Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d6804369-8d44-350e-a63a-5bf72ae02aaf.roa
File:                     d6804369-8d44-350e-a63a-5bf72ae02aaf.roa (raw, json)
Hash identifier:          uSUgy6xJO3fWJYylcgFBYnpCfHxs41jtJ2thOMxYvAQ=
Subject key identifier:   08:F8:FF:FB:6F:2D:C6:32:0F:05:E7:F3:23:44:68:0C:01:05:E6:74
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFC3353674D9C55D3155740
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d6804369-8d44-350e-a63a-5bf72ae02aaf.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33287
IP address blocks:        50.79.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:33:53:67:4d:9c:55:d3:15:57:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=1f5960f0-efd6-4053-8ce0-839a7cb2ad18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:25:b1:95:15:30:84:29:5f:a1:6b:71:05:c6:
                    c8:67:81:b6:67:0d:8e:08:7c:1c:a0:8a:29:32:7b:
                    96:b5:e5:70:96:5e:57:b6:b4:ff:4f:af:d7:6c:97:
                    dc:65:e9:ad:00:a0:47:fb:23:8f:04:b9:4b:cd:0c:
                    11:5c:e5:51:3b:ed:78:31:9a:78:c0:93:22:05:2b:
                    be:8a:d5:73:72:51:14:18:30:3d:d9:a1:9c:72:e0:
                    d4:88:93:c7:37:92:57:1b:a8:74:5b:14:cc:38:36:
                    8c:60:5a:d6:cf:b4:b8:b4:ee:68:e2:4d:ee:74:0f:
                    ab:92:54:11:20:e2:67:71:5d:82:86:bd:45:51:02:
                    ae:40:98:45:af:3a:8a:a0:e5:e8:a9:24:f3:4e:17:
                    36:8a:df:5d:4b:e5:27:59:1e:d8:96:67:4c:80:80:
                    eb:a1:f4:5e:ef:66:80:78:24:38:28:1b:9a:ef:fc:
                    ec:ea:90:4a:f0:52:5b:e2:0c:36:e4:ae:5f:ed:eb:
                    53:1b:ba:d1:9e:0b:97:82:e5:b4:26:cb:f0:27:05:
                    1b:3e:33:bf:37:64:a8:33:c0:2c:9a:73:d1:a2:77:
                    86:b5:d1:7b:30:f8:8b:ff:c4:21:fe:63:8f:65:49:
                    f5:ad:e8:9c:87:f5:09:30:b0:41:c4:17:c0:27:5b:
                    12:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F8:FF:FB:6F:2D:C6:32:0F:05:E7:F3:23:44:68:0C:01:05:E6:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d6804369-8d44-350e-a63a-5bf72ae02aaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.79.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:3b:5e:09:cf:9f:50:c5:c3:47:5e:78:90:59:6a:77:77:01:
         b5:15:c5:a9:01:ef:c9:e4:fe:a3:a7:df:af:8f:dd:03:f6:cf:
         03:76:c0:f9:21:a7:3d:a5:f9:66:5c:3c:32:9f:ea:a1:f1:95:
         e6:35:e5:9c:09:ce:5f:ed:1e:bd:4a:87:83:05:51:ed:0b:b8:
         21:51:c9:93:71:da:78:14:fc:37:f0:6e:7f:21:b5:c1:18:0d:
         3e:3a:16:94:ee:1b:97:37:0b:d0:c9:43:36:77:eb:94:24:1f:
         03:75:f8:2a:04:c0:00:c2:37:16:a9:c6:4f:ed:01:6c:62:e0:
         bb:46:90:0a:dd:03:6f:ac:7c:33:ff:8a:e3:a2:c9:18:7f:28:
         72:0a:28:82:32:44:8c:fc:3f:3d:e3:d6:1d:17:50:70:4f:b9:
         b3:19:0d:c8:c9:b6:66:d1:2c:70:2a:a9:82:4c:47:99:21:20:
         df:69:5c:10:63:33:3f:b4:ff:75:8a:ff:5c:cf:b3:69:5f:ef:
         13:30:18:ae:8b:f0:23:77:6a:70:9c:30:fb:30:2f:67:d2:44:
         dd:08:88:ab:51:4b:28:cc:9d:05:78:85:a8:86:b7:cf:ad:77:
         16:c7:4a:26:98:7e:d8:87:27:f0:83:77:33:41:2f:10:63:4f:
         83:54:bc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:48:20 2025 by rpki-client