Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f2f7d7e-a4fd-3a21-b2b3-ba50654fba90.roa
File:                     9f2f7d7e-a4fd-3a21-b2b3-ba50654fba90.roa (raw, json)
Hash identifier:          KxZGjKMa93HRj/Jt+X0QhUNeG5o840dJTKMUfbh4FC8=
Subject key identifier:   83:EB:51:2F:DB:F6:DE:FC:CA:50:0F:8F:D6:E1:80:B5:3F:10:DA:7A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFD9C1E928094F270DE1122
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f2f7d7e-a4fd-3a21-b2b3-ba50654fba90.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        50.203.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:9c:1e:92:80:94:f2:70:de:11:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=2052060d-e062-4a81-932a-db4cf672f06d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:8f:8b:b7:1e:a6:42:41:6f:5b:c3:8d:77:5b:
                    83:a1:40:13:96:49:5d:ca:55:e2:93:02:60:7f:06:
                    41:02:e3:e6:5e:a8:b6:3e:0d:17:4e:d8:68:f3:d6:
                    07:83:91:1e:60:0f:5e:5b:7d:77:f5:f4:f0:e2:70:
                    c1:48:c9:4e:c7:1e:70:ac:20:85:06:4f:f8:3c:09:
                    e5:4f:1a:5d:0f:7c:58:e0:57:1b:83:06:02:cb:36:
                    70:87:c5:d0:8d:91:9b:1f:df:63:c0:bf:fa:55:cf:
                    cd:52:6c:cf:dc:a9:c6:aa:a0:ee:b9:1c:6c:5b:27:
                    53:d4:fd:32:00:de:0a:0c:aa:88:23:63:db:6e:25:
                    1a:84:9e:ec:1a:f2:42:2f:91:8c:bf:44:4e:db:16:
                    ae:fc:8e:fb:08:cf:36:03:22:99:4a:a5:9b:a6:f1:
                    1b:7e:6f:83:00:a0:f0:53:8f:e8:6d:b9:21:a2:ce:
                    4a:5b:ea:3c:75:2a:0a:cb:70:ce:95:1f:7e:1b:7e:
                    24:54:32:96:88:f3:2d:4b:42:31:f3:0d:c6:52:f5:
                    42:ef:98:fc:35:a1:5b:d3:95:95:a2:c1:9f:8f:c3:
                    af:e2:f7:eb:ca:96:eb:ad:73:63:d0:c7:3a:2d:9a:
                    d9:6f:80:00:5d:aa:ba:79:d4:b5:1d:26:5a:70:52:
                    4f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:EB:51:2F:DB:F6:DE:FC:CA:50:0F:8F:D6:E1:80:B5:3F:10:DA:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f2f7d7e-a4fd-3a21-b2b3-ba50654fba90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.203.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:a8:97:62:2c:c6:4b:f7:d7:45:3b:8b:fc:d2:dc:b8:71:2f:
         e4:3f:fb:90:e3:11:05:7c:bc:27:c0:a7:cc:6e:b4:df:bc:04:
         2b:dd:03:5e:71:82:32:be:03:c7:55:0c:97:e5:32:a4:53:65:
         1a:3b:38:23:d1:69:a1:73:10:f9:9c:7c:14:82:55:fa:fa:06:
         cd:af:64:98:a2:4d:b4:c7:38:85:a6:2d:5e:00:a7:d9:51:78:
         9e:e5:ce:9e:94:92:32:2e:68:cc:41:af:37:5b:64:79:d7:bd:
         00:a1:4f:7c:3b:82:3e:71:4f:4e:7a:8f:88:19:7b:f0:3e:ba:
         b6:04:a1:6c:ac:fd:2a:48:02:b0:e7:94:a6:8c:36:a5:e6:00:
         29:66:24:16:ec:f3:39:fc:83:08:1b:08:aa:6c:20:d9:c3:00:
         76:0c:2f:f0:26:13:80:8a:01:99:67:7b:f6:bf:e3:3b:72:d0:
         a6:09:1f:a5:7f:a9:5d:bf:11:0a:93:e5:7e:79:b6:ab:b2:96:
         9a:7e:f5:78:a7:83:2c:a5:7c:e9:0e:f7:92:91:79:37:29:10:
         f1:1d:cd:72:b1:b8:16:bb:73:ec:0b:42:c0:3d:1e:66:e5:14:
         33:51:a4:7f:63:84:a5:6f:82:c7:23:f5:d2:48:c1:cc:9f:a4:
         f6:e4:bd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:50:24 2025 by rpki-client