Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/daf63752-9808-3b20-971a-bbaa8a332c41.roa
File:                     daf63752-9808-3b20-971a-bbaa8a332c41.roa (raw, json)
Hash identifier:          zixMztMM0viJ5ZuzD8+X7brsWtc5E8ik4ZDK8Vg3EUw=
Subject key identifier:   B8:C8:07:22:2A:16:E3:35:0F:0F:83:8A:36:03:06:1F:F3:43:7D:D2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D9E5011854CE341C3E0CFBC00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/daf63752-9808-3b20-971a-bbaa8a332c41.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     63402
IP address blocks:        50.149.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:50:11:85:4c:e3:41:c3:e0:cf:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=f7d3e738-b91b-415b-b732-92cbe90415de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1b:80:98:a9:8a:9f:d6:41:93:4b:05:fc:5d:
                    12:a1:9c:e2:35:83:06:9a:c6:07:41:15:b2:bd:e7:
                    2c:43:ef:e6:2d:d9:20:a9:6e:5d:76:dd:23:f5:ee:
                    4e:48:f9:06:ca:1f:e4:6b:3b:d3:d2:9a:d7:83:46:
                    23:7b:f5:0e:26:f8:63:f4:4c:0f:b2:df:d6:2c:a1:
                    ef:77:74:70:4a:c1:b5:32:2a:e7:7c:4a:ae:c0:4f:
                    e8:74:1b:28:de:96:6d:1a:f5:71:a7:36:c0:5c:8b:
                    23:92:0c:1a:19:62:c1:1d:e9:51:5b:5c:13:af:8f:
                    ef:a3:b5:6a:17:71:12:9e:d6:0b:10:e2:6e:6b:11:
                    6e:52:1b:02:d3:0b:58:25:a6:b5:9e:88:23:b7:37:
                    79:d0:a5:17:14:62:da:c7:7c:98:6d:52:38:22:b6:
                    ec:a2:3a:9a:b4:04:c1:10:7a:97:25:88:7b:bb:76:
                    ad:2c:e9:c8:28:aa:23:c2:fc:ab:90:b8:8b:73:8f:
                    2a:82:b2:32:12:5c:b7:e2:88:dc:da:8b:ac:2f:50:
                    7f:32:81:ba:a3:18:97:eb:82:61:98:49:45:dd:07:
                    a8:32:8b:35:d4:d7:99:c6:a6:fe:28:13:fe:ba:c1:
                    00:27:61:c7:3b:36:17:23:6a:c8:aa:77:3d:5d:63:
                    47:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:C8:07:22:2A:16:E3:35:0F:0F:83:8A:36:03:06:1F:F3:43:7D:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/daf63752-9808-3b20-971a-bbaa8a332c41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.149.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:fa:96:09:cd:8c:7a:41:be:b6:56:f7:17:bd:fc:55:28:be:
         e7:bb:75:a5:25:40:1a:6d:60:b7:ec:a2:aa:5b:35:ca:bf:74:
         76:61:1b:bf:b7:92:58:51:b4:1e:7c:9b:02:cc:89:a6:f6:7a:
         3c:32:9a:88:0a:4a:80:a3:04:5f:01:9d:fb:ac:2c:45:a3:ec:
         a1:10:91:b5:af:00:c3:e4:ee:d1:59:1b:ab:33:4e:6e:53:a4:
         bc:84:3e:25:9f:b9:b4:d9:e9:94:c4:e3:07:18:78:49:79:55:
         6a:0d:cb:bd:bf:49:55:b1:5f:98:af:1d:73:39:ed:21:95:2b:
         47:13:54:d2:59:f6:10:4f:dc:3a:30:fe:e5:7d:36:44:9d:70:
         76:64:82:99:b5:61:cf:88:44:15:bc:87:40:5e:ac:53:aa:e3:
         c1:05:df:5f:32:6b:5f:04:81:2a:a4:7e:69:e6:9b:aa:72:6e:
         73:3f:ae:12:88:ab:01:cb:aa:d3:e5:06:a2:6f:4c:78:90:95:
         e9:e0:45:c5:72:9d:29:33:3c:3c:5b:78:1c:4b:e1:02:f0:9f:
         f3:a8:8a:85:33:43:07:85:ac:4c:a6:54:fd:fe:93:4a:f3:b4:
         94:d3:f1:0b:e2:46:80:99:db:2f:1b:31:86:1d:92:5f:26:c9:
         5f:96:03:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:20:11 2026 by rpki-client