Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3a00b4b-6270-38d2-bf61-1785422a400c.roa
File:                     d3a00b4b-6270-38d2-bf61-1785422a400c.roa (raw, json)
Hash identifier:          JFQSGkgOFhuPnWlUEN7RVQmePF98C+AavKJ9EiJ7ZHg=
Subject key identifier:   9C:39:13:68:5D:04:7A:8A:A1:94:89:1F:C1:F1:EC:CD:6E:30:F3:85
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DBA1F0C775F61650B89BED0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3a00b4b-6270-38d2-bf61-1785422a400c.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     395691
IP address blocks:        50.234.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:ba:1f:0c:77:5f:61:65:0b:89:be:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=984ab598-5c92-463e-afe9-1e3ecebaf062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:33:91:f0:8a:4b:af:55:9e:94:81:79:1e:87:
                    b7:cb:3a:0a:60:a1:41:48:19:de:2e:3f:ba:18:44:
                    9c:61:ed:e7:be:eb:f2:8f:68:ed:84:c3:67:4a:0d:
                    7b:5b:e3:d0:1c:ac:fd:86:95:35:17:bd:44:17:ea:
                    41:c7:0d:c5:45:f3:d0:57:bd:3a:14:12:7b:f7:db:
                    03:b5:69:c2:d7:d0:28:7c:ad:b1:7f:23:80:74:cd:
                    e6:1a:25:48:df:e3:17:6f:f5:94:cb:e5:3b:f0:5d:
                    f2:f8:ef:ff:75:97:55:e9:9f:93:fe:e0:29:93:0e:
                    15:9e:9f:ba:8a:c8:0a:21:33:0a:02:7d:1e:29:c2:
                    bb:80:45:7e:56:26:00:ce:c6:b6:dc:7a:54:ad:ff:
                    dc:1d:cc:ac:b9:28:99:ff:92:e1:d2:b6:33:e7:9c:
                    98:cf:ce:35:e5:d8:60:e3:5d:e3:3b:1a:3e:71:b8:
                    ea:b5:f0:22:ee:24:f0:ff:c0:e3:46:28:b3:c4:72:
                    65:b8:98:68:15:8a:bd:50:a3:aa:cb:7d:f1:96:81:
                    10:28:91:49:a2:a1:dd:d1:6c:91:97:17:d6:21:16:
                    01:78:1a:99:43:20:b4:44:17:df:ce:58:97:b5:c4:
                    15:a7:02:df:1a:e2:fb:73:fa:d4:e6:52:aa:fb:dc:
                    f3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:39:13:68:5D:04:7A:8A:A1:94:89:1F:C1:F1:EC:CD:6E:30:F3:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3a00b4b-6270-38d2-bf61-1785422a400c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.234.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:15:07:5b:b4:7b:1b:63:9d:5b:b0:bf:ec:90:b9:d4:d6:96:
         0e:e4:a8:8c:02:59:e3:ab:b2:9f:37:5e:8f:1f:6c:97:4a:ed:
         d3:be:31:4e:3c:dc:37:ed:db:e9:07:48:75:bf:b0:5d:fd:0e:
         9a:ce:2a:55:e6:3c:37:65:62:dc:19:72:c1:50:18:01:5c:f6:
         a8:ad:90:8e:07:d4:aa:f6:cf:1a:c9:34:5d:7d:95:3c:a8:34:
         32:46:5f:77:e4:a6:81:44:8e:d7:82:52:11:eb:15:a3:71:ae:
         6b:e9:bb:07:ea:9c:b2:0b:32:ab:d2:1f:16:02:76:c2:f0:aa:
         77:45:3c:cc:fd:a3:60:dc:08:47:a0:28:42:f0:fd:f2:be:7a:
         b5:8a:18:b8:46:92:8e:06:fe:91:43:8a:8d:90:28:64:7d:32:
         2b:cc:e0:81:bb:6c:53:a7:5a:12:aa:31:73:52:ef:d0:60:7c:
         b7:ee:b4:5d:12:06:3f:d8:a7:c4:73:6b:be:b6:88:ce:ec:cd:
         ea:0c:bd:7c:42:47:d6:63:02:0a:eb:5c:0b:74:22:a3:bc:4f:
         e9:d7:df:e9:8b:b1:11:1c:de:72:6c:9e:3b:5b:51:b9:e6:7c:
         0e:63:39:52:75:2a:ce:66:0b:b6:61:3a:45:e4:da:34:13:ed:
         20:af:96:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:41:38 2025 by rpki-client