Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad428503-4fbb-3123-9b47-32374b75ee9b.roa
File:                     ad428503-4fbb-3123-9b47-32374b75ee9b.roa (raw, json)
Hash identifier:          F5xBuH/iGUdcBx+zBd8g0Q3gPFEQeXXh5PPvrakA8nY=
Subject key identifier:   16:C8:14:3D:40:19:40:88:9E:B7:7B:A2:A3:6A:13:24:93:CC:F9:A4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB79281E004B954730BF180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad428503-4fbb-3123-9b47-32374b75ee9b.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33650
IP address blocks:        50.197.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:92:81:e0:04:b9:54:73:0b:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=28e8e8a0-7c10-48f8-a1b9-6f50257b1000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:18:38:7d:c6:72:58:a5:fc:5a:7c:84:8f:99:
                    0c:c6:a0:1b:8e:b6:b4:26:a8:c8:f9:5b:0e:5d:34:
                    d6:6b:e2:6f:5b:c0:71:5d:d8:ce:a8:e6:1e:15:c0:
                    91:65:b9:c7:31:dc:0f:80:ec:e3:74:84:90:f3:57:
                    cb:04:65:1f:c9:27:33:89:fe:ac:e6:38:e3:fe:d7:
                    d6:cb:be:de:3d:ec:0a:f7:b2:d3:b3:77:fc:3d:a6:
                    b9:0f:14:30:f4:1d:50:d6:44:36:bf:b5:42:ea:ee:
                    44:e8:fe:bb:8a:a6:0e:b9:95:90:d3:b5:78:e5:4a:
                    3a:84:d3:fd:75:3c:2a:9f:11:b2:23:4a:c5:40:a3:
                    86:e4:67:ab:3f:62:02:bc:66:e6:68:9c:f1:9f:c9:
                    ba:60:bf:7e:31:a7:a2:b1:cc:03:5b:9a:17:61:fa:
                    43:e5:9d:46:54:71:eb:8e:fc:fb:31:62:0f:f2:44:
                    b6:5f:dc:96:1e:bd:f8:87:e5:55:50:12:00:34:6b:
                    1f:8d:0d:bb:bf:e7:c1:f4:e2:bf:56:cb:52:9a:bb:
                    7f:e4:02:53:5e:8b:d8:ae:9a:d9:1f:09:e7:6d:ee:
                    7c:0c:ef:29:a6:66:62:a8:33:72:1d:25:a3:31:c3:
                    0b:64:a6:c6:66:80:dd:c1:d4:ee:27:2e:08:ac:7c:
                    a1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C8:14:3D:40:19:40:88:9E:B7:7B:A2:A3:6A:13:24:93:CC:F9:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad428503-4fbb-3123-9b47-32374b75ee9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.197.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:e8:c7:83:00:1e:40:3d:4d:33:05:36:75:4b:4f:b0:ae:f3:
         20:d9:28:5b:c4:9a:18:05:ae:c6:a8:d6:ed:bf:e0:bf:6b:a0:
         06:19:81:a6:11:ad:98:cf:1c:44:44:ba:23:09:b3:7c:34:c3:
         9b:79:ee:af:6a:e6:65:02:d2:2a:45:9a:ce:bb:b5:bb:d5:f6:
         89:82:fe:fd:1b:c7:da:b5:18:61:7f:89:92:6e:49:ec:6d:03:
         4e:93:ae:f3:e8:00:25:ee:a0:50:05:97:93:a0:02:f4:3a:78:
         81:f8:2a:8e:1b:21:06:d0:63:ad:42:99:f2:46:b1:ba:69:7e:
         27:4f:2a:7b:9b:2d:64:c1:8c:67:0f:ed:7c:3f:dd:85:39:03:
         04:8a:57:76:35:46:2e:78:f4:23:2e:b8:aa:a0:bf:91:da:3d:
         1e:b0:69:7b:1e:d7:b2:21:fd:c6:30:ea:0b:e1:cc:4a:92:80:
         10:14:88:27:10:fc:55:cf:23:85:86:b3:23:a7:16:2b:c0:9a:
         8b:40:49:82:9a:57:dc:b4:23:08:56:ce:63:e9:11:15:31:19:
         14:9c:22:dd:25:db:f5:82:ab:27:8f:ea:ee:bb:99:96:22:4c:
         2b:51:b8:b4:c9:f9:38:f4:0d:a5:5f:08:fd:64:38:83:1b:58:
         3e:9f:e8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:33:06 2025 by rpki-client