Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c022337e-997a-3f5e-8201-427e7e52cbc5.roa
File:                     c022337e-997a-3f5e-8201-427e7e52cbc5.roa (raw, json)
Hash identifier:          pg2qoGitNMJEblrBAZc9YYT8rFkaIkI67Mg9WGaQY1s=
Subject key identifier:   AB:90:B4:C2:31:03:D4:24:D1:B1:C3:35:DD:E3:BE:CA:39:7D:0E:5C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B8917807286A44C1E8B0C1460
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c022337e-997a-3f5e-8201-427e7e52cbc5.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     396021
IP address blocks:        50.171.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:80:72:86:a4:4c:1e:8b:0c:14:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=850a8041-c135-4a49-91b3-b354ba2aabdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ed:57:4c:bc:78:90:93:20:a3:8d:85:81:60:
                    10:39:5a:2b:94:da:e0:8d:36:fd:78:b4:b7:f0:e8:
                    68:3e:d8:f9:0a:a2:d6:05:a2:8d:2e:43:84:aa:f4:
                    c9:01:d0:28:0d:54:36:34:3e:7b:ee:f2:86:ed:42:
                    e9:5e:20:b3:09:e6:c2:2b:33:1e:67:e0:ac:fe:c4:
                    f2:5d:66:c9:09:ba:90:34:b4:bf:1b:6e:02:72:e5:
                    cd:68:d9:bf:15:ae:37:f4:dd:3e:10:f7:a8:fe:df:
                    95:04:1a:fa:a7:ea:0d:cf:db:4d:94:0f:72:b7:46:
                    b9:1c:c4:5f:e4:6a:7a:92:76:3c:72:56:55:6f:1e:
                    33:e2:10:be:1a:35:f6:d4:07:9f:f7:bb:a7:32:29:
                    b6:ae:0a:01:2a:85:8f:5b:7b:48:62:e2:21:9b:bd:
                    d8:0d:16:f8:d9:6c:6f:c3:77:8b:28:a5:b3:f8:8c:
                    b8:49:38:72:6c:de:74:e2:da:61:92:5c:3f:33:d1:
                    58:67:65:a4:fb:54:82:e5:b6:37:fe:cd:05:00:6a:
                    d2:1f:aa:2f:b4:a6:26:6c:31:f3:7b:c6:96:1c:72:
                    1b:e8:a2:79:53:66:0c:e8:e5:a2:ac:23:4d:d1:e3:
                    99:6e:cc:3c:cf:3c:21:3c:48:18:4c:45:0b:b1:fc:
                    1a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:90:B4:C2:31:03:D4:24:D1:B1:C3:35:DD:E3:BE:CA:39:7D:0E:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c022337e-997a-3f5e-8201-427e7e52cbc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.171.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:da:e4:51:a0:4f:8a:11:10:f0:47:2c:0c:d8:ef:d7:52:63:
         4d:ff:f5:49:df:09:86:30:2c:b6:7c:9c:e2:ca:4b:07:a2:5c:
         ed:30:09:06:6e:f4:d1:f5:ae:60:2f:51:47:d5:4c:05:ed:9c:
         93:dd:b9:47:72:18:d0:d0:35:d5:61:f0:08:f8:20:62:b3:5e:
         74:99:42:e3:48:91:bc:34:88:05:67:0c:95:94:d1:93:53:36:
         b4:ee:95:a3:1e:c6:3c:99:51:1e:6f:2d:43:03:f0:ea:4e:f0:
         72:02:81:2a:c8:38:03:c1:32:82:38:ee:4f:34:fc:fc:3a:52:
         55:e5:8e:6a:1e:f0:62:79:72:62:90:cc:5c:9e:8c:e7:eb:0c:
         ce:08:6b:76:c1:80:7c:76:18:fe:4c:e9:a3:f5:b0:41:6b:a8:
         81:82:0c:fd:6a:40:38:a1:06:ac:28:bc:9c:e6:d1:aa:f2:8b:
         c9:1c:30:18:7c:e6:71:32:e9:02:39:ba:1c:39:6e:1c:de:6c:
         10:2a:fd:87:c5:30:62:1e:06:d7:81:b6:9f:4c:3d:2a:7c:bf:
         15:d1:f6:41:e7:f5:fc:80:9a:2a:86:7d:80:38:ee:3f:a7:a0:
         4a:63:3e:4e:bc:55:be:b2:c1:e7:d1:27:8b:9c:b1:68:79:fa:
         84:08:ce:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:01:46 2025 by rpki-client