Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28d00035-1f30-3e70-a068-9bce7a2555ce.roa
File:                     28d00035-1f30-3e70-a068-9bce7a2555ce.roa (raw, json)
Hash identifier:          PV2KoychkNVAXt7ylsmDH937Jr8V0Q9nTDicp8r45ko=
Subject key identifier:   12:24:24:1A:13:0C:A4:29:2C:04:2F:63:BC:AC:AE:75:9D:10:EE:AB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B047C11E58C4A768466815300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28d00035-1f30-3e70-a068-9bce7a2555ce.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     33651
IP address blocks:        50.175.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:11:e5:8c:4a:76:84:66:81:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=935f9286-0c07-4cfa-a011-e9eef2fe19f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c3:27:be:ff:31:71:de:8d:f4:b9:0e:f2:dc:
                    39:6a:71:cb:2e:e2:c9:3e:8f:39:88:cf:a4:41:72:
                    b6:79:4f:b3:9b:e9:49:e5:3a:da:d9:cb:8a:f9:0c:
                    ce:70:41:17:db:3d:0e:ab:be:6e:96:c6:59:37:2f:
                    29:a9:51:d6:79:a4:d6:7d:da:30:57:a9:83:e0:ca:
                    9f:ff:3a:f2:ee:9b:0e:51:0e:0f:21:f2:02:65:c3:
                    b8:73:9b:c7:d7:0e:4e:19:23:eb:9f:ca:7c:74:6d:
                    5c:e7:9a:a6:9e:0b:9c:31:09:95:0d:a4:2b:f0:5a:
                    92:24:51:f0:14:ac:a8:e0:c0:80:2e:84:8a:a5:bd:
                    64:01:e1:e6:62:4a:bd:92:a3:bf:06:b1:2f:02:0f:
                    80:73:41:16:2a:2e:b4:97:1c:f6:95:91:dd:9e:7c:
                    97:ed:5d:0b:98:55:84:28:12:4d:e6:e2:51:01:92:
                    84:7c:79:60:5a:15:b6:62:3f:53:b5:7c:8c:ac:d0:
                    ee:6f:fb:ea:49:ca:c3:38:8f:3e:f1:94:d6:63:80:
                    47:5c:49:7f:5f:45:a0:88:af:20:85:e3:b6:17:c6:
                    a8:15:2c:07:73:79:d5:05:f0:bf:95:31:48:72:39:
                    f6:83:47:e4:50:c0:60:c7:3c:68:6f:37:f0:7d:ec:
                    5f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:24:24:1A:13:0C:A4:29:2C:04:2F:63:BC:AC:AE:75:9D:10:EE:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28d00035-1f30-3e70-a068-9bce7a2555ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.175.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:51:ae:74:0b:89:b0:a8:32:8f:45:0c:d2:0a:02:13:73:99:
         29:ff:fe:92:cc:2a:4a:8e:1c:f6:50:d0:08:bc:dd:12:80:51:
         36:2e:d3:c6:40:c0:54:60:fc:a4:4d:1a:c6:a0:41:6b:2d:2b:
         38:f2:1d:29:48:61:af:70:dd:b2:69:7d:e5:cc:33:db:0e:8f:
         9d:95:81:1e:5e:73:af:3c:68:d1:c6:d8:03:77:68:b0:a0:e5:
         8d:9b:4f:6d:3c:0f:93:22:f3:c1:66:db:73:fe:13:1d:27:a8:
         61:f0:c1:20:72:5e:5a:d4:99:f4:db:3b:f4:b0:8c:0b:c7:6a:
         e8:3d:42:4d:5b:f0:bd:82:c2:02:fe:5a:ce:77:da:7a:c5:71:
         c6:c8:7a:e4:d6:1e:3d:5c:24:e3:f0:90:fa:3d:e6:17:22:a1:
         86:3d:85:7c:b1:67:dd:aa:50:3a:37:ee:7a:42:57:04:88:29:
         10:7f:d0:4f:7d:2b:27:d2:79:8d:1e:b6:51:17:6d:3c:2d:df:
         18:38:2a:1f:e2:74:79:c3:33:d0:75:d8:e4:f9:d1:cf:55:6c:
         91:a4:5e:a1:50:5b:41:6b:72:d8:e0:82:84:38:3c:c4:9c:d7:
         9b:05:a7:6b:da:52:f3:b6:f3:6c:b5:18:a2:12:fe:38:f2:a8:
         78:6d:86:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 05:27:56 2025 by rpki-client