Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4372951c-fff4-3427-9024-4c33d1f4b339.roa
File:                     4372951c-fff4-3427-9024-4c33d1f4b339.roa (raw, json)
Hash identifier:          22zFF6XUffMPiZXjczvvx4eQTbNSqErs5gNkQ2iLZUM=
Subject key identifier:   90:36:A8:D0:8E:9E:8C:37:57:8E:C1:F2:A3:A9:DD:C7:8D:29:F9:96
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F497AA85DFA449260F8612500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4372951c-fff4-3427-9024-4c33d1f4b339.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     33661
IP address blocks:        50.197.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7a:a8:5d:fa:44:92:60:f8:61:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=809eee20-dd58-4034-8d49-24c6c96ef1be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:54:b1:fb:93:4d:85:a9:ba:a2:9f:4c:1e:1a:
                    0b:2e:44:17:85:74:7b:4f:ab:a7:0a:5f:f3:57:7f:
                    49:e4:c2:29:ca:43:32:67:f6:98:b9:d9:4a:04:3c:
                    67:5d:c7:3e:09:17:67:a0:d9:19:bd:7d:98:8c:01:
                    2e:4a:ce:42:9d:66:3a:c5:7f:bf:22:66:e9:69:2f:
                    cb:dd:47:1a:0b:72:f8:8e:b4:b4:67:70:42:1a:ab:
                    3f:97:86:7e:9d:94:b3:43:fc:41:9e:6a:f8:a3:09:
                    c6:db:f0:7e:e4:d9:28:c0:ef:b9:89:57:b6:93:50:
                    71:4e:92:0a:e9:1d:a2:b0:20:92:76:93:2e:3e:85:
                    70:53:51:ef:57:49:aa:74:cb:0b:23:73:8a:61:34:
                    2d:fd:65:36:4b:4a:75:e2:ea:db:c1:12:06:59:4e:
                    15:e6:d6:6c:21:ce:4f:27:42:9e:06:a8:99:55:ec:
                    35:d7:45:85:4f:23:35:92:30:80:83:7b:ac:02:51:
                    90:fb:1c:f5:c1:f4:a6:76:1b:97:e4:06:bd:6b:20:
                    f8:21:45:de:d2:bc:db:3a:46:4e:51:a7:d0:ca:1b:
                    ce:ee:97:02:d0:cb:63:ad:3e:0e:90:ac:a2:dc:58:
                    2b:3a:b4:e6:a5:6f:1c:b9:19:a4:a9:29:c9:c9:1a:
                    c8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:36:A8:D0:8E:9E:8C:37:57:8E:C1:F2:A3:A9:DD:C7:8D:29:F9:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4372951c-fff4-3427-9024-4c33d1f4b339.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.197.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:49:03:9e:5d:74:4d:d1:07:1d:58:c9:2d:20:d6:25:81:5d:
         51:4e:07:b6:06:5d:d4:21:be:50:eb:74:f7:c6:5b:a5:b2:7a:
         96:83:cc:35:74:6d:e5:21:6c:ac:54:48:38:c2:6a:e0:71:2f:
         cb:8b:ba:77:68:52:c1:0b:0c:03:62:4b:93:88:3d:c0:66:c2:
         bc:7e:d3:3b:fc:88:be:5b:1a:2b:a3:c7:77:65:75:36:bc:d9:
         36:28:86:8d:90:25:f5:e2:2f:7e:73:f5:d0:ae:c1:84:fc:74:
         b2:22:cf:0f:37:82:52:ed:28:79:db:22:3b:24:2c:4b:15:85:
         b0:41:9f:e9:2f:0d:85:a3:57:a4:e1:44:3f:66:cc:4a:bf:5f:
         1d:ba:ff:6a:dd:19:64:94:26:99:af:c0:54:98:2b:b9:2c:fd:
         b8:c3:d2:82:78:e9:06:4a:93:d5:52:35:a6:9c:67:c8:8e:9b:
         2b:73:70:fe:40:b4:11:b8:09:8a:4b:2b:47:28:ab:13:74:2f:
         fb:84:bc:40:b3:0e:7d:d2:70:53:2d:53:e5:1b:84:a9:c1:64:
         81:2c:52:8f:5c:aa:52:81:7b:28:69:f1:bd:c8:01:5b:51:19:
         06:14:a7:3a:b4:68:80:b0:52:15:99:59:88:78:35:f4:c4:d1:
         8b:e8:c5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:33:28 2026 by rpki-client