Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5854891f-17b5-315a-b0d0-8cd695ba00bc.roa
File:                     5854891f-17b5-315a-b0d0-8cd695ba00bc.roa (raw, json)
Hash identifier:          67Qzi61mAN/ARXWR8+YEthauHbpDP+cKMHe8ntFFv5s=
Subject key identifier:   6E:15:9D:D8:A9:4D:49:BD:21:5E:DA:C1:6D:18:CF:B6:7B:E6:90:B5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B7DECC1E4167FC4858D7F61C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5854891f-17b5-315a-b0d0-8cd695ba00bc.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     36040
IP address blocks:        50.202.50.0/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:c1:e4:16:7f:c4:85:8d:7f:61:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=7ec9b977-3eb8-4789-9c94-23337f8539df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e6:e9:83:c3:d4:c6:c3:e3:58:c0:10:c8:bf:
                    e5:ee:65:f3:24:37:1e:31:56:b1:b0:a8:07:73:39:
                    19:53:0e:1e:38:ca:5c:02:ef:4e:f9:08:f7:f2:ef:
                    42:08:c2:c5:86:41:24:31:bc:08:cc:8a:45:7c:97:
                    72:2e:dc:24:c7:6d:53:17:dd:de:a8:3a:be:51:4e:
                    08:93:fa:e7:fe:60:a2:e9:36:59:0b:e2:86:7a:e7:
                    8d:b8:68:f0:ec:49:74:5e:7f:f1:42:4d:d8:02:a7:
                    02:e7:54:d6:65:48:df:1f:1a:81:1f:05:00:32:3f:
                    36:2b:aa:82:67:ad:72:9d:93:58:42:3a:fd:c4:aa:
                    1e:48:49:7c:d4:51:fb:2e:1e:19:e6:65:05:bc:6a:
                    22:25:88:de:d8:1e:f2:5d:5c:ca:fd:d6:45:f5:83:
                    c1:b9:1b:7f:61:f9:3f:12:8d:d3:db:2d:a5:0d:15:
                    70:22:b8:fa:88:67:6f:09:03:20:aa:7b:43:94:95:
                    05:e8:b6:1e:4c:04:23:f6:19:ee:91:1d:3d:c0:19:
                    e8:f4:4e:cd:43:b1:36:e4:51:95:73:29:d9:f4:48:
                    46:89:d3:02:57:60:e2:fe:2a:b9:0d:75:5d:7a:81:
                    98:88:c5:29:f8:2b:e9:2f:c6:28:ef:e8:85:ac:64:
                    bc:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:15:9D:D8:A9:4D:49:BD:21:5E:DA:C1:6D:18:CF:B6:7B:E6:90:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5854891f-17b5-315a-b0d0-8cd695ba00bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.202.50.0/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:81:e9:98:41:bd:b6:c1:35:74:fb:1c:5c:e7:35:e8:da:c1:
         fd:10:92:b6:09:15:f1:c2:0a:0d:26:66:a5:21:05:47:c1:45:
         c3:72:b1:63:f8:11:31:66:b7:28:e7:27:7e:26:bc:bb:20:bb:
         a9:d3:b1:62:2b:b4:af:6c:35:0f:7d:78:89:a7:f7:15:35:f6:
         85:ab:cb:20:b6:00:aa:20:a5:e6:a5:db:77:03:54:6c:5f:de:
         95:1e:15:d7:72:bd:4c:02:2e:d9:84:0f:09:84:77:cc:f4:62:
         c7:c5:cb:4a:53:f4:d6:21:58:ec:22:bb:2f:aa:c9:d7:8a:5a:
         e0:d7:10:8c:8b:35:4f:c1:5a:eb:cc:97:55:f0:67:67:31:5a:
         52:79:15:67:55:b9:02:01:a7:61:28:2b:bb:67:f5:24:16:45:
         27:83:2c:78:f6:58:e9:83:09:8a:9f:3a:98:fa:40:7c:6d:aa:
         35:dc:84:57:98:1c:d3:0d:ab:52:b0:b4:c1:8d:b7:14:58:5a:
         59:45:ce:10:57:44:72:5a:a1:2e:77:dc:23:04:90:4d:ef:65:
         4e:d2:f6:71:b8:6f:07:88:db:0c:f2:e3:e5:ad:9c:59:d7:14:
         22:2e:05:47:71:42:08:8c:d6:85:94:3c:7a:47:7e:a4:9d:13:
         1e:e7:65:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:34:59 2025 by rpki-client