Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03955551-fe36-3529-b698-433787da7892.roa
File:                     03955551-fe36-3529-b698-433787da7892.roa (raw, json)
Hash identifier:          A+sNDL0c7WJ4b6HnM2pvDP95tB0Lm9o/JXiAApbu9/A=
Subject key identifier:   1C:A8:D8:F8:F2:27:98:30:CB:1A:F5:4A:16:D6:74:3F:60:43:E2:9C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB91D856EE95215A6E2BB00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03955551-fe36-3529-b698-433787da7892.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33489
IP address blocks:        50.253.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b9:1d:85:6e:e9:52:15:a6:e2:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=8535cd7f-c9e7-46ad-ab5f-495055625959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e4:df:e6:7b:3f:ec:41:d6:68:83:43:b4:c8:
                    41:fb:94:1b:41:de:33:83:d1:79:5a:25:75:01:b8:
                    00:5b:c2:90:ef:b5:f7:77:6d:76:74:1c:0a:60:ec:
                    2b:09:c1:de:ad:39:31:48:07:73:c3:31:92:76:e7:
                    ae:fe:04:df:4f:16:33:ed:e6:28:e3:c9:52:3f:8e:
                    9b:ca:56:9f:25:d1:63:58:65:ab:b3:74:96:a1:ed:
                    f7:cf:1f:fa:60:85:ea:18:1a:b1:66:b0:c9:63:fe:
                    46:f9:cb:95:7a:77:3f:df:ce:a0:ea:08:9b:52:ef:
                    76:8f:48:59:4d:05:8c:37:e0:12:8b:9a:5e:c2:10:
                    0e:4c:e7:2d:45:6b:ba:00:0a:1e:59:56:47:f5:ee:
                    1c:da:11:2b:10:60:30:ce:bf:d0:c9:ec:53:91:5b:
                    31:09:66:d4:a4:7d:7c:7d:38:89:ed:d8:c7:4e:50:
                    97:e3:59:eb:fa:2f:65:3e:0c:51:2e:48:d2:ce:9f:
                    9f:6b:14:32:4c:1a:10:2b:1c:1b:9d:6e:e4:7e:62:
                    ea:8d:5c:69:6f:53:ab:38:92:cb:4a:87:58:d2:49:
                    66:f2:95:db:c6:99:b0:fd:79:31:bf:7d:18:92:fc:
                    59:d7:73:08:d2:3f:9b:30:ef:7e:42:b4:f7:d7:ee:
                    e3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A8:D8:F8:F2:27:98:30:CB:1A:F5:4A:16:D6:74:3F:60:43:E2:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03955551-fe36-3529-b698-433787da7892.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.253.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:9d:42:01:f7:98:de:fc:bf:5d:f4:dd:b1:ed:57:6d:51:bc:
         5d:01:fa:49:13:11:7c:67:ca:5c:99:c3:63:21:80:43:50:84:
         57:d0:a3:e6:d3:06:08:48:00:b8:d6:0e:bd:79:6f:de:2f:8f:
         0d:e2:fd:13:e9:90:c2:31:6d:3e:0d:6a:aa:51:5d:94:4d:f9:
         9b:24:c2:10:3e:21:25:c6:97:a5:d7:67:d9:70:bc:7b:3e:f5:
         68:22:55:50:1e:01:15:12:db:2f:7e:94:e5:91:86:e7:22:fd:
         7d:63:9d:06:0f:65:0e:53:f3:65:19:38:a9:c9:ee:49:d5:65:
         bd:92:2b:0a:4b:3a:6c:48:8a:16:0f:e6:8c:81:e3:08:ad:c7:
         0f:6e:80:67:a3:d6:ac:ff:32:ff:66:29:5c:d3:f7:e3:29:9f:
         bd:07:b1:c1:dd:28:b5:5a:83:b7:6f:23:34:a9:d4:6e:10:c3:
         cf:78:50:69:dc:38:97:d7:d7:d9:90:f5:7b:d2:3f:04:79:3b:
         41:4b:a8:f3:69:fb:20:c5:f6:30:54:ac:01:cf:22:e2:4f:5e:
         cb:e5:aa:5f:81:b1:4f:6f:fc:c9:9e:24:85:4d:69:bf:d0:db:
         e1:09:4a:6f:88:a4:c0:d2:ed:2d:e1:e1:ab:6d:42:7b:86:ea:
         da:95:ab:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:02:28 2025 by rpki-client