Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5aa82d0-0f65-3e64-8985-d0d67356269b.roa
File:                     c5aa82d0-0f65-3e64-8985-d0d67356269b.roa (raw, json)
Hash identifier:          l3FuruBwbQtNZZWSWRYvGShzzfdSIZ9J/24S3NFngDI=
Subject key identifier:   AE:BF:99:5D:7B:B6:1E:37:A3:41:4D:75:EC:BC:1B:9D:E8:CB:A1:F7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DBA141694C6CFDF307BC000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5aa82d0-0f65-3e64-8985-d0d67356269b.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     14682
IP address blocks:        50.202.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:ba:14:16:94:c6:cf:df:30:7b:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=a65bc17d-84b5-4aa5-b1d6-4c8c372b326c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:72:bc:6a:29:7d:a5:6a:a2:a3:c1:91:2a:b8:
                    ed:34:f0:29:6b:bd:8d:0f:f8:ed:2e:9a:26:5b:71:
                    60:37:b1:a2:56:0a:27:56:e3:6a:d1:bc:88:5b:59:
                    dd:0d:70:72:71:de:31:ad:af:3a:d4:8e:8f:7a:a6:
                    fd:26:24:26:a4:d2:82:70:e6:08:85:72:9c:ce:a4:
                    3f:b4:6a:ee:bb:2f:13:39:2d:f7:c5:7f:0a:10:1c:
                    51:5b:10:ae:d6:af:3a:f5:c7:3f:99:68:b3:ea:6f:
                    96:d9:38:8d:26:a2:38:94:d9:5a:a1:35:66:a2:56:
                    1f:83:1a:35:e1:7f:64:1a:61:c4:cc:47:87:3f:12:
                    d0:8f:56:02:0b:13:45:69:4d:27:0d:8c:fa:f4:f0:
                    88:8f:f4:6f:01:ca:35:9a:cc:23:fe:6a:19:76:ce:
                    99:c1:78:ae:ee:b1:e3:a5:b9:32:4b:2c:47:80:99:
                    e4:7f:d0:1c:70:af:97:04:03:f3:27:80:86:7f:2c:
                    8d:4e:72:f0:5d:1e:d1:02:5b:25:73:14:05:9c:1b:
                    3a:ba:4f:ed:23:ac:90:61:91:61:98:41:75:1d:f6:
                    b6:f7:64:39:d2:5e:54:c4:ca:0c:d0:ab:fd:94:b3:
                    62:f3:cc:e7:84:96:ea:6a:bf:9a:b4:f1:4a:57:cf:
                    44:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:BF:99:5D:7B:B6:1E:37:A3:41:4D:75:EC:BC:1B:9D:E8:CB:A1:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5aa82d0-0f65-3e64-8985-d0d67356269b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.202.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dd:8f:75:af:65:94:5b:fd:df:47:d2:f4:af:02:2a:b3:fc:35:
         e7:7e:a5:97:d4:59:9d:99:65:fb:72:0c:2c:51:3d:ed:04:83:
         20:04:1e:ed:18:e8:79:a5:f2:cd:f6:06:b6:03:fb:d9:0b:d0:
         74:9f:f4:6a:8b:fc:a9:60:25:bc:55:35:9f:ad:5c:91:27:2a:
         70:25:2b:48:e8:e5:91:50:0d:c0:a8:88:1d:c7:7b:ce:1b:03:
         c8:eb:ff:12:e3:a8:79:61:8a:df:9f:10:ac:1e:95:6b:fa:21:
         fe:94:b1:71:9d:76:69:84:60:af:ea:71:66:6a:50:4d:79:c5:
         69:7b:89:1a:c5:e2:1f:f3:6f:0e:76:44:4f:ce:25:52:4c:8c:
         1c:dc:9a:73:82:6b:1c:24:2d:ec:5f:c6:98:59:0e:9c:27:ea:
         b5:41:3b:c8:b8:25:b5:f7:21:2e:82:ac:98:e2:85:62:92:dc:
         49:81:fd:e7:f0:17:6f:c6:43:d3:64:87:ea:ff:31:3f:34:56:
         a7:91:e5:61:f0:17:8a:04:d8:00:61:2f:dc:34:0f:d0:7c:71:
         92:c8:7a:fe:b3:31:50:8c:0a:a2:49:8e:ed:a4:0c:49:1a:a0:
         a8:ef:dc:dd:b3:1b:52:4b:c7:2e:a7:54:65:88:4d:8b:bd:00:
         5a:fa:a5:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uhQWlMbP3zB7wAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk
YTY1YmMxN2QtODRiNS00YWE1LWIxZDYtNGM4YzM3MmIzMjZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHK8ail9pWqio8GRKrjtNPApa72ND/jtLpom
W3FgN7GiVgonVuNq0byIW1ndDXBycd4xra861I6Peqb9JiQmpNKCcOYIhXKczqQ/
tGruuy8TOS33xX8KEBxRWxCu1q869cc/mWiz6m+W2TiNJqI4lNlaoTVmolYfgxo1
4X9kGmHEzEeHPxLQj1YCCxNFaU0nDYz69PCIj/RvAco1mswj/moZds6ZwXiu7rHj
pbkySyxHgJnkf9AccK+XBAPzJ4CGfyyNTnLwXR7RAlslcxQFnBs6uk/tI6yQYZFh
mEF1Hfa292Q50l5UxMoM0Kv9lLNi88znhJbqar+atPFKV89EYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK6/mV17th43o0FNdey8G53oy6H3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzVhYTgyZDAtMGY2NS0z
ZTY0LTg5ODUtZDBkNjczNTYyNjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMspIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAN2Pda9llFv930fS9K8CKrP8Ned+pZfUWZ2ZZftyDCxRPe0EgyAEHu0Y
6Hml8s32BrYD+9kL0HSf9GqL/KlgJbxVNZ+tXJEnKnAlK0jo5ZFQDcCoiB3He84b
A8jr/xLjqHlhit+fEKwelWv6If6UsXGddmmEYK/qcWZqUE15xWl7iRrF4h/zbw52
RE/OJVJMjBzcmnOCaxwkLexfxphZDpwn6rVBO8i4JbX3IS6CrJjihWKS3EmB/efw
F2/GQ9Nkh+r/MT80VqeR5WHwF4oE2ABhL9w0D9B8cZLIev6zMVCMCqJJju2kDEka
oKjv3N2zG1JLxy6nVGWITYu9AFr6pVU=
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:32:55 2025 by rpki-client