Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b33c3ab2-1e9d-3c39-aef4-e40b4f4129a1.roa
File:                     b33c3ab2-1e9d-3c39-aef4-e40b4f4129a1.roa (raw, json)
Hash identifier:          YScDiOP/sb2AaOTWImosL9VySv49ws1GN6SMj03reMU=
Subject key identifier:   FA:61:9E:FF:1E:55:8C:F6:A0:9C:B0:8F:EE:18:DD:C8:46:67:B5:40
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB893FE18D424607AFE61A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b33c3ab2-1e9d-3c39-aef4-e40b4f4129a1.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     395358
IP address blocks:        50.220.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b8:93:fe:18:d4:24:60:7a:fe:61:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=3364ef43-8caa-47ff-8c02-8fce5bd80910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b4:7d:08:69:07:3d:1f:93:f4:66:ec:16:77:
                    82:79:a8:dc:62:31:32:0a:02:22:09:97:e4:fb:b8:
                    21:8b:96:9f:99:b6:c6:8c:61:94:a6:fb:a2:34:9b:
                    1f:f7:ec:d4:8f:cd:69:e6:2b:9e:26:d0:0f:1f:e0:
                    c1:5a:dc:38:59:7f:64:ed:8a:07:93:7a:52:3b:5a:
                    9f:38:07:ad:5f:36:c3:2c:13:05:4b:9d:16:f8:91:
                    c8:5b:c0:bf:a5:7a:33:24:d8:4c:03:44:18:18:c1:
                    4f:8f:0b:2c:32:14:4c:bc:54:38:15:45:d3:fe:d0:
                    b4:c1:5d:4f:d8:a1:4d:2f:0a:de:a0:fd:cd:3d:56:
                    ab:09:dd:49:40:aa:07:d3:8f:b9:78:11:79:c2:a2:
                    4f:c0:09:c0:43:c3:f1:5f:c7:4c:e7:89:f6:fe:11:
                    78:8e:dc:19:a4:32:54:b7:1c:f1:d9:9c:bf:b4:78:
                    77:54:c0:43:7d:a3:86:6f:cc:cf:bd:ca:5e:38:8d:
                    bb:9f:54:bf:b8:26:cc:3a:f4:f5:78:d7:5b:10:34:
                    46:cd:d6:b2:81:0f:6d:33:9f:0a:0d:ba:5d:3a:41:
                    fd:57:fe:30:e7:5f:a7:09:9e:d5:36:82:0d:a4:5a:
                    c3:8f:19:b2:85:92:08:9c:bd:57:3c:59:94:ed:5a:
                    1c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:61:9E:FF:1E:55:8C:F6:A0:9C:B0:8F:EE:18:DD:C8:46:67:B5:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b33c3ab2-1e9d-3c39-aef4-e40b4f4129a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.220.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:0e:3a:88:68:71:d7:8f:42:ed:a8:45:09:be:d7:f6:69:d2:
         4a:6b:76:9c:3f:65:67:7f:55:04:6b:86:4b:d5:67:95:f7:9f:
         21:7b:04:76:bd:ec:05:b9:29:89:51:86:3a:41:94:5b:7b:73:
         0a:5d:46:e2:12:ba:67:88:59:48:96:54:30:f2:5b:70:14:d8:
         b4:cc:99:bb:b4:9f:bd:92:7e:f3:ed:f0:5e:99:2d:26:b6:ba:
         45:ab:24:3a:7d:a7:eb:c6:30:22:ba:fb:d7:22:88:62:19:f6:
         d9:cc:09:87:c8:56:bb:81:76:e5:f6:6b:4d:10:19:50:18:7e:
         94:9c:98:dd:fe:03:80:77:60:45:95:5b:af:2e:e0:7d:ec:02:
         c3:9d:b5:ba:3b:ce:1b:6c:7e:3b:80:75:ef:86:77:08:22:fc:
         84:5c:41:fc:30:eb:8c:8d:93:8e:77:2b:1a:3d:42:4b:d6:0f:
         07:ea:54:77:d1:7f:14:e7:20:97:1b:59:f1:ed:77:eb:34:fb:
         49:b1:71:f3:e1:92:df:51:b3:e0:1b:41:9c:ee:cb:da:34:f7:
         5f:c6:c2:07:74:4a:9f:d5:cf:a1:4d:9a:ea:21:d8:6d:22:de:
         71:96:e8:b5:aa:3d:1e:7b:4c:cc:68:d0:6e:da:81:f0:02:86:
         f0:55:ea:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:30:49 2025 by rpki-client