Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/895d4fe5-68d0-330d-8427-a890aa9eae6a.roa
File:                     895d4fe5-68d0-330d-8427-a890aa9eae6a.roa (raw, json)
Hash identifier:          PgspGARSP3nJ0y57lHIqYlPjIAolgIt31mM1FKQcueM=
Subject key identifier:   B9:78:FC:55:D5:12:93:54:54:0F:73:77:CB:0D:D3:4C:5B:7C:B0:88
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB7A9CB56B1C553B1286DE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/895d4fe5-68d0-330d-8427-a890aa9eae6a.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33652
IP address blocks:        50.243.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:a9:cb:56:b1:c5:53:b1:28:6d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=c6f9bb98-6d49-4c00-90d1-174540184cac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b0:b2:de:61:5a:be:b4:dc:a3:9d:e8:ac:52:
                    b4:ba:98:a5:69:4a:df:20:ed:f6:c2:ce:6d:71:c8:
                    bc:1c:dd:aa:8f:c9:a2:ac:19:f7:b9:c7:05:0b:5d:
                    e9:3b:47:07:c2:c1:f9:3e:88:88:16:13:10:0c:88:
                    af:38:47:24:c5:ec:f5:94:c8:d8:e1:da:cc:23:72:
                    99:c0:84:c9:68:0d:b7:3d:cf:6e:8e:98:16:fc:27:
                    e0:dc:41:7e:7b:9e:b2:18:fe:5c:02:a3:75:14:c5:
                    3d:dd:d0:ec:5c:04:e1:9d:ed:cb:38:af:27:49:a9:
                    00:cc:a9:73:06:92:8c:80:1b:eb:b5:98:bd:6a:c7:
                    dc:4b:d1:a1:8a:12:98:b1:1f:cf:af:a7:ee:8b:15:
                    40:d4:af:57:80:32:d9:97:7b:42:9c:a8:89:23:29:
                    b5:90:82:b3:ab:16:51:df:55:de:ce:b4:ec:19:e7:
                    a0:6f:f1:86:04:f3:5c:48:e0:3e:88:be:8f:05:8e:
                    11:b1:4f:50:c1:8c:7a:16:7c:f9:45:30:0d:9d:79:
                    d5:e0:8e:b8:29:93:b7:75:65:21:7b:24:0c:ac:0a:
                    ec:42:13:1f:aa:23:55:8a:be:bc:62:4d:f0:11:fe:
                    b5:d5:87:24:6a:7b:d3:a8:b2:fd:90:f2:47:fc:e8:
                    87:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:78:FC:55:D5:12:93:54:54:0F:73:77:CB:0D:D3:4C:5B:7C:B0:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/895d4fe5-68d0-330d-8427-a890aa9eae6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.243.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:f2:f9:85:7f:24:0e:5b:c7:4c:af:a5:8b:ff:9d:c6:39:d8:
         4a:0b:77:66:da:70:7e:24:17:f7:fe:47:2d:72:d1:55:98:02:
         4f:de:90:93:fe:11:5b:33:25:38:b2:7e:44:5b:f5:4d:d9:26:
         f8:95:30:3a:6e:32:b8:3b:53:85:53:e7:35:15:a8:f2:54:3f:
         0f:af:6f:f1:dc:b3:b7:25:ef:bc:04:f4:78:61:3d:7d:da:19:
         73:03:eb:1b:84:b0:b7:10:b8:4a:77:8b:21:df:67:55:f8:76:
         13:30:ba:fb:15:06:cd:62:ce:08:c6:fc:a2:14:f3:31:a9:2d:
         ce:2d:52:1b:a5:6c:22:e2:b9:67:fd:a1:38:f3:dd:78:8d:90:
         88:36:56:ab:09:7a:74:2a:27:56:37:90:9b:46:b7:36:7e:61:
         a5:f1:9f:1d:e2:81:d8:34:02:f3:88:f9:88:8a:2f:94:01:53:
         ac:28:93:0c:36:9f:8b:d2:5d:42:9a:2f:5b:00:70:d4:b8:91:
         80:ed:28:b0:a5:ac:30:50:28:a8:db:02:b4:b5:23:ce:cf:f3:
         33:30:71:3d:6d:56:85:1e:e4:68:cf:49:1d:60:0d:b5:b3:e9:
         32:6e:00:55:55:52:c0:77:df:de:2b:44:15:dc:e8:40:fa:37:
         b9:4a:ea:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:27:15 2025 by rpki-client