Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e0f0dce-50e2-3c6a-b3f1-8b056d1ebda9.roa
File:                     0e0f0dce-50e2-3c6a-b3f1-8b056d1ebda9.roa (raw, json)
Hash identifier:          B392FsFj9N3os3x6B2kNF0iXQosRV06PJsf5zXz8Hdk=
Subject key identifier:   66:9C:58:AB:D3:77:54:63:11:EA:31:17:13:E5:3D:F7:3A:B4:30:F8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B9E58DD6292FED3685D07B0C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e0f0dce-50e2-3c6a-b3f1-8b056d1ebda9.roa
Signing time:             Thu 23 Oct 2025 15:44:28 +0000
ROA not before:           Thu 23 Oct 2025 15:44:28 +0000
ROA not after:            Wed 21 Jan 2026 16:44:28 +0000
asID:                     33491
IP address blocks:        50.153.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:58:dd:62:92:fe:d3:68:5d:07:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 23 15:44:28 2025 GMT
            Not After : Jan 21 16:44:28 2026 GMT
        Subject: CN=417bc5b1-51f2-4435-b88e-9bd49d979f8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ea:84:e9:07:c2:b4:63:1f:86:af:62:64:b7:
                    03:da:b0:55:87:bf:ee:92:62:fc:a0:21:e6:3c:db:
                    1e:9f:b9:ea:70:cd:6e:97:35:44:78:4e:f2:42:6f:
                    71:b8:fc:0f:88:4f:42:6a:48:10:a6:b7:60:66:c0:
                    85:a4:f6:2f:82:24:de:e9:c3:94:1a:a6:38:b7:39:
                    51:46:37:b4:88:4b:ae:0b:50:dc:48:ab:26:40:20:
                    99:e6:81:ed:c2:02:55:e7:95:b4:8c:fe:38:b4:0d:
                    d5:4c:33:ca:98:fb:e5:9e:d2:0c:8e:d0:e2:fe:46:
                    b9:f9:94:1a:13:7d:d5:5f:ba:d5:46:25:9c:aa:37:
                    83:d5:b7:06:64:fa:7b:d8:3d:d9:f3:68:33:66:01:
                    13:5b:3c:0c:3e:27:21:f2:ff:4a:5b:61:f3:27:ee:
                    bb:1f:e7:c0:1d:52:81:09:54:03:8b:d7:41:58:d2:
                    39:ac:1c:61:9a:ab:0c:89:cb:e8:af:88:d8:01:62:
                    75:b0:d6:c8:b0:ac:c1:09:ca:27:d8:8e:23:00:da:
                    80:3d:76:93:6b:f5:82:4e:8b:16:e8:5f:0a:d2:52:
                    9a:fd:2d:54:cd:50:c6:e9:7a:64:01:b8:ba:9c:db:
                    ea:bb:8e:a1:55:3f:16:64:81:04:dc:2c:63:28:28:
                    c0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:9C:58:AB:D3:77:54:63:11:EA:31:17:13:E5:3D:F7:3A:B4:30:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e0f0dce-50e2-3c6a-b3f1-8b056d1ebda9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.153.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:52:83:77:22:2d:96:65:3d:85:93:ac:86:b8:21:b8:80:46:
         37:59:14:4e:75:36:f5:5e:73:75:6a:f6:10:27:66:37:15:a5:
         f5:8e:f1:45:57:7a:d3:5a:30:e9:2f:1b:25:88:44:29:ec:f2:
         5e:11:39:d7:5d:f0:2e:18:02:de:1f:bf:3f:85:cc:92:3b:7e:
         4a:48:85:03:67:4a:ee:87:63:2c:52:ac:da:eb:fe:a9:d7:5e:
         96:40:bd:05:cb:b2:f0:73:48:d0:32:5c:eb:b5:23:68:67:dd:
         60:71:22:11:44:e9:35:3a:9b:2d:27:b0:5e:49:76:7e:12:a7:
         f0:01:2c:8e:de:b2:00:a9:52:f8:2d:5e:b9:6b:1f:61:c4:2f:
         85:23:02:b7:9a:34:a2:27:02:bb:0a:a6:9d:4a:09:16:cd:52:
         45:84:02:f7:db:2c:77:6d:b3:5b:55:eb:61:83:1e:81:1b:26:
         30:dc:a5:df:20:f8:41:d5:b1:ce:92:f1:29:b1:b3:a0:22:75:
         57:7f:a8:30:44:f9:4f:fc:5a:7a:bd:67:59:07:f4:7a:d6:d6:
         55:75:af:0f:9b:c8:d5:be:ab:e7:a0:14:b9:64:a1:c3:63:08:
         29:1f:88:22:14:21:59:ef:47:ac:f0:6f:b3:77:77:60:6e:98:
         3b:e4:aa:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueWN1ikv7TaF0HsMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MTAyMzE1NDQyOFoXDTI2MDEyMTE2NDQyOFowLzEtMCsGA1UEAxMk
NDE3YmM1YjEtNTFmMi00NDM1LWI4OGUtOWJkNDlkOTc5ZjhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruqE6QfCtGMfhq9iZLcD2rBVh7/ukmL8oCHm
PNsen7nqcM1ulzVEeE7yQm9xuPwPiE9CakgQprdgZsCFpPYvgiTe6cOUGqY4tzlR
Rje0iEuuC1DcSKsmQCCZ5oHtwgJV55W0jP44tA3VTDPKmPvlntIMjtDi/ka5+ZQa
E33VX7rVRiWcqjeD1bcGZPp72D3Z82gzZgETWzwMPich8v9KW2HzJ+67H+fAHVKB
CVQDi9dBWNI5rBxhmqsMicvor4jYAWJ1sNbIsKzBCcon2I4jANqAPXaTa/WCTosW
6F8K0lKa/S1UzVDG6XpkAbi6nNvqu46hVT8WZIEE3CxjKCjADQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGacWKvTd1RjEeoxFxPlPfc6tDD4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGUwZjBkY2UtNTBlMi0z
YzZhLWIzZjEtOGIwNTZkMWViZGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMpmoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIxSg3ciLZZlPYWTrIa4IbiARjdZFE51NvVec3Vq9hAnZjcVpfWO8UVX
etNaMOkvGyWIRCns8l4ROddd8C4YAt4fvz+FzJI7fkpIhQNnSu6HYyxSrNrr/qnX
XpZAvQXLsvBzSNAyXOu1I2hn3WBxIhFE6TU6my0nsF5Jdn4Sp/ABLI7esgCpUvgt
XrlrH2HEL4UjAreaNKInArsKpp1KCRbNUkWEAvfbLHdts1tV62GDHoEbJjDcpd8g
+EHVsc6S8Smxs6AidVd/qDBE+U/8Wnq9Z1kH9HrW1lV1rw+byNW+q+egFLlkocNj
CCkfiCIUIVnvR6zwb7N3d2BumDvkqoE=
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:01:01 2025 by rpki-client