Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a99d453e-e490-3674-9ad7-d2896733fa35.roa
File:                     a99d453e-e490-3674-9ad7-d2896733fa35.roa (raw, json)
Hash identifier:          vt5S2Gz+nOYwOZ0Z88fEkl5RJDNHULrQyIRnKoMdb/I=
Subject key identifier:   A0:59:80:4B:38:21:25:93:38:5B:BB:B8:44:56:A3:B4:49:B5:C5:FB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFC8EFE6AD9C852149143A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a99d453e-e490-3674-9ad7-d2896733fa35.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     394123
IP address blocks:        50.225.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:8e:fe:6a:d9:c8:52:14:91:43:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=8fe89bc1-9086-4276-b9dc-146b29ad4fb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:03:60:a1:06:84:1a:8b:16:e5:fd:b0:71:28:
                    c2:61:2f:59:19:a9:ce:6a:e0:77:42:ce:e9:1d:59:
                    4e:15:d8:12:ed:f6:f8:01:b6:13:68:bd:fe:17:3e:
                    b7:b4:b0:6c:42:46:0a:02:b6:48:12:30:3a:9e:ad:
                    3f:8b:ef:52:4f:80:ac:89:b8:7c:b6:71:80:6c:81:
                    3e:ce:9d:0a:f2:dd:7f:00:20:6f:17:d3:5c:11:3e:
                    34:9c:c5:d6:97:f6:99:91:ae:58:43:62:7f:8b:3d:
                    5d:c0:66:1e:bc:27:be:46:b8:57:c8:2c:ac:87:3e:
                    74:ea:60:10:e3:6f:94:a5:bf:e3:5b:da:00:31:f6:
                    ea:9a:c2:d6:e6:9a:5c:01:20:0c:e2:d5:19:84:1c:
                    96:79:3b:da:8a:35:21:0c:28:7b:04:ff:7b:e2:27:
                    f7:56:b6:02:88:a3:3c:21:bb:6c:5a:e1:de:77:94:
                    1e:c7:48:1b:48:77:76:45:9c:b8:e3:f1:3f:a2:c1:
                    b2:ca:37:1b:1e:f2:00:2c:6d:18:3d:8b:58:72:f0:
                    c6:5a:13:ec:e5:53:0c:74:e0:61:52:8e:55:1a:d6:
                    e8:25:d4:d0:f7:80:c4:eb:0e:e8:bb:88:8f:72:80:
                    4b:fa:b6:f1:bb:f7:0f:32:0b:38:07:f6:ec:35:a3:
                    f5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:59:80:4B:38:21:25:93:38:5B:BB:B8:44:56:A3:B4:49:B5:C5:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a99d453e-e490-3674-9ad7-d2896733fa35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.225.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:f7:43:f4:44:4f:33:14:16:95:ca:0e:dc:6b:f0:65:a3:a7:
         27:52:39:09:14:72:c2:34:dd:4e:0f:01:d4:44:b8:bc:01:87:
         ea:12:03:12:cd:f4:2b:ce:c1:d8:ff:17:b9:f4:e9:b5:54:50:
         37:10:42:59:40:24:8c:dc:d9:15:a2:20:2e:b7:25:93:8d:0d:
         9c:99:48:23:9b:51:85:bd:35:36:8c:33:75:91:24:8f:eb:f8:
         08:75:dd:77:a2:0b:88:60:24:b1:a4:a4:50:2a:a1:57:f5:ed:
         94:ed:10:19:21:5d:9c:e4:ff:d4:42:cb:59:18:22:d2:9c:a9:
         50:e7:ba:93:db:d5:af:c4:06:b2:4c:a1:06:6a:db:34:fc:04:
         fa:0d:81:30:62:75:ca:11:54:7d:ef:77:96:b2:01:ab:59:d8:
         92:50:11:bf:b9:12:14:4d:69:66:19:41:48:92:34:b9:5e:53:
         61:41:17:7c:4f:b9:9e:25:5a:5d:a7:c4:76:f3:8e:36:6c:33:
         63:70:0f:ea:14:d7:39:d4:18:cf:78:4c:fa:43:7e:7e:4d:2c:
         f5:8c:fe:8f:1e:60:ed:78:e4:49:87:60:62:76:f8:a8:73:16:
         6f:2f:81:39:f6:a5:9c:90:2f:03:c9:94:d2:ea:3c:3b:75:d7:
         cf:87:f8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:41:29 2025 by rpki-client