:cd:f6:2a:c4:88:16:
                    80:4f:07:dd:9e:b2:ec:c6:5a:cd:12:45:49:b1:1c:
                    42:50:56:8e:45:93:eb:63:92:8c:cc:38:19:19:47:
                    dd:b5:96:29:71:5c:ab:91:5e:51:00:e2:a4:13:0f:
                    08:68:b8:96:b4:57:cc:62:b8:b1:71:46:b4:79:46:
                    92:c2:71:6c:12:00:6a:f4:70:8b:5a:6b:92:da:ab:
                    18:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:BB:49:B0:07:34:84:0E:37:54:EC:BB:E4:D6:F5:C1:AF:1E:2F:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/63fdab11-87fa-32a3-bab3-8dc9b3fd4340.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.153.148.0/24
                  50.153.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:99:90:75:43:27:74:3f:0a:1f:7a:37:dc:97:5e:18:53:a0:
         41:9f:c5:50:87:26:64:ba:76:48:fc:ed:29:e6:6a:2e:41:4a:
         3a:f0:8c:33:be:3b:de:a4:ae:f5:e7:d8:4c:f4:18:c3:40:fe:
         94:43:a6:13:01:1f:67:97:30:e1:ec:e6:75:cf:c8:2c:9f:d2:
         18:bc:eb:80:9b:46:2a:0b:91:a2:0f:01:b3:0b:b9:04:8d:10:
         80:33:82:e3:17:53:07:12:c8:6d:bc:b7:b2:95:a8:b9:7f:21:
         c4:3d:26:85:02:d8:7c:33:ea:30:45:02:7d:1a:fe:ae:69:65:
         b3:9f:e6:ab:f4:d0:e3:f2:ff:0d:52:12:10:37:af:c7:32:0a:
         0f:08:78:4d:7d:1b:b8:02:fd:8a:81:36:5e:15:d3:21:b5:b1:
         79:ac:dc:4b:61:8d:54:2d:c9:ec:8d:81:c0:ed:9a:2b:ac:4b:
         39:b6:2b:d0:6f:df:13:fc:7e:16:a1:2d:3c:21:c7:32:7d:ba:
         68:48:dc:c3:53:22:92:f5:a3:71:c3:ae:e1:1f:50:cd:a6:1d:
         93:a9:b1:b3:6f:ca:03:2d:25:4d:c3:df:09:de:fc:13:cd:06:
         3e:24:5f:0c:dc:de:5e:ff:53:bd:9f:5e:4e:7c:a1:79:84:25:
         12:ea:ca:ee
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1E+nEMTYYEoLY77gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk
NTkwNzBmN2ItYjljYS00ZTkwLTkzZTgtMjlhNTNmNTM1ZTI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrDoqc+NndAu/T8XmlVAuGcudZ9eV6x+Kg/W
+Xg/Zl8Yg9B6c1LT56ZEccD+foHLjdBbnoDm7Pd9lGUrwPriyi8yG2hbUwz9fBdc
8m3zEa6Y5WRf52b8BPBcS/cM7dh9i49sKqX4HHA7s+GMkIZX188fejHFXN9ClquR
xOD0I+a+sBfGesfsJpk/5vQZqJ94TrHxWtSCv7KymPrbwPMJ2Slow1FSbWv+cn0z
TlzN9irEiBaATwfdnrLsxlrNEkVJsRxCUFaORZPrY5KMzDgZGUfdtZYpcVyrkV5R
AOKkEw8IaLiWtFfMYrixcUa0eUaSwnFsEgBq9HCLWmuS2qsYGQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFMW7SbAHNIQON1Tsu+TW9cGvHi84MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjNmZGFiMTEtODdmYS0z
MmEzLWJhYjMtOGRjOWIzZmQ0MzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAMpmUAwQA
MpmgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAH+ZkHVDJ3Q/Ch96N9yXXhhToEGfxVCHJmS6dkj87Snmai5B
SjrwjDO+O96krvXn2Ez0GMNA/pRDphMBH2eXMOHs5nXPyCyf0hi864CbRioLkaIP
AbMLuQSNEIAzguMXUwcSyG28t7KVqLl/IcQ9JoUC2Hwz6jBFAn0a/q5pZbOf5qv0
0OPy/w1SEhA3r8cyCg8IeE19G7gC/YqBNl4V0yG1sXms3EthjVQtyeyNgcDtmius
Szm2K9Bv3xP8fhahLTwhxzJ9umhI3MNTIpL1o3HDruEfUM2mHZOpsbNvygMtJU3D
3wne/BPNBj4kXwzc3l7/U72fXk58oXmEJRLqyu4=
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:37:56 2026 by rpki-client