Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64484bcd-13f5-338a-9b49-5049d703cb5b.roa
File:                     64484bcd-13f5-338a-9b49-5049d703cb5b.roa (raw, json)
Hash identifier:          3Iw6HVurAEu9jR0q9ScPtS+03YKDLmwLlE7YwMKHAMc=
Subject key identifier:   A9:D7:9F:C0:F0:66:49:DC:66:BF:3C:27:04:29:B4:DC:27:F2:02:90
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFB693FCA613C7CA0F49440
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64484bcd-13f5-338a-9b49-5049d703cb5b.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     22909
IP address blocks:        174.50.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:69:3f:ca:61:3c:7c:a0:f4:94:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=a19620e0-0430-4b8e-8e6b-ff91c2b39848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fd:a4:97:1e:b8:64:83:82:86:b8:5c:42:ce:
                    59:75:8b:30:c5:d2:18:72:5c:cc:6b:3d:f5:1c:4f:
                    13:36:f0:3f:1b:3c:cd:23:ab:31:1d:79:63:aa:d4:
                    c7:7d:f4:fa:3b:86:61:31:8d:15:11:af:7e:3e:15:
                    38:02:9d:79:dd:a7:f2:66:03:ed:fd:75:77:5e:60:
                    1a:57:20:6b:a1:6e:0e:84:01:31:3f:6d:a8:97:ee:
                    6d:e8:67:06:82:c4:9b:91:e9:f3:18:5d:b3:49:d8:
                    9c:f4:68:f7:aa:59:bd:49:f4:fc:a7:4a:a2:27:ef:
                    7e:a9:97:8d:d9:57:50:2b:8d:54:f1:9c:fe:4e:50:
                    17:91:e1:91:ee:c4:dc:24:f3:a0:84:e9:28:6e:dd:
                    6c:07:b9:4b:06:e2:fd:8c:a6:7b:60:92:51:e0:40:
                    b5:9a:a6:4f:7a:0a:53:06:94:35:6c:a6:7f:c6:b4:
                    71:63:5f:82:52:bf:6a:f1:50:d8:2d:76:d1:41:16:
                    aa:bb:61:d6:7d:92:c9:52:3e:a4:9c:8a:1c:f2:fd:
                    0f:c8:59:21:6e:55:b2:f6:7c:bc:4b:06:53:d4:1f:
                    77:bd:9d:0c:c2:87:bb:8e:36:e2:13:e0:8c:09:4e:
                    d2:80:c2:0b:48:69:5c:2d:8b:44:13:bb:8a:71:94:
                    1c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D7:9F:C0:F0:66:49:DC:66:BF:3C:27:04:29:B4:DC:27:F2:02:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64484bcd-13f5-338a-9b49-5049d703cb5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.50.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:f7:bc:27:36:49:97:a0:f7:11:f2:b4:fb:5f:f0:18:28:67:
         15:df:f6:f7:3a:ac:33:ca:06:a8:c9:58:78:ec:40:ec:34:82:
         79:08:06:f5:4b:3e:79:c0:9b:7b:90:43:33:ec:72:88:ea:96:
         aa:b3:5d:6f:c8:56:8e:c2:ed:d7:cf:f4:94:2f:b8:e9:13:f2:
         85:02:2f:5b:68:dd:ad:f0:c0:e9:dd:31:f8:f6:ad:be:2b:c2:
         fb:45:89:6c:68:66:0c:60:c0:4c:6e:3e:a3:94:96:74:9c:58:
         71:f2:e7:23:4b:2b:06:f6:99:18:a3:af:b5:39:67:15:f7:55:
         33:13:b7:e2:f3:2f:cf:b9:72:07:58:df:ee:5d:44:f3:77:8d:
         ab:64:ac:95:82:e0:5c:dd:65:5e:e9:cb:4c:ba:a2:a3:7e:c1:
         a7:64:d1:ba:81:ad:45:b0:a9:b0:67:55:90:95:60:6a:61:d3:
         f1:9a:a8:b9:bd:55:c8:2f:91:a9:26:dd:42:bf:5b:ba:c4:42:
         09:69:e2:3a:09:2e:c2:be:48:df:d8:e0:27:ad:0b:8b:dd:9e:
         cb:65:c3:e8:1b:7f:cb:99:f4:55:3b:0d:f4:b3:fe:4d:59:5c:
         07:1c:5c:82:a7:40:5c:bc:41:9f:54:4e:7f:75:0b:87:ec:2a:
         97:72:fc:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 23:45:33 2025 by rpki-client