Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/82468965-ad4e-3306-a29c-d77cc920bb69.roa
File:                     82468965-ad4e-3306-a29c-d77cc920bb69.roa (raw, json)
Hash identifier:          asM8xKKsvY2s4i4B9uRpXgo44wbujV/rO54YHg6V3xY=
Subject key identifier:   1D:92:54:32:65:A0:BD:DA:64:62:E4:40:5B:F6:36:A1:D4:A0:19:01
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584B3821A996581459A308A24D80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/82468965-ad4e-3306-a29c-d77cc920bb69.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     7029
IP address blocks:        50.96.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:a9:96:58:14:59:a3:08:a2:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=b25d0230-6209-41ee-a6f3-0582ffa978d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4b:6a:84:4d:bb:5e:3b:cb:79:73:f7:8d:98:
                    6f:b3:bd:96:69:a8:ba:c4:56:c1:21:78:1a:08:e5:
                    2b:e3:23:64:c9:9c:e8:2a:54:83:1b:b5:18:94:4a:
                    4f:28:80:6e:05:01:67:93:27:9c:3e:ac:ba:0b:99:
                    e1:84:52:0d:6e:df:2c:f9:0d:20:af:bf:8c:62:b3:
                    fc:10:5a:8c:11:69:20:05:96:65:39:19:0b:96:90:
                    87:ac:ea:96:b1:98:47:8f:35:60:d8:fb:ea:d5:22:
                    04:6a:9b:a0:94:33:8e:56:1e:c7:aa:19:47:41:84:
                    15:36:81:17:8b:af:2d:52:6a:27:2c:68:8c:1d:42:
                    aa:26:7d:b7:c7:4a:86:7f:63:66:b9:db:1a:92:8a:
                    db:0f:51:01:b0:c4:e0:c1:80:d3:1f:73:75:10:c0:
                    99:c0:48:89:7d:23:1c:00:18:23:19:e2:76:cb:4d:
                    a4:90:f1:b9:a9:da:2f:3a:b2:86:d9:1f:c4:3a:bc:
                    37:74:db:6a:d1:21:9b:38:14:f9:e8:2c:f3:8c:b4:
                    cf:aa:7a:1d:a3:d3:7c:46:91:5b:54:07:eb:e1:7c:
                    f1:64:c7:58:b7:09:c2:1a:9d:2a:ad:e8:74:28:5b:
                    8d:fe:6f:34:cf:3c:d6:c1:f9:39:f2:08:84:e7:8d:
                    7f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:92:54:32:65:A0:BD:DA:64:62:E4:40:5B:F6:36:A1:D4:A0:19:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/82468965-ad4e-3306-a29c-d77cc920bb69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.96.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:4f:93:3e:a0:ff:d6:0a:a9:bb:fd:15:a4:61:88:9b:ea:f1:
         b5:34:fd:7d:a9:c2:73:a2:76:4f:78:76:42:8f:df:dd:e2:68:
         63:6d:d2:cb:fe:e5:75:9e:09:ce:89:bf:38:f4:c6:b0:3d:02:
         f3:7a:ae:2e:7e:b2:09:86:b7:7e:95:bf:6f:72:84:de:db:eb:
         05:d9:4b:18:18:88:10:e7:5b:3c:69:b0:24:16:7c:9b:30:1c:
         e7:3b:53:c9:0b:75:92:35:e6:65:08:47:fa:d1:29:df:e3:81:
         25:98:57:b4:42:f9:93:ba:82:d5:72:24:f5:b2:40:d7:ce:2f:
         4d:2d:15:e7:59:bf:9f:e8:98:99:6d:34:52:f4:47:b5:d5:22:
         e2:94:74:26:62:a3:45:76:a6:71:96:eb:60:9c:a2:ee:1f:e5:
         43:20:a9:b4:17:40:44:2c:48:74:a1:a3:b7:df:04:3a:a8:17:
         50:67:de:78:7a:67:26:3a:0c:dd:53:b9:4a:ab:79:bf:4d:19:
         89:d7:ed:7f:82:62:4b:84:e2:ba:51:49:e1:45:95:51:09:b5:
         eb:a2:db:a0:c5:a8:40:23:9a:f3:fa:c0:15:d3:c1:0f:8f:bc:
         d7:15:9b:23:cf:5a:f6:df:37:91:99:11:00:f8:40:66:74:cd:
         bd:26:6b:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IamWWBRZowiiTYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk
YjI1ZDAyMzAtNjIwOS00MWVlLWE2ZjMtMDU4MmZmYTk3OGQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0tqhE27XjvLeXP3jZhvs72Waai6xFbBIXga
COUr4yNkyZzoKlSDG7UYlEpPKIBuBQFnkyecPqy6C5nhhFINbt8s+Q0gr7+MYrP8
EFqMEWkgBZZlORkLlpCHrOqWsZhHjzVg2Pvq1SIEapuglDOOVh7HqhlHQYQVNoEX
i68tUmonLGiMHUKqJn23x0qGf2NmudsakorbD1EBsMTgwYDTH3N1EMCZwEiJfSMc
ABgjGeJ2y02kkPG5qdovOrKG2R/EOrw3dNtq0SGbOBT56CzzjLTPqnodo9N8RpFb
VAfr4XzxZMdYtwnCGp0qreh0KFuN/m80zzzWwfk58giE541/xQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB2SVDJloL3aZGLkQFv2NqHUoBkBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODI0Njg5NjUtYWQ0ZS0z
MzA2LWEyOWMtZDc3Y2M5MjBiYjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMmCuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAtPkz6g/9YKqbv9FaRhiJvq8bU0/X2pwnOidk94dkKP393iaGNt0sv+
5XWeCc6Jvzj0xrA9AvN6ri5+sgmGt36Vv29yhN7b6wXZSxgYiBDnWzxpsCQWfJsw
HOc7U8kLdZI15mUIR/rRKd/jgSWYV7RC+ZO6gtVyJPWyQNfOL00tFedZv5/omJlt
NFL0R7XVIuKUdCZio0V2pnGW62Ccou4f5UMgqbQXQEQsSHSho7ffBDqoF1Bn3nh6
ZyY6DN1TuUqreb9NGYnX7X+CYkuE4rpRSeFFlVEJteui26DFqEAjmvP6wBXTwQ+P
vNcVmyPPWvbfN5GZEQD4QGZ0zb0ma0o=
-----END CERTIFICATE-----
Generated at Sat Oct 11 00:00:28 2025 by rpki-client