Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2c4b418-cefa-3eec-90a1-ba665b303944.roa
File:                     d2c4b418-cefa-3eec-90a1-ba665b303944.roa (raw, json)
Hash identifier:          HcfFFc0v5yJ4Uqn7ZhkcA7Q5Zxu7JjTZImcuPJxBCbg=
Subject key identifier:   FF:03:EF:AE:40:DA:02:69:44:67:1D:6E:E9:7C:F8:03:72:E6:63:15
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA5520EC26D3A6A15910D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2c4b418-cefa-3eec-90a1-ba665b303944.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33287
IP address blocks:        50.207.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:52:0e:c2:6d:3a:6a:15:91:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=a5af2519-a828-41b6-a45c-2ef9504f05d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c1:ed:01:2e:7b:89:4e:94:0a:12:11:f5:79:
                    6c:f9:91:7a:21:53:e6:91:be:60:9b:25:16:b5:60:
                    ba:4f:23:b0:4f:eb:6c:05:39:8f:ec:b5:bd:af:b3:
                    20:f5:d9:a8:fd:b5:2a:e2:66:f2:4e:d0:18:1f:e4:
                    95:39:84:c4:b9:85:73:82:c5:8a:38:bd:84:57:ea:
                    28:8f:c3:96:7d:0e:5b:d6:48:90:68:12:e5:25:ea:
                    6b:01:0b:9a:0a:03:32:07:ef:3d:d6:82:7b:63:2f:
                    1b:a8:f7:43:f6:67:63:df:d1:3c:1e:94:59:24:79:
                    ba:0e:f2:94:60:ef:d5:fd:6e:23:09:6a:f5:4e:b9:
                    89:fe:32:b8:14:f6:30:ba:7a:a3:ec:e8:48:62:ca:
                    c5:cf:ac:8d:70:0e:53:06:c9:7a:9d:75:69:f8:b0:
                    c5:67:c9:dc:b2:a5:5c:4a:4e:99:cc:b3:3a:6d:fa:
                    ea:92:93:0e:09:36:2c:01:fe:4e:00:5f:db:f5:4e:
                    58:8c:01:f3:81:ac:9c:d4:be:79:2d:9c:1d:5a:4d:
                    23:4e:95:35:30:e4:39:12:ab:cf:23:dd:cf:14:a7:
                    8c:b1:a7:88:58:17:4f:53:ce:0f:b6:4c:08:73:dd:
                    c5:4f:ce:cf:ea:3f:2f:05:a0:35:c2:f5:c7:7d:da:
                    0c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:03:EF:AE:40:DA:02:69:44:67:1D:6E:E9:7C:F8:03:72:E6:63:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2c4b418-cefa-3eec-90a1-ba665b303944.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.207.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:46:8d:06:78:e1:c9:21:94:25:aa:3b:0e:83:2d:cc:5d:e5:
         88:be:7d:56:f6:a0:e7:9c:d7:74:69:48:c2:14:30:5a:62:e8:
         6c:b9:5b:34:37:0f:9c:a7:d9:4e:9c:f9:86:50:71:5c:1a:f1:
         75:b4:d8:cf:80:cd:19:2b:f2:c0:88:49:fa:8a:54:be:28:16:
         6c:b9:6b:97:bb:da:73:a9:c5:31:a4:9d:70:65:db:7a:dd:a3:
         7d:0e:70:17:e1:08:e1:31:ba:30:4a:92:6c:fd:de:9a:b3:19:
         4d:a0:05:2c:9b:4b:05:c3:16:5d:23:1d:f6:fe:f4:55:43:1b:
         e3:d9:df:b5:f3:86:78:b6:78:ba:67:c1:c7:fc:ea:77:c2:93:
         28:2f:9f:b6:33:33:c5:9e:31:aa:ee:7a:0c:2f:46:b8:e0:a0:
         47:f2:60:b6:09:de:f1:ef:98:b6:84:7d:06:ae:d8:6d:a0:bf:
         29:79:8f:13:d3:05:0b:8d:03:3f:70:07:93:0e:0b:0d:c5:ca:
         51:32:0f:dd:2d:f7:51:cd:15:46:ac:e8:2c:27:df:ed:a6:b8:
         cd:26:7b:ec:de:77:c3:81:a3:d1:3c:ee:19:e9:a6:d4:0d:ef:
         17:d3:b6:31:69:65:f6:0b:a8:d5:17:f8:85:99:52:45:80:49:
         32:1c:20:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pVIOwm06ahWRDYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
YTVhZjI1MTktYTgyOC00MWI2LWE0NWMtMmVmOTUwNGYwNWQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMHtAS57iU6UChIR9Xls+ZF6IVPmkb5gmyUW
tWC6TyOwT+tsBTmP7LW9r7Mg9dmo/bUq4mbyTtAYH+SVOYTEuYVzgsWKOL2EV+oo
j8OWfQ5b1kiQaBLlJeprAQuaCgMyB+891oJ7Yy8bqPdD9mdj39E8HpRZJHm6DvKU
YO/V/W4jCWr1TrmJ/jK4FPYwunqj7OhIYsrFz6yNcA5TBsl6nXVp+LDFZ8ncsqVc
Sk6ZzLM6bfrqkpMOCTYsAf5OAF/b9U5YjAHzgayc1L55LZwdWk0jTpU1MOQ5EqvP
I93PFKeMsaeIWBdPU84PtkwIc93FT87P6j8vBaA1wvXHfdoMTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP8D765A2gJpRGcdbul8+ANy5mMVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDJjNGI0MTgtY2VmYS0z
ZWVjLTkwYTEtYmE2NjViMzAzOTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMs9BMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHtGjQZ44ckhlCWqOw6DLcxd5Yi+fVb2oOec13RpSMIUMFpi6Gy5WzQ3
D5yn2U6c+YZQcVwa8XW02M+AzRkr8sCISfqKVL4oFmy5a5e72nOpxTGknXBl23rd
o30OcBfhCOExujBKkmz93pqzGU2gBSybSwXDFl0jHfb+9FVDG+PZ37Xzhni2eLpn
wcf86nfCkygvn7YzM8WeMaruegwvRrjgoEfyYLYJ3vHvmLaEfQau2G2gvyl5jxPT
BQuNAz9wB5MOCw3FylEyD90t91HNFUas6Cwn3+2muM0me+zed8OBo9E87hnpptQN
7xfTtjFpZfYLqNUX+IWZUkWASTIcIBI=
-----END CERTIFICATE-----
Generated at Tue Apr 29 00:25:11 2025 by rpki-client