Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/823f906d-39fd-3eed-ac3e-9044e3a83432.roa
File:                     823f906d-39fd-3eed-ac3e-9044e3a83432.roa (raw, json)
Hash identifier:          IvD6wIN9YdnjnqjuU6zm1wM9d9kfcp7C1pl3LkiDQ+g=
Subject key identifier:   04:64:F2:F3:8B:74:C1:88:EC:05:23:54:D8:08:8B:F4:4B:B1:9D:47
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AE19694CF76FCF68F592A4F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/823f906d-39fd-3eed-ac3e-9044e3a83432.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     33490
IP address blocks:        50.190.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:94:cf:76:fc:f6:8f:59:2a:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=44701f79-21a3-4968-91c1-29458fbe043c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:bf:df:19:90:61:f0:70:db:eb:5a:f3:cb:f0:
                    84:92:8a:4c:f3:1e:10:2a:58:87:da:3f:92:73:f4:
                    f0:45:37:5a:43:6d:65:08:26:7a:ce:28:f4:be:9c:
                    76:41:51:f8:78:d2:95:aa:8a:a8:63:24:bc:39:f1:
                    cf:13:ba:77:73:2e:48:a8:e9:d6:3e:af:45:0b:68:
                    66:4f:bd:b4:27:bf:2f:66:fc:5f:43:00:cc:6c:50:
                    4e:1a:0d:67:0c:f8:e0:00:c8:0b:b1:93:06:2e:7d:
                    61:f0:be:da:59:4d:d5:9a:e4:35:23:ea:e9:a8:47:
                    4d:07:fc:d1:a5:2c:32:0b:04:13:8c:19:b3:c5:3b:
                    df:90:fc:c0:ab:c5:aa:01:ad:38:7a:20:d1:a5:b4:
                    ce:82:21:7d:e5:be:45:fa:fe:dd:61:fd:00:74:87:
                    3a:bc:e5:97:a9:12:41:85:bd:d3:9f:03:b9:03:4d:
                    6f:0b:b9:0a:52:3d:22:69:fa:b8:cd:ae:e1:70:ed:
                    7f:51:61:c5:26:5c:90:e5:36:e0:55:a5:f1:94:c3:
                    e8:a5:46:60:4c:d5:40:ad:4b:85:00:cd:b0:58:4d:
                    fe:6a:dd:24:45:62:92:cf:2c:f1:d3:33:2e:b3:99:
                    aa:f6:01:2f:81:20:b6:04:9b:e6:d9:ef:ca:92:e3:
                    c2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:64:F2:F3:8B:74:C1:88:EC:05:23:54:D8:08:8B:F4:4B:B1:9D:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/823f906d-39fd-3eed-ac3e-9044e3a83432.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.190.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:ad:4b:bd:d6:79:c5:f8:66:d5:2f:dd:ac:79:c8:db:8f:22:
         13:6e:78:dc:6b:1d:4c:39:c1:a0:45:1a:14:7f:5e:e7:ba:16:
         86:e0:c1:f0:c3:22:1d:22:17:16:a3:11:98:27:6c:93:09:7f:
         fb:57:2b:01:b7:44:44:d7:ca:c0:14:69:26:3a:53:78:2c:a9:
         cd:9f:be:5f:38:a5:aa:01:1b:4e:ae:e3:bd:c8:ce:e6:0d:86:
         7a:f1:69:08:3e:df:2f:7f:ca:5a:03:d9:f4:61:5b:8f:af:3a:
         c7:57:26:d8:a8:ad:5d:fc:a4:8d:e1:6d:23:a2:20:30:59:2c:
         6b:65:51:ef:21:1c:d7:ba:47:7b:d7:89:31:01:96:35:b0:38:
         4c:c3:08:9c:83:e3:f2:ba:d3:9c:bc:b5:cf:7d:87:c5:40:93:
         86:85:a3:d3:ab:90:ba:3d:a6:c4:85:e5:1e:a6:13:33:17:d1:
         2b:6b:65:c5:ca:be:c5:e9:f7:e6:b8:c5:c8:7e:34:82:f3:9a:
         80:d4:5e:2d:9a:c3:1b:1b:aa:d5:4d:b0:1d:19:89:09:76:f5:
         98:38:17:02:90:4f:56:75:a6:a6:86:92:f1:3c:de:7c:27:a3:
         da:10:a5:cf:49:24:ad:f5:3a:1e:e2:83:b1:5f:0f:71:1d:8e:
         98:46:83:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:28:31 2025 by rpki-client