Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d32133ce-e23d-367a-b38c-fcaed8a24860.roa
File:                     d32133ce-e23d-367a-b38c-fcaed8a24860.roa (raw, json)
Hash identifier:          5u/waRIjkqXAz22vU0Ukb1CXXNOXBM/4HNLCiaxxApM=
Subject key identifier:   B0:8F:E7:D0:D6:FB:D6:AE:78:B3:C8:29:5E:A5:39:A8:DE:4F:7A:CE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB79A1C9345345FBB6C7F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d32133ce-e23d-367a-b38c-fcaed8a24860.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33651
IP address blocks:        50.230.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:9a:1c:93:45:34:5f:bb:6c:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=d9fc8c73-bf39-459b-8136-fc340ed05d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:77:2a:fe:c6:aa:f1:ae:fb:fb:d4:af:7b:5f:
                    ad:d2:01:73:95:13:c4:93:82:d3:b1:5d:10:0b:3a:
                    ba:5f:b4:7c:5e:4b:e9:ef:99:60:59:8d:a6:df:74:
                    d8:03:4b:cc:27:bb:76:dc:c9:8c:58:7b:71:d9:28:
                    56:08:a3:93:02:89:80:5d:dc:fc:c3:a4:43:0f:30:
                    d9:6e:ff:ba:42:a7:e8:f3:00:69:75:ad:bd:15:4f:
                    a0:28:a8:2e:d0:b4:c3:03:9a:88:70:04:78:60:dc:
                    9c:8f:3d:97:da:18:64:e9:5f:e8:f6:b7:9c:63:f5:
                    6a:e1:25:09:87:00:ae:90:4c:06:98:e3:06:0d:85:
                    8f:f9:48:09:cb:5f:f2:e0:30:1f:d9:71:3a:5a:93:
                    f8:29:a6:31:43:1c:18:a8:c9:74:16:30:77:98:d5:
                    58:11:ff:51:87:b5:0e:b2:59:51:de:be:9b:ba:eb:
                    9c:41:e4:0a:1c:32:f7:40:04:4e:4f:0e:5f:ab:66:
                    d1:aa:52:66:08:20:0f:b9:63:00:32:fc:6f:a0:26:
                    25:0c:4f:7f:01:6f:62:04:f1:a0:cc:48:97:e9:ce:
                    2a:c0:a4:40:bc:8b:5b:9a:57:a1:50:e1:20:66:a9:
                    e2:fa:f7:b2:ff:b0:fb:61:08:5a:a8:1b:34:56:15:
                    24:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:8F:E7:D0:D6:FB:D6:AE:78:B3:C8:29:5E:A5:39:A8:DE:4F:7A:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d32133ce-e23d-367a-b38c-fcaed8a24860.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.230.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:d9:73:53:94:2b:be:95:b3:97:65:a1:1a:71:4b:d7:e2:4b:
         df:1b:21:75:57:82:d8:93:57:8b:62:5d:d5:bc:4e:ee:a5:45:
         03:29:3c:cc:0c:94:d3:d5:ff:30:3f:6a:c5:f3:db:de:6c:3c:
         9b:d1:cd:a8:c1:83:47:3b:42:60:8d:d5:ac:de:22:c0:8f:f2:
         cb:93:3a:8f:fd:d4:7a:e5:12:5e:33:3f:f6:c1:1d:5d:1b:b8:
         43:d8:c6:c2:a9:8e:23:fa:5f:6b:fc:fa:b1:c8:6b:e5:55:68:
         2a:28:45:d6:75:22:84:52:e5:bc:aa:a6:92:67:d0:74:8a:cf:
         a8:fe:2e:bc:8c:64:f5:75:ea:12:ba:80:98:7d:4d:d0:b4:91:
         09:b9:51:57:fd:20:31:c8:99:e6:79:c5:40:9c:e1:e1:22:29:
         cf:61:22:94:a6:87:bb:6e:55:7c:e6:c3:d6:87:54:bc:bf:4e:
         bf:bc:6d:ba:c2:ab:0b:97:10:50:25:a4:b7:ac:e4:43:53:a5:
         1a:af:67:5b:f0:7b:73:42:5e:80:8c:19:f7:a6:93:78:03:4a:
         e7:24:50:d9:89:3a:31:f9:78:3b:80:8f:4f:b2:27:c0:fc:5c:
         d4:c1:d8:f6:21:97:e1:c2:3e:d3:67:b1:5a:43:2d:3c:99:81:
         e5:ae:d3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:42:29 2025 by rpki-client