Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88e860a4-dbc1-3f95-9e78-5861e5be23f5.roa
File:                     88e860a4-dbc1-3f95-9e78-5861e5be23f5.roa (raw, json)
Hash identifier:          2R8EtjFwouaaLnAcbIJxAKr1DNGr87A6BCN7clE93Cg=
Subject key identifier:   01:4B:ED:A9:C2:21:92:42:ED:FD:0E:36:15:31:B5:49:26:BB:A0:BC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F49815D1BB0C350F514765100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88e860a4-dbc1-3f95-9e78-5861e5be23f5.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7015
IP address blocks:        50.208.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:81:5d:1b:b0:c3:50:f5:14:76:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2f624bdd-515f-4871-937d-b43864d93731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f2:82:c1:bf:a6:db:1a:c1:3f:ce:40:33:ed:
                    90:c7:64:14:4c:a5:fb:e8:a6:60:92:bb:06:17:79:
                    bf:c3:40:e7:c4:3d:69:9c:1b:da:9a:1f:6f:f4:b0:
                    11:49:bd:73:a8:83:54:37:d8:42:89:d3:0c:41:a4:
                    e1:de:78:70:b4:80:5a:cc:47:50:48:b4:4a:0f:27:
                    78:38:bf:89:75:d8:8e:ec:8e:13:c9:5e:eb:8a:df:
                    ec:d1:60:e5:f2:28:b6:8c:d6:b2:1c:c6:da:00:d4:
                    33:91:6f:e2:72:65:35:c1:1e:0b:67:7c:3c:49:d5:
                    be:08:09:f3:0c:1d:bf:f8:f6:00:2c:c4:36:ae:81:
                    e3:97:44:70:50:21:3a:b0:a5:47:02:a0:32:f2:8c:
                    73:37:7e:04:92:44:a2:f5:0c:96:5a:8d:84:25:9c:
                    25:1b:23:94:2b:df:63:29:48:67:41:84:1e:d0:d6:
                    74:51:91:4e:8a:ae:49:2f:ad:3f:17:0e:d2:16:c3:
                    c5:dc:ab:8c:e6:f0:83:59:7b:2c:91:d7:e4:6d:b4:
                    91:ea:90:7a:cf:da:1c:20:b8:23:9d:84:cf:bd:d6:
                    31:0e:c5:5f:9f:f3:10:18:7d:d8:9c:2d:10:bc:9e:
                    4e:b5:5a:b9:e0:c3:bc:d1:4c:36:a0:0d:42:26:96:
                    14:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4B:ED:A9:C2:21:92:42:ED:FD:0E:36:15:31:B5:49:26:BB:A0:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88e860a4-dbc1-3f95-9e78-5861e5be23f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.208.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:4b:d3:5e:10:73:e1:a2:16:f1:bd:6e:d5:64:f9:24:a3:f5:
         54:b1:38:1e:00:92:e0:f4:02:1a:cc:fd:32:6c:96:83:ad:7a:
         29:26:28:48:d9:a6:68:bd:e6:70:33:71:80:18:75:bc:db:81:
         92:fb:80:7b:68:c9:2e:cf:4e:6f:04:1b:7f:bb:44:f3:ee:41:
         65:6c:2a:25:a3:85:e5:1a:48:d4:75:e2:fd:c7:f8:db:ba:02:
         62:3e:e1:6a:85:50:b4:18:c1:e3:6d:65:b4:58:53:5b:35:2f:
         e2:15:95:08:77:34:c4:d5:29:2f:14:91:b5:5a:08:f9:50:1f:
         b0:7f:65:63:db:44:d8:e9:7c:0a:db:35:b7:a8:7c:47:ea:e7:
         28:49:0b:7d:dc:55:ae:3d:c4:be:bd:65:76:70:46:1f:f1:47:
         54:c3:56:39:52:2d:27:47:02:a8:4b:85:5e:c9:e7:0a:78:d4:
         c6:7b:e0:5d:40:fe:d4:27:f0:8f:bb:56:a4:33:4f:a9:e4:07:
         58:a1:ca:08:54:ed:2c:1a:9f:fc:2e:95:a9:59:cb:93:44:4b:
         ea:25:d0:ee:58:44:ea:62:58:1d:ba:3c:15:f3:65:2d:fa:db:
         07:f3:87:1d:fc:61:a1:de:76:18:c7:c7:65:d1:ac:98:86:b5:
         a2:0d:52:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 11:53:28 2026 by rpki-client