Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff5b1b99-d892-3de3-83b1-0cd879096323.roa
File:                     ff5b1b99-d892-3de3-83b1-0cd879096323.roa (raw, json)
Hash identifier:          Dgb/7TiWNztM8gLT2yiQ/CVPQJQSuI/gMqrAD7q5Jss=
Subject key identifier:   D9:00:D7:18:FE:58:C5:CC:BA:99:66:91:B1:34:D6:B8:A6:E4:9E:38
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A814659DB3E68888D1DA816C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff5b1b99-d892-3de3-83b1-0cd879096323.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     22909
IP address blocks:        50.144.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:59:db:3e:68:88:8d:1d:a8:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=c028655a-0c51-4975-aef0-cc496032d4f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f9:62:b6:a7:49:44:99:fa:80:e9:51:ef:e1:
                    ec:0f:b0:32:41:d4:57:ba:83:cd:77:e6:11:c8:b0:
                    5a:0a:3f:94:af:27:c2:b0:51:9e:72:46:c1:a5:6b:
                    06:3f:86:a8:24:ff:33:80:24:5c:45:30:c8:02:e2:
                    1f:80:31:c6:de:dd:33:38:8d:09:47:90:e9:af:23:
                    ee:d7:78:42:6d:66:80:e1:ff:2d:85:8f:d6:59:45:
                    54:f0:9b:4c:33:65:7b:ff:df:ce:d8:d1:b0:73:6d:
                    4b:07:95:4e:9e:b2:0d:b2:52:c7:2e:4e:ac:44:2b:
                    b9:0b:24:b5:50:22:85:26:83:f9:2a:24:53:55:29:
                    84:41:65:2f:70:4b:f8:dc:92:6d:06:75:b4:69:e7:
                    5d:5d:ab:2b:c2:9d:df:56:2e:33:92:f3:d0:38:a4:
                    41:24:5a:8e:ea:2e:d6:31:10:96:c6:2b:f3:e7:77:
                    f7:56:26:52:07:55:d2:69:85:2c:49:a6:34:8f:33:
                    10:4d:62:7e:de:07:c5:31:49:b7:ac:95:ad:ed:ac:
                    a3:0b:23:e1:10:98:cb:e1:61:56:35:72:9c:6c:a3:
                    90:35:7b:a6:e9:39:71:77:57:33:7d:40:68:56:6e:
                    3d:6f:16:a0:2a:92:76:0b:68:7f:e7:71:27:51:ab:
                    c8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:00:D7:18:FE:58:C5:CC:BA:99:66:91:B1:34:D6:B8:A6:E4:9E:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff5b1b99-d892-3de3-83b1-0cd879096323.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.144.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:b4:eb:ef:6c:d5:c1:7d:be:8c:4a:29:93:5c:9e:3f:18:f9:
         0e:62:19:23:6a:71:0a:85:e9:09:cf:4d:77:56:45:82:67:35:
         46:34:33:4b:76:1e:cc:74:71:4d:19:66:c1:ea:bd:22:a5:d4:
         95:97:23:64:55:a1:9a:8d:7b:8d:db:60:f0:34:a2:24:bb:56:
         ca:e1:c3:cc:35:28:98:56:bb:8b:20:8c:f7:4f:1a:4c:e3:b3:
         51:3e:97:b7:b9:51:80:5c:d4:c7:a0:34:1d:74:a5:15:06:f1:
         34:f7:5e:8d:02:9e:19:f7:ff:fb:88:68:83:99:81:a2:12:76:
         c2:e7:90:f5:28:13:ac:16:33:ec:6e:74:69:b4:94:4d:24:e9:
         c1:cf:a4:98:5c:38:3a:16:55:f8:d7:23:22:ad:01:0f:35:28:
         0d:e1:21:41:a6:18:35:38:7f:d7:d5:e7:6a:c9:32:e6:37:91:
         61:94:dc:60:f1:79:4b:e5:15:d4:d2:13:6e:9c:45:9c:64:b5:
         c1:75:5a:b8:b0:8e:82:18:5f:30:d4:a7:25:2e:8b:c2:10:3c:
         28:c5:ad:b6:19:7a:f1:e7:02:99:00:e8:44:ea:3a:aa:93:53:
         5d:34:d1:a7:c5:7c:78:95:00:96:4f:ce:cc:0b:d9:8a:3e:8d:
         3a:50:2d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:09:19 2025 by rpki-client