Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf946e1e-e8c7-3839-bac7-666f6c1ff29a.roa
File:                     cf946e1e-e8c7-3839-bac7-666f6c1ff29a.roa (raw, json)
Hash identifier:          TcM1sgknrjHkXQowFjkF3NDyerAY3R/xTvO9Kvx+S50=
Subject key identifier:   77:28:E5:2E:CC:A0:25:72:7D:DB:7F:DC:C7:19:AF:0F:BE:09:CE:22
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B8BE236D19C0831E2308107A8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf946e1e-e8c7-3839-bac7-666f6c1ff29a.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     36040
IP address blocks:        50.202.195.0/24 maxlen: 24
                          50.202.195.0/26 maxlen: 26
                          50.202.195.64/26 maxlen: 26
                          50.202.195.128/26 maxlen: 26
                          50.202.195.192/26 maxlen: 26
                          2001:559:0:b6::/64 maxlen: 64
                          2001:559:0:b7::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:36:d1:9c:08:31:e2:30:81:07:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=4ab57184-c7fe-49fd-96a0-86cf1f83862f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:94:76:08:de:a0:dc:9c:cf:89:60:1b:cc:ef:
                    11:31:84:be:78:30:09:ec:6e:5f:80:86:80:3f:a1:
                    be:85:6d:15:9c:af:46:dc:5a:f5:1b:89:fe:00:6e:
                    3c:14:f8:dc:6d:d5:d2:96:32:51:6e:4e:6e:83:de:
                    58:d8:aa:53:7d:e7:60:fd:54:62:0c:01:8e:98:22:
                    1d:29:e9:11:37:67:50:eb:71:8b:fe:fe:f8:d6:6f:
                    eb:a8:cb:76:93:a3:1f:19:c3:fa:bf:66:4a:db:0f:
                    d2:5c:9f:3d:60:64:e4:52:ce:b6:4b:68:33:39:47:
                    f8:0b:4b:a7:16:50:e0:ac:5e:cb:4e:b4:f7:d6:4e:
                    49:e1:60:c2:28:30:75:d0:bb:c8:77:05:80:ae:01:
                    cc:de:00:be:b4:a5:8d:a3:09:a5:a0:43:43:18:12:
                    aa:5d:09:c5:78:f1:ec:9c:a5:21:14:d9:25:52:9b:
                    db:d3:26:63:5b:f7:f1:6b:0f:c7:07:bc:35:db:4a:
                    9d:96:ba:6d:69:e1:67:d1:aa:fa:89:d9:04:1c:53:
                    43:9e:16:9b:d6:a4:76:07:62:67:d5:8c:ed:e4:54:
                    23:7e:a6:ba:6d:1f:95:f7:39:d0:d9:aa:f8:84:ad:
                    5a:1d:be:fd:bf:fa:e5:b7:c2:e2:ad:dc:64:d0:43:
                    75:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:28:E5:2E:CC:A0:25:72:7D:DB:7F:DC:C7:19:AF:0F:BE:09:CE:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf946e1e-e8c7-3839-bac7-666f6c1ff29a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.202.195.0/24
                IPv6:
                  2001:559:0:b6::/63

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:1d:68:89:7b:d4:ed:35:8c:fd:ff:6f:05:44:c8:60:16:87:
         2b:51:97:1c:f7:64:07:54:9a:96:aa:8d:23:b2:64:0b:ef:9e:
         ed:f8:bb:0d:db:e8:d1:f9:21:48:0d:b5:ea:5f:5a:49:6f:41:
         c3:9e:6d:d8:0a:28:d6:b6:07:c1:85:30:47:bb:7a:d8:b7:1f:
         8b:a2:66:ca:7f:17:bf:6e:aa:53:c8:31:64:ec:9a:c0:ab:ad:
         52:16:4a:7b:a8:7e:7b:cb:45:51:01:dd:04:0a:1e:7a:37:cf:
         32:a0:82:cb:bd:b7:85:ca:cb:f4:91:7b:5c:16:6e:02:42:ce:
         8f:ce:3d:2f:90:87:7a:6d:29:db:0d:3e:c4:97:35:95:2d:62:
         61:c8:eb:d6:dc:bd:1f:4e:b3:90:94:34:3c:37:f8:73:b8:02:
         21:18:63:a7:e4:76:6a:a1:dd:5c:a2:79:3e:dd:bd:e5:2a:11:
         ce:4c:c3:c9:96:c3:77:e1:68:7f:fa:38:99:2c:cf:4c:7e:42:
         49:60:bd:18:a7:fa:d1:48:a1:bd:b6:22:93:22:15:33:d5:7c:
         4b:0b:79:e8:eb:20:aa:6c:f0:76:f3:09:a1:c4:eb:93:55:af:
         27:44:fe:e2:a3:d3:b0:f9:dc:50:78:32:8a:1b:f0:4f:de:1f:
         62:35:18:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:36:24 2025 by rpki-client