Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ed0b0085-b9a5-398c-bf87-caadf4d27bbc.roa
File:                     ed0b0085-b9a5-398c-bf87-caadf4d27bbc.roa (raw, json)
Hash identifier:          0oOxnRLoY6fdxUGdDVXuZxJa9GYnZ1JQHPH765scMKQ=
Subject key identifier:   09:12:C5:28:8D:8C:F5:38:43:ED:E0:67:41:50:42:3B:CA:76:69:4C
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B3126FA3C3CDDF8EC69F3B480
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ed0b0085-b9a5-398c-bf87-caadf4d27bbc.roa
Signing time:             Sun 14 Sep 2025 13:00:42 +0000
ROA not before:           Sun 14 Sep 2025 13:00:42 +0000
ROA not after:            Sat 13 Dec 2025 14:00:42 +0000
asID:                     852
IP address blocks:        50.98.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:31:26:fa:3c:3c:dd:f8:ec:69:f3:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 14 13:00:42 2025 GMT
            Not After : Dec 13 14:00:42 2025 GMT
        Subject: CN=e3f8350f-decd-4e29-88a4-dc713a5d90ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f2:18:db:4a:47:8c:3a:e8:f6:23:2b:9c:22:
                    e6:c6:39:ac:21:ef:67:bc:06:25:02:d4:0a:93:ce:
                    49:8d:a9:06:ea:5f:ba:4b:cd:61:91:e9:2a:0c:73:
                    1a:d1:ab:08:22:61:9b:83:fb:22:72:19:e6:01:a6:
                    4b:b8:95:e3:9c:dd:15:45:00:29:25:6c:2a:08:63:
                    36:90:1f:18:eb:87:ef:d2:82:3e:b9:99:04:87:61:
                    48:c4:a1:fc:cb:f7:28:8d:ac:f0:e1:b4:f6:60:79:
                    6d:d3:bc:91:94:5f:e5:d4:5e:ca:20:2d:ab:a0:83:
                    d6:da:5a:c8:4d:f1:2d:17:f4:15:6a:f4:3c:5c:4e:
                    17:2e:86:47:37:57:53:df:3d:ef:67:a8:e0:f9:8c:
                    27:b1:5e:6f:fc:57:f6:be:62:44:25:70:b5:39:45:
                    0c:d5:94:6d:e5:b2:7c:2a:d5:51:79:ba:e1:58:d5:
                    49:05:32:14:9a:1b:17:1a:6a:c5:33:81:2f:d9:a3:
                    2c:a8:06:4c:09:23:1e:d7:21:42:3f:67:8c:09:b1:
                    ae:71:5f:44:aa:15:15:bb:75:ac:35:3b:74:71:7d:
                    00:eb:eb:73:0e:e6:ab:a3:98:e4:e4:bf:2b:16:db:
                    bf:7c:8b:1a:69:49:f2:45:34:ed:bb:96:63:44:f3:
                    d0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:12:C5:28:8D:8C:F5:38:43:ED:E0:67:41:50:42:3B:CA:76:69:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ed0b0085-b9a5-398c-bf87-caadf4d27bbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.98.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:e8:a2:2b:b8:1c:5d:a6:8a:f9:33:2d:3b:f4:59:2f:96:8c:
         30:2c:6c:06:ff:b0:76:bc:55:fd:9c:cd:a5:ab:d8:0c:df:70:
         22:49:67:55:de:f1:8d:86:e3:c7:4b:6f:0c:d0:03:c7:6e:ee:
         3d:f8:d1:5c:6e:8a:29:28:2a:11:97:7b:6c:57:38:df:c7:9e:
         f9:50:37:b0:87:05:dd:57:87:7f:7f:87:c9:0a:d6:78:16:40:
         c5:86:80:91:91:66:b4:4b:ea:32:65:cd:ed:f9:a7:a0:28:38:
         c6:f3:5d:29:1e:59:cb:39:b3:81:b3:b9:25:de:15:45:94:67:
         85:a3:41:4e:db:4e:0c:f9:96:62:b3:51:c7:86:e7:04:36:4e:
         d1:a1:bb:26:59:29:bd:65:b0:f2:04:49:93:2c:e5:b5:20:1a:
         a0:6e:79:e1:54:d9:01:32:69:94:ac:b6:bb:d8:71:e6:2d:ea:
         d6:04:51:70:2f:29:5b:17:1c:3f:6a:66:d1:cb:e9:3d:95:1b:
         1c:59:52:2b:16:49:6d:c1:c0:bd:8a:55:09:b5:9b:ea:f7:52:
         b3:56:08:54:a0:8d:58:40:91:ed:44:62:38:37:e6:df:6f:96:
         be:64:d9:41:d3:b3:57:e5:b8:bb:45:27:c8:07:29:e9:4a:97:
         9d:7d:ab:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:20:07 2025 by rpki-client