Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1342d337-22ec-36a4-b82a-7c0acbcf85cb.roa
File:                     1342d337-22ec-36a4-b82a-7c0acbcf85cb.roa (raw, json)
Hash identifier:          bcMarZKZ7zKFxg6LddxnQSNrpaU2J3bvISDxtPetqMk=
Subject key identifier:   91:80:90:CA:C8:5B:77:74:4F:80:04:DC:87:51:C6:5F:44:C7:F1:0D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB890F65AF37D29EC9B8800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1342d337-22ec-36a4-b82a-7c0acbcf85cb.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     62658
IP address blocks:        50.225.106.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b8:90:f6:5a:f3:7d:29:ec:9b:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=1942f1f1-2c61-4eaa-a5a1-6e200068e275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:55:38:78:bb:f7:86:94:6b:87:56:2a:65:ff:
                    fb:95:f0:ea:dc:0c:91:39:da:41:34:c8:c5:53:c8:
                    c1:a9:bf:9b:44:20:5d:5a:41:54:57:e0:38:29:c8:
                    eb:a8:68:47:27:ff:cf:cb:3b:c0:16:d9:49:cd:dc:
                    0d:e7:a2:aa:42:f6:2b:8e:ea:44:d4:ab:25:21:99:
                    a6:37:31:d1:20:a4:a2:fe:c8:59:6d:fd:c8:f6:c6:
                    e1:3d:a9:3b:8e:7b:6a:9c:f6:9f:1b:6f:87:9a:a8:
                    3e:b0:21:5e:a0:f8:a8:6b:bb:7a:e9:c4:05:b4:92:
                    9e:fe:80:07:7c:dc:78:97:46:eb:1e:77:0f:e6:9c:
                    f2:84:5c:f4:7b:d9:e1:89:68:39:a0:88:2e:6a:a2:
                    2e:93:97:e1:be:e4:33:76:40:5d:9c:a6:91:c4:fd:
                    3d:e0:6d:3b:0c:e4:75:1d:59:3c:13:61:94:38:e2:
                    c6:f5:e8:b7:7a:a2:33:ca:5a:24:e2:26:d1:a3:70:
                    f3:d1:20:6d:94:19:15:84:87:54:76:8e:fe:41:9e:
                    6b:51:2f:1e:a5:eb:86:f3:c3:96:6f:74:93:b5:20:
                    ee:66:e5:9c:4a:bb:f0:d4:2d:b4:af:2f:ec:47:95:
                    63:4b:0f:56:77:a9:ec:21:ff:3a:58:7a:bf:eb:a5:
                    2f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:80:90:CA:C8:5B:77:74:4F:80:04:DC:87:51:C6:5F:44:C7:F1:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1342d337-22ec-36a4-b82a-7c0acbcf85cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.225.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:db:8b:24:91:26:4a:37:ab:e8:64:58:3c:72:b4:46:02:d2:
         86:57:54:45:6f:85:f4:ed:46:d6:41:46:3b:19:69:b5:d0:11:
         fe:b9:db:ad:96:99:a7:2c:3d:db:e2:3b:d0:71:05:90:b5:b4:
         d4:72:64:70:71:59:32:fd:94:00:12:ba:0a:b3:c1:e6:7d:76:
         a5:02:f6:20:3d:75:3c:a2:bc:b7:ba:dd:2c:ca:2e:ce:cb:d0:
         64:73:27:05:85:dd:bd:e0:84:83:62:f6:09:a7:d2:88:9e:da:
         ec:1e:5b:ac:29:b1:0b:28:4a:ed:76:10:7e:be:66:29:3f:5c:
         99:04:66:f9:9e:59:92:e2:7b:48:d7:f9:de:c7:38:2d:65:13:
         44:89:85:3c:3c:78:cb:f2:83:b9:a5:75:35:cf:89:77:50:88:
         ca:df:f1:50:30:2c:3e:12:84:3e:d2:4f:67:f6:5c:a9:46:e5:
         6d:f5:75:4a:de:9f:b3:ae:16:a9:a1:1b:87:9e:ef:c3:02:9f:
         74:74:bf:d9:bc:c7:fd:59:f7:d3:f1:cb:9c:98:98:10:5e:73:
         72:aa:0d:24:e6:9c:e6:48:ac:e2:63:be:c3:9a:14:e3:f5:df:
         e0:12:fe:38:b2:e9:64:5b:5d:2a:46:8d:30:94:42:08:26:95:
         82:2c:72:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uJD2WvN9KeybiAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk
MTk0MmYxZjEtMmM2MS00ZWFhLWE1YTEtNmUyMDAwNjhlMjc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVU4eLv3hpRrh1YqZf/7lfDq3AyROdpBNMjF
U8jBqb+bRCBdWkFUV+A4KcjrqGhHJ//PyzvAFtlJzdwN56KqQvYrjupE1KslIZmm
NzHRIKSi/shZbf3I9sbhPak7jntqnPafG2+Hmqg+sCFeoPioa7t66cQFtJKe/oAH
fNx4l0brHncP5pzyhFz0e9nhiWg5oIguaqIuk5fhvuQzdkBdnKaRxP094G07DOR1
HVk8E2GUOOLG9ei3eqIzylok4ibRo3Dz0SBtlBkVhIdUdo7+QZ5rUS8epeuG88OW
b3STtSDuZuWcSrvw1C20ry/sR5VjSw9Wd6nsIf86WHq/66UvbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJGAkMrIW3d0T4AE3IdRxl9Ex/ENMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTM0MmQzMzctMjJlYy0z
NmE0LWI4MmEtN2MwYWNiY2Y4NWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMuFqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGXbiySRJko3q+hkWDxytEYC0oZXVEVvhfTtRtZBRjsZabXQEf65262W
macsPdviO9BxBZC1tNRyZHBxWTL9lAASugqzweZ9dqUC9iA9dTyivLe63SzKLs7L
0GRzJwWF3b3ghINi9gmn0oie2uweW6wpsQsoSu12EH6+Zik/XJkEZvmeWZLie0jX
+d7HOC1lE0SJhTw8eMvyg7mldTXPiXdQiMrf8VAwLD4ShD7ST2f2XKlG5W31dUre
n7OuFqmhG4ee78MCn3R0v9m8x/1Z99Pxy5yYmBBec3KqDSTmnOZIrOJjvsOaFOP1
3+AS/jiy6WRbXSpGjTCUQggmlYIsckk=
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:09:10 2025 by rpki-client