Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47064754-435d-30f8-8c52-b702b3da48fc.roa
File:                     47064754-435d-30f8-8c52-b702b3da48fc.roa (raw, json)
Hash identifier:          OfkBsLfP6r4lVMPHyEzFADn0rVzNFDGni97A7RBrR38=
Subject key identifier:   BE:AB:0C:30:0B:18:DB:D8:AE:5C:39:8F:12:22:82:9E:65:F6:BB:24
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DC29AFBC3BEE732BCF79D3460
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47064754-435d-30f8-8c52-b702b3da48fc.roa
Signing time:             Fri 08 May 2026 01:00:24 +0000
ROA not before:           Fri 08 May 2026 01:00:24 +0000
ROA not after:            Thu 06 Aug 2026 01:00:24 +0000
asID:                     21508
IP address blocks:        50.219.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 17 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:9a:fb:c3:be:e7:32:bc:f7:9d:34:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May  8 01:00:24 2026 GMT
            Not After : Aug  6 01:00:24 2026 GMT
        Subject: CN=691b0570-efd7-4e21-ab30-24e753853ee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:15:8d:e3:eb:c9:d2:fc:c8:ce:61:5f:9b:e9:
                    e4:60:81:5e:dd:5d:2f:6a:9a:13:77:ea:ab:78:f7:
                    6c:90:f2:4a:36:7f:7d:cd:e0:97:10:43:3c:cb:07:
                    55:9f:3d:a6:dd:6c:18:45:69:75:a3:cc:82:7f:31:
                    a4:9e:dc:ef:5f:1d:2c:4c:f9:29:96:9a:f0:28:3e:
                    6e:e2:3c:42:1a:3e:d0:be:a1:07:b6:79:2b:d2:99:
                    11:4b:f2:e3:36:aa:e5:96:4e:3a:28:ea:d6:9b:9d:
                    9d:94:c2:c3:69:67:7f:00:4e:5d:02:01:79:2b:c6:
                    82:5d:13:db:f4:9c:6d:f7:4b:5d:ac:d2:81:0a:15:
                    ea:1b:60:8c:ad:21:28:f3:4b:e9:78:6d:a9:8e:0e:
                    a9:6b:90:71:ef:68:af:47:1a:2e:a8:79:f3:d8:d1:
                    fc:fb:ee:ea:c9:67:39:65:9a:71:42:5b:06:1b:ce:
                    c5:fe:0c:fa:f4:d9:69:ac:65:ba:44:c6:05:4c:4b:
                    ee:c2:d7:35:ab:36:1d:44:ef:6b:cf:19:b1:b0:cb:
                    04:e9:33:c8:ad:a2:06:65:e1:9a:56:15:6e:8d:c8:
                    16:02:86:00:1a:67:d6:bd:d6:e6:a7:f0:73:2a:57:
                    c0:26:35:7a:9f:8f:07:cc:68:70:da:2f:dd:95:cc:
                    b4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:AB:0C:30:0B:18:DB:D8:AE:5C:39:8F:12:22:82:9E:65:F6:BB:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47064754-435d-30f8-8c52-b702b3da48fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.219.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:41:0f:63:dd:84:43:39:ef:58:80:55:c6:6c:aa:04:d8:78:
         0a:15:91:4c:bd:dc:a3:67:d6:3d:d1:54:38:3b:9a:32:c8:64:
         19:8b:72:56:c3:b6:8e:2c:c5:42:e4:e5:66:c4:b0:33:d5:2d:
         d9:03:bb:81:05:88:1f:22:0a:01:26:c9:3e:64:19:f4:bc:0d:
         a9:ba:41:11:ef:90:f1:0f:af:51:d7:dd:d2:7f:97:c6:11:8a:
         09:69:2b:1b:92:46:42:67:b8:6f:48:d0:b4:f1:6f:25:ca:e2:
         b7:4e:6b:a6:90:c4:73:bf:28:4b:d6:60:c9:c0:7a:bb:bd:e5:
         05:e2:d0:8c:e7:42:f8:1a:35:bc:33:3d:9b:86:13:97:c9:34:
         6a:5a:d4:94:0c:d7:25:6b:d4:55:6b:b4:db:60:54:eb:30:69:
         69:80:b0:3e:6c:75:b2:e1:2d:87:ff:6f:00:41:93:b2:10:a6:
         dd:68:53:35:27:9c:0d:d0:0c:58:6c:5e:89:35:31:4c:f1:8c:
         48:e8:ed:b3:23:ff:ac:e5:15:66:73:78:b4:8d:55:f8:a9:4f:
         34:83:2c:a8:c9:73:ad:c5:22:ea:64:e3:77:eb:e6:ce:76:5c:
         65:4f:f0:b5:bc:a1:4e:2f:a6:47:42:22:ca:11:85:e0:e0:7e:
         02:55:f6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 11:28:33 2026 by rpki-client