Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99221727-226b-3b0c-98e4-6cfbda586277.roa
File:                     99221727-226b-3b0c-98e4-6cfbda586277.roa (raw, json)
Hash identifier:          mX856ZQ+bwMmBFZE5sOFyws5BD2Mi1Dyfo6Jgd1DBIg=
Subject key identifier:   2C:2C:CC:5B:96:3A:5B:76:57:2D:07:FE:95:EF:9C:50:DF:2F:58:45
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFDB1C2E1DFAACC17C9FD00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99221727-226b-3b0c-98e4-6cfbda586277.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33657
IP address blocks:        50.233.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:b1:c2:e1:df:aa:cc:17:c9:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=9a84eea4-53f8-438c-9a8e-3d98497aa96d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4d:9e:31:cf:93:1a:6a:83:df:d2:9b:2f:6b:
                    e3:66:ad:ca:db:21:a0:4d:36:ee:ad:2b:dc:19:f6:
                    1b:20:d3:38:a5:53:da:38:1c:8c:11:08:d1:07:19:
                    76:e4:40:ba:d5:69:c4:6c:e3:a3:8f:28:93:80:d1:
                    ca:54:43:a2:4f:86:74:28:5e:04:23:06:32:f0:48:
                    78:2b:bc:a3:ba:57:3c:e5:e9:1c:6a:e5:d7:72:b1:
                    fb:b6:3a:10:4b:c2:64:d4:1f:66:e3:a1:5c:80:c9:
                    60:20:37:d3:bf:3d:ff:f8:f5:4e:aa:02:37:06:88:
                    78:92:fe:4e:81:fa:be:ab:e9:ef:5b:f8:9f:ac:15:
                    d2:c8:49:dd:02:05:78:81:98:8e:7b:c8:cc:c1:d5:
                    2e:3e:2c:c3:a3:49:e0:04:92:55:c4:b3:04:ed:a2:
                    79:ef:fe:75:53:4f:4b:87:df:36:13:8b:da:cb:ed:
                    2d:25:25:1e:9d:10:3b:85:e5:6a:d7:d2:3a:3b:c2:
                    44:01:1e:6a:f6:f0:36:13:f5:6c:a9:c5:72:b2:f1:
                    32:bd:04:1b:02:4d:16:9f:a0:3f:a5:08:40:f0:01:
                    04:64:ca:dc:25:1b:56:a9:33:95:49:2c:77:2a:4e:
                    c3:de:fb:25:96:88:fa:a7:a9:9d:93:31:67:12:06:
                    c3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:2C:CC:5B:96:3A:5B:76:57:2D:07:FE:95:EF:9C:50:DF:2F:58:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99221727-226b-3b0c-98e4-6cfbda586277.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.233.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:44:1c:54:36:d0:01:58:09:74:4c:ce:4f:0e:77:7f:63:d3:
         ff:e2:0f:b4:b9:f4:11:c1:40:05:67:70:59:e9:44:23:25:d2:
         96:1d:99:16:d6:5e:da:3e:37:e2:cf:29:42:88:d6:9e:fe:e1:
         62:56:c3:90:b8:8f:c6:e5:50:c5:af:4d:18:95:ae:8b:d4:64:
         fc:7d:02:0f:e1:31:7d:93:ec:49:49:17:e9:62:f5:db:19:fe:
         1d:d7:ac:57:a0:a6:ca:3a:54:c2:13:f1:04:4f:fb:f9:11:cc:
         b8:b5:fd:d7:13:8c:26:d8:ca:ed:cd:fa:71:cf:39:d1:b4:10:
         3a:55:8c:49:83:d7:a7:45:c7:d6:ee:fa:ac:f8:4e:99:be:69:
         82:71:32:c5:e6:94:33:15:0d:c6:be:7e:4c:49:38:01:ba:a0:
         40:cf:98:8f:5f:de:fc:1c:1a:27:27:b3:1b:e2:db:4b:f9:d5:
         cd:e4:fa:c5:c2:82:27:30:85:98:de:23:07:9a:ae:65:77:83:
         9b:92:0d:89:e5:64:72:3f:42:4c:d4:58:6a:e4:21:53:3b:4a:
         fc:fb:88:d7:f3:3b:4a:ba:f1:8f:56:ea:52:3b:e4:1f:e0:87:
         07:76:ae:3c:d7:27:8d:25:04:44:0c:6b:5b:9e:38:22:de:35:
         63:bd:d4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:04:48 2025 by rpki-client