Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e25d94f-be0b-3a39-9e82-1cb97e841460.roa
File:                     4e25d94f-be0b-3a39-9e82-1cb97e841460.roa (raw, json)
Hash identifier:          4KDIbVRnC7xhunnh561IrpRMjxU5j6bKu5LcavX6bxE=
Subject key identifier:   A2:60:01:4E:50:BB:68:B9:89:D2:0E:60:50:CA:9D:0A:17:4B:02:49
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ADA9BD2F4FE86E3BBD34DD300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e25d94f-be0b-3a39-9e82-1cb97e841460.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     33287
IP address blocks:        50.148.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:d2:f4:fe:86:e3:bb:d3:4d:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=74725eeb-374a-4cd6-86d3-786f1f251c5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:34:20:bf:3e:7a:40:f5:17:7c:5a:21:40:2d:
                    3a:a1:ef:a3:2e:b4:4e:73:b8:0d:0c:25:c4:32:4d:
                    f6:22:e1:f8:1e:85:c0:1b:09:b6:35:15:94:6f:d5:
                    64:d1:c7:7a:aa:f1:ff:b8:da:12:2d:73:71:43:00:
                    54:ab:46:f5:98:34:01:1f:5e:4c:fd:0e:64:c2:70:
                    1f:de:cc:8b:2d:34:58:74:fc:96:7a:97:79:77:59:
                    7e:1d:d8:14:68:36:68:3c:8c:e9:68:dd:5e:fc:dd:
                    3b:88:e3:15:4d:c0:bd:02:41:df:a5:d7:82:0a:a1:
                    05:5c:7b:02:06:3a:f0:40:32:0a:ba:4f:8a:cb:a7:
                    fd:6d:1a:19:73:c5:70:4a:74:79:50:01:1f:3d:98:
                    9e:8f:0c:ba:5e:18:43:c8:8b:dc:10:8f:24:c1:ef:
                    bd:1b:0a:0e:0d:17:74:14:07:98:25:88:7c:81:b8:
                    01:60:4a:d5:e7:cd:dc:46:f8:1e:18:66:f2:d6:57:
                    7a:81:98:61:be:ad:7a:c7:4c:f9:85:bf:d6:17:e4:
                    ba:24:5c:1a:23:ba:52:41:ab:0c:b3:78:70:0a:b8:
                    e1:92:33:a2:c7:44:3a:e2:35:fe:6b:37:fd:f5:22:
                    66:b9:84:59:ff:59:1c:0f:a2:f7:2f:4c:b3:ed:c4:
                    5b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:60:01:4E:50:BB:68:B9:89:D2:0E:60:50:CA:9D:0A:17:4B:02:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e25d94f-be0b-3a39-9e82-1cb97e841460.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.148.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:49:ae:0d:78:03:51:08:d4:42:68:da:09:02:8e:cd:4e:38:
         07:8f:23:4e:3b:5b:bc:05:1b:b8:9c:f4:42:0f:8d:8d:e6:7b:
         3a:52:bf:87:3d:47:00:ec:1e:2f:00:4c:88:9a:f5:ec:23:9a:
         f5:ea:71:17:8d:7b:fb:7c:24:69:f7:42:7c:ad:73:ab:8d:ce:
         f7:ce:f8:f0:4b:7a:58:5f:c4:92:3f:56:a3:f2:5b:36:76:a4:
         22:07:d6:a3:bb:6a:c2:9d:55:b6:88:4c:fb:11:ea:99:bc:de:
         99:29:ef:a0:3d:1e:d7:cb:a2:b2:3b:8e:7a:35:43:13:3a:49:
         c4:a5:80:09:38:68:9c:c8:28:55:57:38:eb:ce:60:1f:02:0a:
         89:85:77:d6:8d:75:ce:74:56:08:65:5a:fe:88:4f:3a:89:a9:
         df:44:9b:8a:87:53:4b:25:de:9d:00:b5:92:67:d1:fd:09:2e:
         78:3c:0c:5a:62:a5:42:96:f4:d3:d0:4c:a5:18:65:49:86:ab:
         ef:93:30:99:fe:59:e0:ef:c7:5d:a7:5c:8a:fd:3e:7e:cf:9a:
         6d:b2:15:d6:c8:81:b7:29:01:7b:f1:5c:cd:2f:4c:8c:72:67:
         12:a4:16:71:19:70:bd:e2:d9:e3:e6:f4:a4:1b:53:a9:e1:aa:
         5a:24:96:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:07:15 2025 by rpki-client