Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8da146ec-6a01-33d5-9a68-f8c57f17c99f.roa
File:                     8da146ec-6a01-33d5-9a68-f8c57f17c99f.roa (raw, json)
Hash identifier:          vJQFRcPsTjHtl8jVxYzqOo2z7lYG811bgi6HYRFulNI=
Subject key identifier:   DC:55:AA:66:31:14:65:5D:F4:DE:D7:F7:B9:49:BB:E3:CE:51:41:AA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA78B18239C10513F28E20980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8da146ec-6a01-33d5-9a68-f8c57f17c99f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     33657
IP address blocks:        50.232.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8b:18:23:9c:10:51:3f:28:e2:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7887e5ad-ce82-4a42-bd95-c899436c8553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b1:ed:d3:25:ed:6c:e5:86:ac:a9:e8:3c:8d:
                    d9:bd:83:9f:e3:49:00:a0:54:79:08:5e:4c:3d:62:
                    dd:c1:5b:22:03:43:8d:3b:f9:2c:1c:ae:74:3a:92:
                    58:74:01:9a:80:56:f5:8c:81:b9:50:4f:bf:b7:c9:
                    59:23:62:42:db:b8:83:3b:c1:33:91:e6:f1:87:b2:
                    94:5f:5c:4f:9e:96:29:7b:88:fd:30:0c:4e:67:58:
                    7d:83:b0:19:fe:2e:13:78:d7:be:0f:ca:2a:96:5c:
                    85:9c:95:b7:63:d0:aa:e7:33:95:2b:b8:26:f4:89:
                    1e:e3:5b:2c:ce:45:2c:5b:17:44:29:08:bd:49:ec:
                    c8:35:a1:4b:b4:25:0c:db:4e:08:f0:b9:2a:20:68:
                    60:40:e5:cd:94:31:3a:d2:c9:d8:30:b9:6a:0c:8e:
                    17:32:8a:17:e5:6b:b6:43:1d:ff:36:11:20:ff:15:
                    87:72:11:64:71:f9:76:1a:40:04:81:30:c4:00:e2:
                    3b:02:65:33:61:49:14:dd:cc:86:68:67:15:5c:a8:
                    ad:85:87:45:d1:9c:49:cf:dc:97:26:48:a4:13:63:
                    9c:33:cc:56:7e:70:e1:be:8d:b4:25:a4:0e:bb:86:
                    24:60:39:15:0e:71:f6:49:38:f9:ff:63:ea:97:1d:
                    c8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:55:AA:66:31:14:65:5D:F4:DE:D7:F7:B9:49:BB:E3:CE:51:41:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8da146ec-6a01-33d5-9a68-f8c57f17c99f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.232.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:70:ec:49:ee:e0:6d:cf:51:04:d5:3e:f2:e5:d9:da:9e:49:
         22:9a:14:1f:27:c3:39:4c:e2:46:47:83:8f:f7:f7:33:38:c6:
         6f:4a:21:34:fa:3c:59:ee:90:a9:a7:64:4c:24:54:96:94:36:
         fa:77:2e:08:11:69:b6:55:7c:76:21:4c:5d:fe:87:05:bf:78:
         cd:44:05:f9:4e:bd:8b:4e:5a:a1:e0:8f:b9:25:2e:60:f2:dd:
         81:0f:c4:de:a5:d3:5a:94:cb:38:17:bc:fa:7a:8a:3c:76:2f:
         6c:15:a0:14:8c:66:66:ab:bb:72:ed:7e:44:d9:1e:79:a9:f6:
         16:67:21:1c:b4:54:38:27:8a:31:14:f4:4d:24:a9:9f:23:0f:
         76:95:5d:0c:72:bf:91:bc:9f:f8:ab:c1:0b:11:ce:ab:e6:cd:
         df:a5:e2:05:44:94:0c:2c:4b:a5:2f:25:1c:8c:07:de:15:da:
         ec:9b:e3:ed:77:f4:34:bb:ac:d0:40:1a:0f:f5:31:b8:86:ed:
         99:e7:f3:b0:c4:2f:48:ce:84:58:f0:df:47:7f:bf:4a:af:39:
         72:4c:2e:88:5d:65:56:9e:83:8c:d8:7f:61:88:a3:6f:69:a2:
         02:2b:1f:97:d8:6f:d5:82:3d:d9:e1:b5:d2:74:5f:19:00:27:
         64:f3:76:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:59:44 2026 by rpki-client