Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59810987-2149-36cc-aa70-8d6f0f8a7070.roa
File:                     59810987-2149-36cc-aa70-8d6f0f8a7070.roa (raw, json)
Hash identifier:          fFaC1KCNtwGY7mv33B/GjRdq8FbNmWZP97Aa+bAH+kE=
Subject key identifier:   FA:96:68:A7:EE:C8:E5:E9:59:48:D4:43:B7:B9:A0:DD:3D:34:76:64
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB79A5238AA2E65C7D54280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59810987-2149-36cc-aa70-8d6f0f8a7070.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33651
IP address blocks:        50.231.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:9a:52:38:aa:2e:65:c7:d5:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=da3f9b11-9766-40f3-8054-6bb65646d156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e5:45:82:23:82:12:94:c0:fd:a3:88:1e:27:
                    c9:dd:1f:97:97:88:f3:e7:e6:04:b9:08:cc:00:8f:
                    5c:33:73:b7:cc:65:b3:96:62:a5:e3:c8:e0:9b:c7:
                    0f:1a:7e:f5:52:7c:84:e1:ee:51:22:d1:c3:7c:f6:
                    aa:75:73:c1:67:f1:1c:76:21:1b:f6:9c:aa:b1:14:
                    b7:4b:06:c2:70:5f:92:38:35:b9:ba:a6:d0:98:11:
                    95:98:80:78:2c:82:dc:3f:d9:00:6c:5b:5e:ae:4c:
                    3a:85:36:dd:be:16:26:46:6e:1c:f8:35:c9:a5:76:
                    71:a1:b1:91:18:a9:2d:cb:60:89:be:79:21:ab:b1:
                    cf:34:c5:b4:aa:91:de:43:d9:e0:c0:6f:54:c6:87:
                    c7:21:e1:cf:d1:d5:44:cb:3f:48:70:2e:33:1e:45:
                    2b:fa:9b:4a:f3:f7:92:4e:5f:58:07:9d:6f:9d:1b:
                    b6:02:31:e3:85:31:f6:0e:28:bf:66:c8:bf:28:96:
                    95:6e:e7:6b:d4:9b:58:65:37:30:ba:d2:86:ec:02:
                    5b:2f:55:14:b8:b1:87:3d:16:33:45:9f:a9:1a:fc:
                    9e:ea:d2:5d:46:39:4d:5f:07:aa:12:11:49:fe:05:
                    1f:6b:8c:24:d7:8a:0c:da:9a:c4:13:b2:fd:5c:7c:
                    db:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:96:68:A7:EE:C8:E5:E9:59:48:D4:43:B7:B9:A0:DD:3D:34:76:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59810987-2149-36cc-aa70-8d6f0f8a7070.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.231.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:61:99:1e:b5:91:9f:35:a1:1d:eb:70:a9:44:b7:fe:b7:d7:
         a8:b1:da:6b:c3:e7:c7:b6:1b:19:4f:64:d4:c0:2f:ee:6c:24:
         72:99:e9:91:83:33:07:72:e7:11:31:5f:98:da:6e:ae:04:78:
         dd:8a:0e:5f:89:b9:f2:9c:ea:ef:17:46:43:01:85:63:97:3e:
         ae:07:ff:57:b9:00:e0:6b:47:8a:69:4e:a4:bd:de:91:a7:3f:
         a8:d4:86:29:e0:b2:28:79:64:16:88:db:4c:ff:10:70:73:51:
         db:d5:da:74:8a:ce:40:f3:fe:62:58:ba:e7:8c:58:be:09:c8:
         14:94:29:a9:af:95:4b:96:3b:79:aa:c6:f7:80:6d:d4:75:4c:
         01:4a:0f:94:d0:81:42:66:1c:82:31:73:bc:e9:c1:58:a0:74:
         24:d4:b5:6f:76:08:94:25:52:0a:05:49:21:99:d6:c2:cf:f1:
         07:02:17:4c:9b:67:18:ef:07:7d:40:35:46:f1:5f:3a:61:a1:
         a0:e1:12:70:50:a4:82:0e:ff:73:b5:eb:b9:9a:cc:c6:42:e4:
         77:11:db:95:f6:62:b4:48:72:9c:5d:9a:7d:66:41:6e:32:5b:
         15:84:9f:4c:70:9b:4d:64:f7:43:ba:da:18:ba:bd:8e:c1:ec:
         4d:71:77:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:01:45 2025 by rpki-client