Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3251102a-ebe6-3e46-833e-afc31298715e.roa
File:                     3251102a-ebe6-3e46-833e-afc31298715e.roa (raw, json)
Hash identifier:          1Q6AKk7gCQ32T0aEfmSFPQ5YzROiB7PibgQ3ltM8M4E=
Subject key identifier:   83:1D:C0:A8:50:66:64:30:DD:45:B3:49:6D:C1:BD:03:06:1E:C6:B5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DBA1427F174E564FB91C000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3251102a-ebe6-3e46-833e-afc31298715e.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     14711
IP address blocks:        50.204.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:ba:14:27:f1:74:e5:64:fb:91:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=68a18df0-dc08-4280-baea-0ed31109371c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:43:8a:4b:52:22:cf:f4:26:03:25:9b:93:6a:
                    e5:c2:0c:61:66:a2:4d:6e:72:f1:5e:97:27:e9:44:
                    6c:75:60:f9:bc:2c:9f:e7:00:a5:40:c2:da:3a:bf:
                    ff:24:9a:8a:eb:bd:8b:b0:c8:83:a5:4f:88:a3:49:
                    ec:84:7c:64:06:33:41:57:a3:26:a9:b4:44:c7:5a:
                    60:01:2e:96:61:2a:3a:99:7c:a0:98:9c:1d:0e:d8:
                    be:36:2f:34:40:5e:78:bc:06:89:69:56:31:96:71:
                    0d:37:c4:c8:fe:47:31:61:2b:d0:30:56:69:5d:a9:
                    c2:46:05:7b:a1:71:4d:61:93:e6:46:af:cc:e1:59:
                    5e:8c:5d:58:e6:c3:e2:8f:0c:30:2c:d4:68:65:fd:
                    ff:4a:d0:66:c7:c5:0b:19:70:ba:25:c5:33:bd:f9:
                    0a:41:ff:a0:7c:04:22:75:88:7b:c5:5d:96:16:53:
                    d2:30:0f:11:fe:42:36:65:d7:fe:9e:52:11:c0:91:
                    3b:56:5d:36:43:41:72:0b:b9:f1:3e:50:9b:e2:d6:
                    7a:2c:42:3d:12:f2:67:7d:ae:cb:b1:7e:d4:fe:c2:
                    25:ab:a9:f3:9d:21:ba:e0:99:64:7b:b9:54:1d:9c:
                    2e:6e:33:b3:a0:8b:92:35:e5:d3:90:6f:30:62:38:
                    c1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:1D:C0:A8:50:66:64:30:DD:45:B3:49:6D:C1:BD:03:06:1E:C6:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3251102a-ebe6-3e46-833e-afc31298715e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.204.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:06:bc:13:e7:e9:88:a2:79:a3:1f:4a:b7:c0:c5:27:92:c2:
         9c:e1:b0:de:52:02:36:ca:4a:95:9d:c4:47:a5:c8:ed:ac:00:
         95:47:2e:1c:9c:9c:be:21:0f:6b:82:88:6d:bf:6a:53:2d:e6:
         8f:f4:77:d2:f9:96:f7:51:d6:cf:ff:4f:6c:7b:ab:41:79:37:
         36:bc:3a:20:c2:3a:20:2e:3f:c6:43:67:05:e6:a6:84:93:be:
         e4:67:a2:d5:06:db:e0:6f:a7:80:aa:7d:ee:e2:d5:f1:12:ee:
         28:f1:66:f0:c9:05:de:43:08:a2:f2:9c:3a:7e:67:d0:22:e5:
         b3:75:35:a5:83:fb:f3:29:14:aa:ca:93:ca:c1:11:e5:fb:19:
         be:40:ec:42:37:72:85:29:eb:db:e4:03:77:40:2e:b7:da:6e:
         4d:51:3d:74:ef:a8:c8:66:3c:ea:4a:ae:c9:ba:7e:d3:c2:7a:
         b2:32:ed:92:c4:44:0b:df:6e:f8:91:f0:eb:a1:c7:39:67:b0:
         1a:f9:37:05:2a:a1:63:14:17:c4:54:e9:87:dd:3a:dd:44:fc:
         49:1a:fe:19:99:9a:c1:dc:5d:1a:0d:e3:ed:f9:40:b6:6a:a0:
         ec:33:a7:5e:c1:5a:55:24:19:70:9c:17:76:34:6b:ff:eb:dc:
         3d:4f:85:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:54:10 2025 by rpki-client