Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff6ad22d-6928-3c1e-b50c-ff92369d1818.roa
File:                     ff6ad22d-6928-3c1e-b50c-ff92369d1818.roa (raw, json)
Hash identifier:          1SwzPzdRMzRsIyVQtCtdit08NXvN/x2aXQ+Ltq8fnVg=
Subject key identifier:   69:30:53:53:56:81:13:AC:6B:CE:90:EF:EE:E1:0D:85:FC:9A:1F:BD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F4986726D0BD2D7D400A3B200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff6ad22d-6928-3c1e-b50c-ff92369d1818.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36040
IP address blocks:        50.200.27.0/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:72:6d:0b:d2:d7:d4:00:a3:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=21908b12-c932-455d-966c-9b81a6eceb20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:86:be:ab:6d:21:ef:13:e3:d7:8b:64:bd:6d:
                    c5:01:4a:59:8c:e1:cf:17:a0:5f:75:d2:0c:0e:21:
                    76:2b:fa:03:d8:2a:da:ef:50:a7:7f:e6:dc:84:50:
                    3e:e4:1e:fb:d0:24:04:35:bd:ad:71:f4:12:9b:59:
                    c6:06:88:1e:85:d4:df:51:60:83:90:84:c5:d6:af:
                    93:f9:10:b8:81:d6:cb:7a:34:36:21:26:75:58:91:
                    ca:e9:4a:75:21:56:3e:c3:5e:0c:19:1c:68:36:b1:
                    8e:4a:29:21:dd:0b:a9:53:b6:e2:e5:f0:76:72:23:
                    b1:81:6e:10:6e:fe:9b:84:84:6b:8e:0f:94:d7:84:
                    9f:02:07:64:e6:d5:b7:21:eb:f9:12:99:e6:9c:80:
                    f4:d2:72:23:c0:af:8c:67:0a:84:b7:6d:59:b4:77:
                    28:a3:a4:79:fb:6b:51:46:8a:ed:18:2d:07:18:5c:
                    81:b3:34:e0:5b:b1:79:cb:11:68:23:d2:e7:bd:e4:
                    2c:ed:ab:66:e8:fa:38:79:5b:2b:5b:b1:14:15:2c:
                    ff:a7:c1:14:74:98:78:a5:76:df:e7:92:6d:1d:05:
                    87:e3:cd:30:56:dd:b3:af:62:b1:d7:68:0a:cd:28:
                    17:1a:f0:c0:4d:b0:5e:ca:7e:64:11:7a:80:7a:04:
                    92:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:30:53:53:56:81:13:AC:6B:CE:90:EF:EE:E1:0D:85:FC:9A:1F:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff6ad22d-6928-3c1e-b50c-ff92369d1818.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.200.27.0/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:22:f3:dd:ac:ea:63:c0:ce:3f:dd:85:b8:52:11:e2:de:80:
         1c:6a:c9:53:b2:2a:3e:2d:62:c6:5e:17:57:a5:59:42:97:af:
         c3:45:b3:1f:db:4b:13:48:e1:94:6c:7c:33:a9:ef:96:c0:40:
         19:d8:98:72:25:95:81:a2:7c:b6:e6:1a:2d:98:7e:b0:e3:1d:
         8d:86:92:1c:08:d2:2a:5e:48:43:4d:db:86:8e:12:ec:f6:68:
         ee:3c:19:9c:7c:c4:08:a9:a3:96:96:7a:c1:54:93:f2:63:2a:
         df:1b:bd:2f:8d:8d:3d:b5:47:bc:5a:b9:4b:15:2c:6c:ce:8b:
         38:be:86:5a:ed:d1:13:7f:d4:a1:e6:d2:2e:b5:3e:0c:48:90:
         e6:ed:e0:5b:12:da:50:19:a3:f8:e2:d1:c1:f2:7e:c4:ee:10:
         e9:4f:fd:c6:20:13:c3:41:3f:3a:e7:b6:8a:0c:0c:6a:a7:d9:
         23:59:dd:f9:e2:b7:53:dc:29:ef:9f:47:82:ba:56:00:e7:d2:
         0c:b1:91:a2:8d:cd:63:32:9e:b1:54:a2:f1:aa:f3:55:f0:d7:
         84:49:9c:04:e1:8f:f0:88:8b:aa:56:32:d8:e4:34:4b:2d:f8:
         d3:7c:48:34:f7:b8:95:4d:72:cd:5d:8e:0a:0f:18:65:11:ad:
         0a:aa:c2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:39:54 2026 by rpki-client