Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/51820b24-c6bf-36dc-a516-9b74b77f327c.roa
File:                     51820b24-c6bf-36dc-a516-9b74b77f327c.roa (raw, json)
Hash identifier:          3ArI/YeYck7FYNX0fgIHS1wNwLvAcpJcpU7ImIG+Rm4=
Subject key identifier:   CD:E5:F5:C1:87:39:06:0B:59:9B:A6:4E:EF:23:DD:0E:FC:F5:BA:34
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB79A9A535B38B1A20EA7C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/51820b24-c6bf-36dc-a516-9b74b77f327c.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33651
IP address blocks:        50.235.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:9a:9a:53:5b:38:b1:a2:0e:a7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=a89a2bc2-27ff-442c-86a7-13542d6626fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a8:3d:59:46:2b:05:e8:d8:98:fe:1b:df:f6:
                    af:db:06:de:1a:74:96:ac:69:c1:2a:fc:75:d7:03:
                    52:aa:0a:78:8e:d5:a8:f0:80:2f:a6:c5:55:91:3d:
                    67:c2:15:62:15:09:7a:f8:49:4f:51:3d:74:16:6a:
                    e4:3d:72:d7:22:09:8f:27:6d:3c:fa:6f:71:a9:d2:
                    20:4d:3f:48:74:e2:91:01:69:5e:db:b2:8b:04:0c:
                    4f:99:ce:73:7f:9d:40:8c:e8:12:8c:17:d7:54:0b:
                    de:b0:aa:ec:2b:57:86:b8:cc:51:97:cd:c6:6c:54:
                    0a:08:46:6a:11:2d:87:ee:c3:bb:13:cf:e2:f6:3f:
                    ed:28:a5:e3:e8:f4:83:d7:a4:f1:dd:d3:32:f7:a4:
                    dc:f9:57:cb:22:37:b6:ba:ed:62:95:b1:65:31:cc:
                    45:d5:d2:92:72:ae:2a:71:b2:34:ac:33:04:fb:44:
                    e9:b5:fb:3e:62:ee:25:11:14:8e:6e:7f:02:ee:e7:
                    49:8b:ef:b8:39:9f:ca:ce:f4:99:c9:ae:46:91:49:
                    50:03:ac:35:95:4d:6b:ac:1a:24:74:dc:84:ec:d2:
                    d9:f4:53:af:e2:00:fb:d6:64:cc:03:bf:38:e3:a9:
                    c9:fa:c6:28:53:c1:1d:ca:ad:25:e1:88:cc:93:d8:
                    02:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E5:F5:C1:87:39:06:0B:59:9B:A6:4E:EF:23:DD:0E:FC:F5:BA:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/51820b24-c6bf-36dc-a516-9b74b77f327c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.235.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:e3:8c:6f:b0:f1:0e:79:d7:cb:8f:76:48:44:6e:a3:f5:0b:
         96:a6:af:98:2b:44:61:74:20:af:28:94:3c:1a:2c:a4:6f:7b:
         25:29:17:4f:78:e1:3d:9d:9c:cf:df:cf:41:59:19:13:e7:04:
         31:cc:b5:41:f8:7f:dd:f6:06:ff:64:08:0f:8f:f5:27:64:f6:
         36:a0:bc:4c:54:06:e7:c7:58:ff:6a:ea:a0:f5:21:ab:3a:d2:
         08:28:d6:76:2c:22:2c:71:8d:38:f8:9f:cb:7b:6b:e9:b3:fd:
         2f:36:4d:4d:c7:b2:cb:99:5b:b2:8a:2a:8a:92:70:74:38:d5:
         c4:88:88:fc:8e:7c:73:42:a5:00:9e:a5:f7:37:62:4a:ec:65:
         9f:17:09:d0:af:2d:b6:a0:10:6d:e8:c6:77:f2:c7:25:0a:43:
         f9:f1:a8:37:32:71:97:26:b0:fa:53:41:2b:2f:e0:95:7d:b5:
         a7:f6:e2:ff:40:ef:f2:43:02:60:33:82:eb:72:9a:bd:eb:fb:
         fc:ac:d5:8f:4f:ae:36:37:53:21:d4:bb:1d:9e:8d:d9:82:33:
         42:2f:16:68:ed:e5:87:8f:46:26:0f:dd:c0:5a:40:05:ce:14:
         3e:e6:2d:f9:3f:2b:f3:03:c6:c6:33:10:c3:75:32:c7:fa:cb:
         18:4c:f7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:24:37 2025 by rpki-client