Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba9f084c-2c84-312b-8e11-b8f2b90cd934.roa
File:                     ba9f084c-2c84-312b-8e11-b8f2b90cd934.roa (raw, json)
Hash identifier:          520GYwxjuTE0iqtWRUVF/lc8+T44R0tFsgQyY72jMDU=
Subject key identifier:   F0:D8:F1:41:4C:CA:E0:71:73:11:E0:5F:23:DE:A1:B6:D8:DE:AE:C6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB90703F495A2674B6746C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba9f084c-2c84-312b-8e11-b8f2b90cd934.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     20214
IP address blocks:        50.229.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b9:07:03:f4:95:a2:67:4b:67:46:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=0f658dfc-500a-4a39-90a7-609b22dd1dce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:1a:d3:3c:6f:d4:48:95:02:3e:2f:25:a6:83:
                    16:b8:8e:03:ca:67:d7:1e:d0:ab:07:d3:79:cf:40:
                    98:ec:50:b8:3c:99:98:91:30:36:80:67:3f:6a:56:
                    3a:9e:2f:f3:6b:23:02:69:73:0a:6f:bf:89:54:cb:
                    63:20:a1:37:9c:67:e3:42:ef:92:e0:ad:59:c0:34:
                    b0:53:91:f9:63:25:04:d8:4b:16:5c:35:81:18:6f:
                    39:dd:0d:4f:3a:71:65:46:73:6a:d5:4f:4c:4b:3a:
                    f3:3b:00:36:49:85:c0:f6:f0:5f:3c:35:02:ca:fa:
                    bc:44:79:62:b3:5f:35:7f:1e:06:4b:b2:59:e5:df:
                    24:68:bb:d1:41:59:00:ea:4c:52:74:c1:5b:8f:ef:
                    94:76:4f:f4:77:94:8c:77:b0:87:11:cc:66:16:fc:
                    bc:e3:eb:56:87:69:31:78:1c:ba:7a:eb:c5:3b:2e:
                    5a:90:5b:66:1e:7a:36:39:f7:20:93:01:50:14:fe:
                    2b:15:39:b0:62:ab:8b:c3:dc:fc:82:3e:1b:88:79:
                    cf:83:fb:1f:83:91:9f:e5:64:78:e6:78:82:8d:f2:
                    75:f3:27:34:7d:e3:be:c1:53:75:9d:1b:f1:3d:18:
                    01:2f:3a:ff:b3:b6:c5:a3:da:29:fc:b4:b5:ab:69:
                    73:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D8:F1:41:4C:CA:E0:71:73:11:E0:5F:23:DE:A1:B6:D8:DE:AE:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba9f084c-2c84-312b-8e11-b8f2b90cd934.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.229.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:12:59:75:14:4e:d1:01:51:c4:72:81:6e:35:29:e7:c7:61:
         e1:11:26:b4:6f:ec:e2:c8:c4:cf:8e:91:be:06:a3:ad:89:10:
         0d:86:88:e0:f2:ef:3f:87:03:e4:f9:b0:ba:da:55:78:3a:ab:
         d0:7e:85:78:cd:b9:54:1e:92:08:e2:e8:33:bc:fb:85:56:2f:
         a5:59:29:7a:56:b1:71:4c:2e:1a:70:87:9d:6d:a9:e3:c7:43:
         5e:a0:47:c7:b2:7c:d7:3f:a0:c9:44:74:82:7e:1e:e3:5b:2f:
         65:01:3a:b4:a0:35:70:ac:16:63:69:f8:6e:68:bf:e8:bd:75:
         99:a8:e0:01:98:8c:2d:9a:1d:9c:e7:4f:13:07:cd:29:82:97:
         3a:65:d2:5b:0f:4f:ca:de:74:90:20:9a:82:f8:4d:40:48:c0:
         41:e9:f2:1c:88:89:44:c9:dc:2f:e7:e6:5c:b0:5d:28:02:2f:
         b1:38:6c:77:74:75:96:de:10:ed:fc:76:41:e7:53:f5:15:97:
         09:35:25:c8:32:f9:93:8c:21:fc:34:e6:b6:02:f3:21:5c:59:
         9b:af:e2:7c:af:03:96:8f:4a:28:c7:28:1b:19:83:47:57:ee:
         66:57:68:d2:d5:5e:d0:fb:09:35:63:84:6a:32:af:1d:a1:93:
         65:92:95:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:19:56 2025 by rpki-client