Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2419b8f2-6ea9-3baa-a179-da8abbc6ed25.roa
File:                     2419b8f2-6ea9-3baa-a179-da8abbc6ed25.roa (raw, json)
Hash identifier:          T5ObHU2CtA4FgZeF/g0QVKoENoDNalSAkb2UTnv1U1I=
Subject key identifier:   90:FE:A8:0D:BF:51:01:1D:2B:8A:2F:89:80:04:62:77:44:1E:09:FF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB7B247939ADD66C0AB8D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2419b8f2-6ea9-3baa-a179-da8abbc6ed25.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33662
IP address blocks:        50.232.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:b2:47:93:9a:dd:66:c0:ab:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=dee81506-e17c-44a3-a96d-63bb8592d48a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1d:5e:09:77:78:b6:56:b9:45:46:66:e7:9d:
                    5b:c9:29:7f:38:26:9f:5a:ad:a9:a3:8a:f8:86:a2:
                    74:be:7c:dc:77:21:de:8c:78:05:9b:88:2c:e0:d0:
                    69:23:c3:dc:3f:55:c4:b9:10:4c:78:68:b4:f9:a9:
                    b2:c2:55:ae:fd:64:8e:6a:b1:12:07:a2:36:ef:df:
                    f9:98:8f:77:dc:52:53:a2:6e:ee:42:e0:2a:0b:81:
                    12:83:2d:82:63:f1:24:d8:03:62:45:c8:e6:ee:46:
                    ab:7c:5a:07:ba:08:96:76:96:16:b8:17:ef:a8:81:
                    00:6f:2f:fe:0a:da:fe:d8:54:83:29:74:be:25:2a:
                    fe:4d:90:47:e4:fd:ad:15:ca:de:da:2f:e1:34:5d:
                    b3:df:f8:eb:35:e3:12:9e:80:47:cd:40:7c:ae:21:
                    d4:17:a7:21:45:13:e6:e5:85:a4:fd:5d:b7:81:08:
                    ac:bf:88:ce:87:dc:c7:e1:5c:31:f5:4d:32:22:ce:
                    24:25:9c:49:56:e7:99:df:00:3e:d5:78:81:0f:ee:
                    10:5d:2b:31:9a:0a:f2:86:8c:f7:9a:ed:29:09:09:
                    df:a5:56:14:7f:ca:cf:0b:8e:a7:3f:f8:a9:f5:af:
                    b6:fe:22:33:dd:e8:09:01:76:c0:f6:c6:d5:5c:62:
                    31:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:FE:A8:0D:BF:51:01:1D:2B:8A:2F:89:80:04:62:77:44:1E:09:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2419b8f2-6ea9-3baa-a179-da8abbc6ed25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.232.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:a5:37:10:1b:66:53:7c:c5:7e:6d:a7:98:d3:c5:d2:e1:94:
         f4:db:7a:fc:03:23:9e:b5:e2:71:4d:d9:50:b2:a9:40:dc:7d:
         0d:f9:ec:f5:89:85:3f:fd:dd:68:d7:34:ca:ac:ef:a5:e3:99:
         c3:ad:ff:19:b4:6a:f5:69:de:22:b8:9a:a7:ad:ff:91:a5:d0:
         0c:09:40:94:03:f4:6f:48:93:f7:dd:e6:1e:9c:fa:77:a4:01:
         01:db:41:b6:3c:ad:ca:fe:b6:e4:3f:cc:74:b7:49:0c:8e:2a:
         e4:3a:aa:77:6b:c0:f2:c8:d6:5c:01:eb:cd:79:97:63:72:a0:
         c0:6c:bd:05:2d:9f:5a:5b:62:80:bb:4a:9d:99:ea:30:da:2b:
         99:12:1c:e9:1c:db:42:48:72:32:0e:62:50:76:11:a5:7f:3d:
         3b:ed:73:a2:2b:be:e8:d5:c2:9e:b7:76:c3:18:82:e5:ed:26:
         a0:d1:f5:73:55:a7:2a:e1:f4:b3:61:ca:ed:bd:37:2f:d9:4c:
         07:d3:6a:74:4e:f5:94:a3:c8:7b:f6:08:2e:0e:36:b9:21:98:
         fa:1e:79:1c:a4:3c:67:e2:3e:d9:c4:e5:36:36:77:47:ee:b7:
         36:3f:a8:b1:b0:9f:4f:15:0d:24:59:b6:82:68:d2:64:7c:08:
         21:25:a7:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9t7JHk5rdZsCrjYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk
ZGVlODE1MDYtZTE3Yy00NGEzLWE5NmQtNjNiYjg1OTJkNDhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhR1eCXd4tla5RUZm551bySl/OCafWq2po4r4
hqJ0vnzcdyHejHgFm4gs4NBpI8PcP1XEuRBMeGi0+amywlWu/WSOarESB6I279/5
mI933FJTom7uQuAqC4ESgy2CY/Ek2ANiRcjm7karfFoHugiWdpYWuBfvqIEAby/+
Ctr+2FSDKXS+JSr+TZBH5P2tFcre2i/hNF2z3/jrNeMSnoBHzUB8riHUF6chRRPm
5YWk/V23gQisv4jOh9zH4Vwx9U0yIs4kJZxJVueZ3wA+1XiBD+4QXSsxmgryhoz3
mu0pCQnfpVYUf8rPC46nP/ip9a+2/iIz3egJAXbA9sbVXGIxLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJD+qA2/UQEdK4oviYAEYndEHgn/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjQxOWI4ZjItNmVhOS0z
YmFhLWExNzktZGE4YWJiYzZlZDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMugSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI2lNxAbZlN8xX5tp5jTxdLhlPTbevwDI5614nFN2VCyqUDcfQ357PWJ
hT/93WjXNMqs76XjmcOt/xm0avVp3iK4mqet/5Gl0AwJQJQD9G9Ik/fd5h6c+nek
AQHbQbY8rcr+tuQ/zHS3SQyOKuQ6qndrwPLI1lwB6815l2NyoMBsvQUtn1pbYoC7
Sp2Z6jDaK5kSHOkc20JIcjIOYlB2EaV/PTvtc6IrvujVwp63dsMYguXtJqDR9XNV
pyrh9LNhyu29Ny/ZTAfTanRO9ZSjyHv2CC4ONrkhmPoeeRykPGfiPtnE5TY2d0fu
tzY/qLGwn08VDSRZtoJo0mR8CCElp38=
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:37:55 2025 by rpki-client