Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f7fab66-76e5-350d-bbc0-dc047c5122ca.roa
File:                     6f7fab66-76e5-350d-bbc0-dc047c5122ca.roa (raw, json)
Hash identifier:          ++VkN6jaiqdr4iXHt3vIQ1cjtmtGA91B/97gd2VuAF8=
Subject key identifier:   18:67:7D:E9:97:DC:81:EC:45:0E:46:C7:6D:77:74:32:AD:F9:38:41
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DBA1B31D7A998B8BFC9F330
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f7fab66-76e5-350d-bbc0-dc047c5122ca.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     46807
IP address blocks:        50.234.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:ba:1b:31:d7:a9:98:b8:bf:c9:f3:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=3bd0f403-3065-4063-8963-28ba35ee3ab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:86:43:e3:df:b6:02:61:a8:4a:da:70:14:80:
                    33:9c:cc:98:28:8e:60:ec:e1:41:f2:15:21:3e:c2:
                    a1:4b:38:cb:5e:34:7f:8f:dc:46:7f:fe:8f:74:11:
                    7e:09:9c:aa:d5:4b:35:df:b0:22:57:36:82:f0:2a:
                    76:0c:cd:92:03:1c:82:5d:e6:6d:2b:c2:8e:19:72:
                    89:40:49:69:61:4b:ec:e7:1e:4c:f3:e3:d9:25:d5:
                    7b:7b:ad:2b:88:17:05:8d:58:2e:fb:f2:59:d2:1e:
                    08:15:68:b1:0a:e3:0d:ef:71:e7:69:48:d4:a4:ac:
                    15:42:4a:8a:f2:2f:b2:52:96:a1:2f:0f:e3:08:42:
                    6d:da:24:19:98:dd:4a:0f:6e:5a:74:57:be:f1:24:
                    da:e4:4c:02:c3:c2:36:ff:ff:83:97:91:71:63:c2:
                    c8:c9:46:26:63:be:d3:db:07:63:af:b3:d9:30:83:
                    c7:a6:b0:cb:1f:66:01:98:19:4e:c4:bc:e4:bf:01:
                    d9:61:85:cd:ae:6e:fb:31:5d:9b:ed:3d:c3:29:34:
                    3f:3c:52:10:f1:00:d2:57:e5:c5:b5:19:44:e0:20:
                    57:5b:4d:84:76:71:a8:ec:84:bb:1c:a4:a2:f3:45:
                    1b:d0:4d:a5:8d:1e:8a:11:d7:1f:d9:d7:32:e4:40:
                    ca:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:67:7D:E9:97:DC:81:EC:45:0E:46:C7:6D:77:74:32:AD:F9:38:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f7fab66-76e5-350d-bbc0-dc047c5122ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.234.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:de:bc:e6:c5:90:07:0e:59:08:9d:53:6f:5c:2c:6b:5a:ad:
         ec:f4:2e:7d:74:ed:8d:9f:84:da:99:08:5f:9c:53:4b:85:c6:
         40:cc:c1:a8:75:c6:6a:e3:4e:31:6e:db:60:fb:8e:26:fd:09:
         81:5e:0b:ef:89:e4:da:50:c6:b5:a9:9f:b2:2f:a6:51:eb:8d:
         bf:31:c2:e9:1d:a9:03:ae:4c:dc:c0:ce:00:11:77:c9:7a:f5:
         ac:0f:10:9b:18:b6:f1:df:b4:9b:1f:5f:be:6a:4f:33:e2:d8:
         6d:ce:cc:dc:5c:97:39:05:d4:23:03:e4:22:47:9f:5d:9d:b8:
         3f:af:5a:3d:5a:22:61:53:cf:ab:df:15:c8:4d:68:f6:d1:b4:
         9c:8e:e0:62:ba:5a:65:1b:c2:68:6a:87:84:7a:9a:c8:f2:34:
         4c:a5:ab:64:d1:40:11:74:3a:0d:34:43:d5:21:da:78:24:c7:
         65:f3:13:b2:fa:45:13:29:c3:91:79:13:dd:70:8e:eb:88:a4:
         c4:7b:06:ad:1e:1f:d3:a3:fa:4a:2b:61:7f:90:2f:26:d7:b2:
         e3:98:ae:b9:a8:f2:d8:eb:2c:b8:6a:21:68:90:f5:c5:c8:dd:
         f0:83:f5:16:c7:37:66:a8:29:53:4f:4c:f0:6a:3a:fa:0c:8a:
         cc:4c:f5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:37:02 2025 by rpki-client