Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16bc2704-dc4c-3bd6-adbf-f9fe03c82b42.roa
File:                     16bc2704-dc4c-3bd6-adbf-f9fe03c82b42.roa (raw, json)
Hash identifier:          Cv48kGdOz8KDe54+GJhEKDxCJS7HfzvuyilEZkM5BIc=
Subject key identifier:   AD:F6:5B:E8:A0:E6:44:98:60:0A:35:AE:F4:19:7F:D6:9F:42:95:6D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFBB4FA6A5A341949224BC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16bc2704-dc4c-3bd6-adbf-f9fe03c82b42.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33651
IP address blocks:        50.235.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:b4:fa:6a:5a:34:19:49:22:4b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=79b88b82-7c31-4e22-af23-b59b69d0510c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ae:dd:12:b0:ef:b1:2f:62:96:6a:0e:d9:65:
                    3d:09:7d:d8:02:20:e1:99:de:d1:26:15:75:15:30:
                    b1:44:95:64:69:f9:28:59:19:d3:b7:ac:27:31:66:
                    d9:b1:e6:bf:fc:db:01:0f:e3:d2:10:ca:0a:a0:dc:
                    91:03:e6:ba:24:fb:d3:5f:e9:e7:00:ed:7a:f0:66:
                    ff:74:d9:25:96:20:a8:0a:34:ac:d1:82:85:3f:94:
                    39:b8:af:b5:3b:18:e1:8c:34:9b:65:e5:23:99:9b:
                    d3:e5:2f:f5:4b:de:d4:d1:a0:84:36:5a:1f:b5:76:
                    89:19:ad:e1:08:f9:84:22:6e:96:73:a3:a5:71:dc:
                    1f:be:55:13:2d:9d:02:99:36:52:06:61:3f:c2:ce:
                    75:c3:6a:b7:c3:57:59:7d:12:c8:17:de:32:3b:c3:
                    cc:68:e4:53:8b:7a:42:fc:2a:c2:71:85:6a:fc:27:
                    b9:9c:f8:de:03:c3:bf:0d:a1:67:3c:a8:a8:09:66:
                    45:34:de:1a:61:9c:5f:27:67:3a:b1:91:9c:2b:da:
                    d1:31:ce:bb:38:80:b5:71:68:32:18:ba:bf:c3:28:
                    e4:d1:a1:93:2a:22:6d:d8:12:c9:30:48:17:2a:ee:
                    19:66:28:41:7f:de:0a:bc:02:b7:99:6d:60:46:90:
                    00:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F6:5B:E8:A0:E6:44:98:60:0A:35:AE:F4:19:7F:D6:9F:42:95:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16bc2704-dc4c-3bd6-adbf-f9fe03c82b42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.235.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:76:c1:0f:7d:59:eb:00:fa:8f:33:f9:74:a7:9e:7c:3a:2e:
         76:d7:1a:fe:80:8a:54:c9:79:24:a7:58:b4:b9:52:3a:16:3d:
         51:4f:f3:01:f9:01:50:c2:54:bb:60:11:b4:48:5b:09:65:f9:
         27:c2:48:97:99:a0:ca:d3:20:55:50:33:8f:dd:43:e7:8e:a4:
         74:fa:84:7e:6a:76:37:da:1e:df:39:15:ec:d8:b4:c5:c9:88:
         e5:88:55:01:bf:cb:39:47:96:1d:8a:c8:06:23:e4:18:c9:2f:
         bd:04:82:27:06:fe:f7:8e:e3:b3:da:1d:29:e6:ab:ee:bd:87:
         73:7e:5e:9e:ee:d4:a2:3b:97:73:61:87:0d:7d:e2:78:df:71:
         c8:fc:c5:df:2c:09:ce:5f:a9:48:eb:5a:08:99:06:69:7c:2a:
         ef:9a:c4:eb:7c:05:d8:24:e1:a2:cd:e1:13:33:95:9a:24:fb:
         d0:44:5e:25:56:ee:73:34:5a:6e:ae:67:fb:33:3b:3f:c4:22:
         8e:a9:21:97:b5:c3:8c:64:bc:13:86:80:9d:66:d5:3f:f1:bf:
         0f:ce:6b:5f:ab:2f:32:5a:9d:62:89:54:b8:b8:c8:95:1a:6c:
         af:fd:bf:44:de:76:e2:38:56:c3:ab:a2:64:67:36:58:57:87:
         cb:2d:24:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:22:30 2025 by rpki-client