Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f310998a-f792-3cac-9ae1-2fe6034cbecb.roa
File:                     f310998a-f792-3cac-9ae1-2fe6034cbecb.roa (raw, json)
Hash identifier:          +bpTNdiVyWRN4o0FrjHuEayoGIqMdO/HgUHpGwL7c9Q=
Subject key identifier:   14:DF:74:B5:E8:13:39:C9:7A:F9:7E:16:A3:FE:E4:D4:B7:34:6E:70
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB82A030AE3B2D77F5FF580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f310998a-f792-3cac-9ae1-2fe6034cbecb.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33287
IP address blocks:        50.218.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b8:2a:03:0a:e3:b2:d7:7f:5f:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=3d68852c-e39c-4f43-9ada-8a42758e5f50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f7:31:8e:18:80:f5:55:20:38:39:e8:e8:18:
                    ad:de:77:c2:ff:5f:62:aa:2e:29:52:7a:96:83:32:
                    15:ae:52:5b:67:5e:27:64:cd:58:f5:27:4d:b7:1c:
                    77:b3:82:2e:b8:b3:c3:ca:e0:97:40:a0:84:65:ef:
                    21:7d:bd:a3:7a:ca:55:2c:03:2a:c7:86:0f:38:aa:
                    e4:6c:53:f6:80:96:c9:77:8d:9a:ec:8d:b0:e5:d5:
                    df:51:d6:06:0a:a8:20:af:b8:2b:d4:46:1d:1c:c3:
                    29:23:ed:66:3d:e2:0c:5a:e7:b0:90:70:fe:5a:74:
                    1a:de:a4:24:2e:0b:26:08:13:23:fb:cf:b2:07:4f:
                    0b:30:d9:d5:7b:b4:e5:87:67:67:b2:0f:6d:85:43:
                    a0:6a:f0:35:28:ab:c6:76:86:8a:93:f7:7a:0c:e3:
                    3b:fb:d5:0b:48:a7:d0:fa:62:33:90:fb:a7:ca:6c:
                    50:db:12:67:28:62:f8:dc:24:c8:8d:2a:c4:c7:3e:
                    36:50:d7:d0:b1:a4:2f:67:ba:ce:ac:9f:90:21:fc:
                    9a:03:63:23:0c:11:d8:e9:4d:d9:4f:c8:47:10:17:
                    f9:fa:bf:1a:42:53:86:d8:19:52:c8:ce:d8:d6:bb:
                    cf:45:77:1c:17:4d:b9:88:20:49:38:17:c9:6a:f8:
                    55:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:DF:74:B5:E8:13:39:C9:7A:F9:7E:16:A3:FE:E4:D4:B7:34:6E:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f310998a-f792-3cac-9ae1-2fe6034cbecb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.218.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:99:7b:e2:7c:e8:dd:45:4a:7e:af:db:2b:08:69:b1:54:54:
         14:ae:3c:53:56:1b:9e:bf:a4:61:3e:bb:27:9c:e8:50:72:1e:
         59:91:d8:3e:66:39:8a:52:00:20:0d:e8:51:24:13:81:c1:a5:
         54:85:31:13:9d:bd:92:b6:dc:84:fd:22:1e:5d:15:8f:fe:a5:
         87:fa:db:2a:76:c9:ec:30:82:82:9c:8d:31:40:35:75:b2:20:
         60:2d:49:1c:3a:8a:8a:4a:9d:ae:45:33:8c:09:94:05:d2:a3:
         bf:12:40:5e:97:4a:f2:6a:40:d7:32:a1:62:9f:6b:6f:15:7e:
         bf:77:51:84:ca:70:a8:01:7c:73:f2:52:59:b1:b9:67:eb:86:
         76:5d:06:9d:6d:24:b9:3c:c2:22:dc:1f:6f:f2:30:a2:37:2d:
         04:c3:62:25:f1:40:ef:b0:ce:56:e5:ee:2f:58:f2:25:01:3c:
         f8:0e:71:a6:9b:b2:11:54:b6:10:93:5f:6e:b6:17:80:46:40:
         1c:75:9d:91:98:f9:0a:90:d7:83:b2:a9:fc:c3:fe:ec:30:c4:
         57:e5:73:9a:c3:1d:89:49:39:8e:23:d8:62:72:2b:73:24:fe:
         81:4d:66:44:f0:ca:0e:3a:be:68:83:38:48:51:2d:2a:9d:2d:
         f1:67:88:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:33:01 2025 by rpki-client