Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f/08af1208-d139-31d1-b3ff-4fc409b8f6fe.roa
File:                     08af1208-d139-31d1-b3ff-4fc409b8f6fe.roa (raw, json)
Hash identifier:          K9fT2KdSvQIffgsaEIgqV8i1NFmglTyvMoHpyILZ5Bg=
Subject key identifier:   D4:86:FE:36:F5:90:D3:AA:5B:F9:67:C4:91:17:79:1B:EC:20:2A:91
Certificate issuer:       /CN=e82e3f50-c42b-4af6-9e20-1e91adc1402f
Certificate serial:       010D0C9F4328584A4110507730707C3AECF02380
Authority key identifier: 09:75:7D:13:70:06:AD:89:7C:73:85:AB:E5:08:33:9D:A8:1F:FF:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f/08af1208-d139-31d1-b3ff-4fc409b8f6fe.roa
Signing time:             Fri 20 Jun 2025 13:01:05 +0000
ROA not before:           Fri 20 Jun 2025 13:01:05 +0000
ROA not after:            Thu 18 Sep 2025 13:01:05 +0000
asID:                     14155
IP address blocks:        50.93.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f/e82e3f50-c42b-4af6-9e20-1e91adc1402f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f/e82e3f50-c42b-4af6-9e20-1e91adc1402f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:41:10:50:77:30:70:7c:3a:ec:f0:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e82e3f50-c42b-4af6-9e20-1e91adc1402f
        Validity
            Not Before: Jun 20 13:01:05 2025 GMT
            Not After : Sep 18 13:01:05 2025 GMT
        Subject: CN=226e9245-6096-4a8d-a3de-39279e845122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:98:12:7e:1e:2d:23:b5:b9:91:43:00:42:5e:
                    35:81:8e:fb:d1:7c:6a:3c:00:43:35:b7:41:cf:c4:
                    15:22:2b:8c:e8:be:64:61:af:c7:47:72:5b:b3:a0:
                    b3:15:2f:92:90:0f:95:ae:d4:b8:b3:86:00:f0:d1:
                    32:01:3e:44:fb:ef:be:10:74:73:a3:b3:4a:7f:11:
                    0e:a0:dc:b6:9b:35:a2:bc:18:46:92:97:90:20:73:
                    48:ab:bf:e9:1f:63:df:24:bd:44:6b:1a:07:4b:2b:
                    39:22:db:49:9b:d2:b8:ba:23:dd:0a:ca:ec:78:6e:
                    b4:f2:fe:e2:ee:a1:4c:5d:ae:90:f9:11:16:18:0e:
                    2b:c6:24:fa:ce:dc:0c:b2:a8:cc:fc:74:a2:c8:97:
                    c1:89:df:02:07:d7:5d:40:21:6e:2a:a3:a7:39:eb:
                    0d:f4:d2:c7:56:c3:76:b6:ea:d8:3d:d3:fe:6c:8a:
                    74:cd:46:60:86:22:a4:94:ae:e7:4c:84:2c:3b:c2:
                    44:59:96:3a:47:b8:ef:6a:60:00:d3:0b:24:3f:70:
                    35:5b:92:62:cb:0d:87:46:f5:55:58:5d:a9:ab:d6:
                    29:80:06:9b:24:72:2a:a5:9c:03:ca:61:f7:e0:c7:
                    60:f2:5c:98:66:5e:f8:c1:34:12:5f:2b:63:9d:fa:
                    bc:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:86:FE:36:F5:90:D3:AA:5B:F9:67:C4:91:17:79:1B:EC:20:2A:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f/08af1208-d139-31d1-b3ff-4fc409b8f6fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f/e82e3f50-c42b-4af6-9e20-1e91adc1402f.crl

            X509v3 Authority Key Identifier:
                keyid:09:75:7D:13:70:06:AD:89:7C:73:85:AB:E5:08:33:9D:A8:1F:FF:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.93.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:93:fc:e8:b2:2e:7d:69:42:a8:42:7e:92:71:6d:f3:f0:67:
         bb:7e:31:1e:aa:95:af:2e:17:25:17:12:89:3c:f6:67:45:44:
         a5:0a:8e:95:84:d8:e6:11:b1:a3:ef:b4:0b:f5:be:72:75:6d:
         db:3e:38:49:97:cc:75:39:cc:7e:82:0c:40:97:f3:9d:59:78:
         af:08:f8:f3:af:b9:34:02:06:8a:85:0e:47:d2:55:af:75:15:
         3d:e2:cb:4a:10:0b:34:73:5f:60:2a:c3:3c:9b:66:fb:ef:be:
         20:37:c8:4a:98:86:3d:fd:f7:85:a1:54:82:5a:89:5e:57:cf:
         53:9d:95:55:7b:07:3a:09:8c:b4:da:e5:de:43:4e:34:32:86:
         c8:4b:a7:09:8c:7c:18:e7:4c:48:62:cb:7e:0c:7e:12:5b:5d:
         b4:66:ce:15:d5:a6:ca:b2:d0:fb:7b:ff:b3:b0:5f:42:56:d3:
         56:db:77:95:d8:62:df:78:10:2c:ec:85:21:81:3e:89:b4:24:
         51:ed:b0:7d:14:02:b4:61:94:13:eb:b6:d9:2d:eb:8b:47:5f:
         e8:b7:d2:ad:8b:e3:6e:9f:ef:63:bd:4f:e2:a7:53:e9:62:74:
         8e:48:b8:30:e6:e2:7f:18:b5:65:46:48:7b:f9:af:cf:f6:de:
         b7:c2:db:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 05:17:44 2025 by rpki-client