Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b3ed33e-0bbf-3642-a0b9-be868c2e8cd9.roa
File:                     6b3ed33e-0bbf-3642-a0b9-be868c2e8cd9.roa (raw, json)
Hash identifier:          +tM042MX/D3G3GaAKA9EkojmwoCdoZBPT+bzBK9V+eE=
Subject key identifier:   4F:84:95:70:CD:94:6E:F1:C1:DA:A2:4E:E3:AB:B9:6D:CF:BB:11:7E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB990B95A0AC4505C292E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b3ed33e-0bbf-3642-a0b9-be868c2e8cd9.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     13367
IP address blocks:        50.212.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b9:90:b9:5a:0a:c4:50:5c:29:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=0b341f26-c1d8-4ad4-b435-c8430b452b54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:65:10:62:cd:e6:1c:9f:92:3a:14:b7:b2:d0:
                    d6:8e:39:55:c5:b1:31:e1:4b:87:80:85:00:ae:f7:
                    fd:fb:d7:e3:4f:c3:e7:0a:30:c1:b8:b1:82:50:ea:
                    7a:88:eb:55:65:1c:ef:f9:fa:1c:eb:60:ce:f0:2d:
                    14:b5:8a:41:5e:ba:57:5a:b3:b0:d4:1d:59:a0:05:
                    aa:b4:58:89:de:d2:e5:aa:e3:78:5e:68:1d:22:3d:
                    72:06:62:98:00:38:c8:e7:8d:28:d7:67:a9:c3:fc:
                    82:c4:9c:b8:ea:a0:47:df:1e:46:de:cb:ed:b6:db:
                    40:2d:9c:f3:0b:d9:10:4e:16:e0:61:d9:2b:37:12:
                    24:4c:61:2c:d0:4c:f9:3f:30:07:51:bf:b9:bb:65:
                    4c:37:1c:c4:c5:1e:3f:0b:4a:cf:1f:be:36:72:97:
                    b6:a4:58:8d:08:e9:36:1d:20:27:c9:08:64:5c:a8:
                    02:d8:31:4c:2c:51:8a:40:27:89:38:97:c7:20:17:
                    8c:86:ba:e0:99:f0:81:af:39:80:5f:aa:82:18:65:
                    8a:6f:39:90:25:e9:91:d3:a6:a1:39:1e:ef:83:f3:
                    f5:aa:a3:3f:0c:60:c9:4f:86:e5:40:bd:9c:8e:35:
                    9d:a6:25:cc:30:fa:57:3b:dc:3e:0f:58:0c:ff:ca:
                    75:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:84:95:70:CD:94:6E:F1:C1:DA:A2:4E:E3:AB:B9:6D:CF:BB:11:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b3ed33e-0bbf-3642-a0b9-be868c2e8cd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.212.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:9e:37:6f:8a:86:70:7a:7c:12:50:38:66:20:2c:db:56:8c:
         3c:cb:ca:b7:72:48:17:10:2b:f9:f2:e9:c2:a6:80:d0:1e:fb:
         06:2f:c8:9e:cc:99:83:6b:e7:19:45:7d:9d:7c:b7:c5:3a:12:
         59:f4:6d:d6:7d:0a:33:27:11:69:1a:ea:48:4a:01:ee:61:56:
         d4:f0:01:99:88:64:cb:07:3b:54:9f:75:c2:dc:e3:ce:78:78:
         9f:10:af:ba:d8:9f:e7:07:b0:43:2e:13:a6:f8:2b:4f:29:24:
         bb:68:cc:19:86:96:79:18:77:45:ef:f0:3d:65:42:c8:af:28:
         32:44:dc:ef:ba:7c:1b:7f:4f:14:dd:1b:cf:b2:0c:33:25:2e:
         35:1f:0d:ea:49:8b:93:fc:f9:29:e6:3b:d2:58:8c:81:19:49:
         bc:07:71:d2:69:36:ec:a6:9f:c5:af:8e:2a:44:d8:bf:d3:72:
         9f:34:61:b6:05:b1:09:90:9c:f0:d2:bf:e4:a8:4e:03:5b:ba:
         c4:4c:db:b6:1c:96:1e:1b:b4:50:1f:a3:c2:d8:b4:65:b9:d0:
         4d:02:e9:47:5f:51:7c:0f:a1:46:6a:9b:27:44:cc:6d:92:63:
         a8:71:db:e2:9d:2d:74:a2:69:e7:b8:5b:ee:9e:de:5e:36:f6:
         ab:e3:51:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:37:23 2025 by rpki-client