Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f410c9a7-bec0-3dfd-9568-a5ce93cc94d2.roa
File:                     f410c9a7-bec0-3dfd-9568-a5ce93cc94d2.roa (raw, json)
Hash identifier:          Nw9FJwZPXn84wUspMnKdvYj+zpq7IPCDqMuk8oRnSwg=
Subject key identifier:   AA:3B:80:EC:88:33:68:12:ED:7A:D1:14:D0:0B:56:A7:6B:F0:70:B3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFD1EDBB5D7463AA3CD6200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f410c9a7-bec0-3dfd-9568-a5ce93cc94d2.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33652
IP address blocks:        50.204.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:1e:db:b5:d7:46:3a:a3:cd:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=f4df77a7-dc34-49a6-87e7-1f30048e308f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3c:7c:41:d7:6b:07:b9:c3:6f:cb:00:83:e6:
                    b5:0e:e7:9d:f7:66:7d:e6:8c:e9:09:f3:46:e6:97:
                    e4:af:f2:74:e7:b3:5d:23:a2:97:ac:de:12:cf:41:
                    79:d5:64:b1:9b:c7:e3:b4:2a:0f:c1:69:24:ae:a6:
                    53:a0:7a:c0:b3:a8:33:3b:e0:eb:18:97:3c:f5:0a:
                    1f:26:6b:7e:21:80:d0:38:33:9c:eb:ae:62:f1:17:
                    bf:bc:75:84:85:13:f4:c9:1d:96:8f:29:df:96:9a:
                    3e:0f:68:1a:0b:e8:fb:4c:e9:d3:fe:1a:e5:1b:dd:
                    8e:36:d4:c7:18:08:17:56:ef:81:b9:1c:40:2b:1b:
                    b8:af:57:80:80:06:02:24:d0:3f:c8:62:5e:37:a7:
                    a5:fb:be:5f:ae:7b:a8:f8:60:07:c9:71:09:50:ad:
                    77:72:50:33:44:37:12:95:58:2e:a1:31:50:55:cd:
                    d5:ec:8e:b3:a2:39:82:1c:66:6f:9f:1a:5a:39:b1:
                    6a:4e:04:cf:a9:02:79:26:b5:34:75:7a:5b:a9:fd:
                    fd:55:16:00:3d:4d:8e:fb:15:aa:25:e1:49:81:21:
                    5e:a7:bf:32:de:3a:08:af:92:60:54:1c:50:80:74:
                    19:11:94:cf:f5:55:6b:29:c3:98:c0:8e:4e:01:47:
                    88:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:3B:80:EC:88:33:68:12:ED:7A:D1:14:D0:0B:56:A7:6B:F0:70:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f410c9a7-bec0-3dfd-9568-a5ce93cc94d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.204.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:33:f6:53:d9:f0:af:fc:26:1e:0a:3b:0b:64:d4:af:14:4c:
         dd:43:1d:62:2c:1d:76:e0:c7:a0:4b:4a:16:3b:1c:c7:e7:cd:
         93:3e:50:63:22:a8:7b:79:3a:9e:a8:75:6d:6a:d2:42:61:23:
         7c:17:77:9c:02:aa:4d:23:0a:d2:d1:31:a3:be:3f:13:04:06:
         3e:52:eb:13:c4:28:fa:5d:37:2e:74:5f:64:2d:db:4e:aa:51:
         4f:26:ac:cd:8b:c4:8f:e4:59:b2:1a:90:3d:75:d3:d0:d5:43:
         6b:93:af:ec:19:af:b8:eb:9f:3b:3d:7e:19:d8:8e:8f:64:26:
         c6:31:ca:43:d9:e4:af:33:72:39:13:f5:de:0e:d7:19:49:bb:
         df:61:a1:46:ca:8a:eb:95:ac:fb:32:68:0b:46:d2:27:8d:0d:
         a8:a7:2f:0d:d2:4b:88:4e:34:9f:ce:dd:1d:4a:0e:94:eb:d2:
         32:b8:2c:47:58:7f:61:4b:19:54:a4:ab:3c:e9:b6:54:eb:67:
         6b:13:68:b5:59:04:91:e6:9e:5d:94:2b:84:23:76:11:16:02:
         cb:57:32:6e:4d:be:41:a6:15:c7:74:15:11:fd:4d:4f:e5:f8:
         6d:73:d6:e2:a2:8e:a9:4d:75:3b:fb:64:c6:26:65:1b:7e:6a:
         28:5c:6b:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/R7btddGOqPNYgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk
ZjRkZjc3YTctZGMzNC00OWE2LTg3ZTctMWYzMDA0OGUzMDhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzx8QddrB7nDb8sAg+a1Dued92Z95ozpCfNG
5pfkr/J057NdI6KXrN4Sz0F51WSxm8fjtCoPwWkkrqZToHrAs6gzO+DrGJc89Qof
Jmt+IYDQODOc665i8Re/vHWEhRP0yR2Wjynflpo+D2gaC+j7TOnT/hrlG92ONtTH
GAgXVu+BuRxAKxu4r1eAgAYCJNA/yGJeN6el+75frnuo+GAHyXEJUK13clAzRDcS
lVguoTFQVc3V7I6zojmCHGZvnxpaObFqTgTPqQJ5JrU0dXpbqf39VRYAPU2O+xWq
JeFJgSFep78y3joIr5JgVBxQgHQZEZTP9VVrKcOYwI5OAUeI0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKo7gOyIM2gS7XrRFNALVqdr8HCzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjQxMGM5YTctYmVjMC0z
ZGZkLTk1NjgtYTVjZTkzY2M5NGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMsw3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFIz9lPZ8K/8Jh4KOwtk1K8UTN1DHWIsHXbgx6BLShY7HMfnzZM+UGMi
qHt5Op6odW1q0kJhI3wXd5wCqk0jCtLRMaO+PxMEBj5S6xPEKPpdNy50X2Qt206q
UU8mrM2LxI/kWbIakD1109DVQ2uTr+wZr7jrnzs9fhnYjo9kJsYxykPZ5K8zcjkT
9d4O1xlJu99hoUbKiuuVrPsyaAtG0ieNDainLw3SS4hONJ/O3R1KDpTr0jK4LEdY
f2FLGVSkqzzptlTrZ2sTaLVZBJHmnl2UK4QjdhEWAstXMm5NvkGmFcd0FRH9TU/l
+G1z1uKijqlNdTv7ZMYmZRt+aihca9s=
-----END CERTIFICATE-----
Generated at Mon Jun 30 18:16:26 2025 by rpki-client