Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/30f4d854-2ed4-4544-abe6-b70c9cfcd024/7cfafb56-db01-3c87-9756-8242bd965e41.roa
File:                     7cfafb56-db01-3c87-9756-8242bd965e41.roa (raw, json)
Hash identifier:          OpIu2EDYW6IWOnraja4iTYDAVfxf0M6Z8AnzZEeAXUo=
Subject key identifier:   D4:8A:EC:13:3D:79:1F:41:77:A4:3B:D6:27:85:EF:5B:8B:06:FF:C1
Certificate issuer:       /CN=30f4d854-2ed4-4544-abe6-b70c9cfcd024
Certificate serial:       010D0C9F4328584B05E1403A476DE6158C2F7A20
Authority key identifier: 1C:EF:21:33:6A:B2:31:DF:FD:FC:00:39:FA:6A:01:A9:26:35:58:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/30f4d854-2ed4-4544-abe6-b70c9cfcd024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/30f4d854-2ed4-4544-abe6-b70c9cfcd024/7cfafb56-db01-3c87-9756-8242bd965e41.roa
Signing time:             Sat 30 Aug 2025 01:00:34 +0000
ROA not before:           Sat 30 Aug 2025 01:00:34 +0000
ROA not after:            Fri 28 Nov 2025 02:00:34 +0000
asID:                     396982
IP address blocks:        50.115.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/30f4d854-2ed4-4544-abe6-b70c9cfcd024/30f4d854-2ed4-4544-abe6-b70c9cfcd024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/30f4d854-2ed4-4544-abe6-b70c9cfcd024/30f4d854-2ed4-4544-abe6-b70c9cfcd024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/30f4d854-2ed4-4544-abe6-b70c9cfcd024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:05:e1:40:3a:47:6d:e6:15:8c:2f:7a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30f4d854-2ed4-4544-abe6-b70c9cfcd024
        Validity
            Not Before: Aug 30 01:00:34 2025 GMT
            Not After : Nov 28 02:00:34 2025 GMT
        Subject: CN=f875120b-c9ad-4d4f-96ad-1ad47e0f2801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:48:21:58:49:ec:e5:f6:50:c3:9d:5f:b2:17:
                    99:e4:06:38:2b:38:20:c7:ff:94:c0:3c:20:e7:2d:
                    63:55:72:03:a7:98:e1:60:50:bd:f3:95:0d:f7:da:
                    61:ac:ec:26:63:0e:4e:e9:ba:db:09:1c:9f:ca:af:
                    af:b2:b4:71:74:14:c8:27:5b:26:19:7d:b9:ec:e7:
                    9e:33:31:dd:af:6e:1e:c5:d7:52:ae:24:d2:ba:34:
                    e4:e0:9b:48:e6:8c:8a:47:69:70:49:79:73:0d:a7:
                    e6:8c:fa:f2:79:05:eb:b0:8d:eb:3b:a1:72:bb:3a:
                    67:88:aa:01:76:26:00:48:93:a5:f0:21:41:b9:4a:
                    07:71:6c:5b:68:df:d3:47:f8:a4:3d:77:09:fb:2d:
                    72:eb:c6:26:a8:60:ae:29:c9:36:85:36:96:6c:e0:
                    1d:40:ab:82:77:67:be:7f:8c:21:87:91:71:17:c6:
                    07:1c:1a:b1:c8:89:c5:d5:52:ed:d7:94:2e:67:c7:
                    f8:b8:d2:62:c9:73:90:d7:51:82:0d:3e:f3:5c:55:
                    97:fd:42:56:04:32:ec:bc:78:9e:9b:c9:dd:d6:b0:
                    54:4c:3b:64:24:db:8a:f5:3b:55:1c:b0:fb:6c:eb:
                    96:ee:1b:34:47:49:5c:2f:48:ce:71:59:f5:15:8e:
                    8a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:8A:EC:13:3D:79:1F:41:77:A4:3B:D6:27:85:EF:5B:8B:06:FF:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/30f4d854-2ed4-4544-abe6-b70c9cfcd024/7cfafb56-db01-3c87-9756-8242bd965e41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/30f4d854-2ed4-4544-abe6-b70c9cfcd024/30f4d854-2ed4-4544-abe6-b70c9cfcd024.crl

            X509v3 Authority Key Identifier:
                keyid:1C:EF:21:33:6A:B2:31:DF:FD:FC:00:39:FA:6A:01:A9:26:35:58:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/30f4d854-2ed4-4544-abe6-b70c9cfcd024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.115.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:1a:a3:5b:46:b5:9b:b5:93:b7:b5:b7:e7:73:16:bc:a2:c1:
         c5:8e:d3:e9:dc:8c:f5:25:72:95:5b:32:e0:2f:58:82:f2:26:
         07:20:d9:fd:6b:4a:98:c4:8f:01:27:8c:03:0d:f7:87:a8:20:
         d9:f4:71:7c:3d:ce:f5:3b:03:7d:f5:67:5c:c3:61:e0:d2:89:
         74:1b:dc:8d:cd:8e:f6:77:0f:be:ac:32:ce:54:94:67:30:98:
         0b:36:c0:33:c3:3a:4f:95:31:b0:eb:5a:aa:b0:35:8a:8e:63:
         d7:67:c4:ab:35:3f:67:b1:4c:9e:e0:1e:5b:98:26:5b:bf:30:
         9c:42:36:9b:82:28:89:65:5d:27:de:66:3f:9a:4f:db:a0:08:
         36:08:23:16:f5:7b:35:cf:23:16:a0:56:76:8d:9a:ce:f3:04:
         35:7b:02:b9:1e:39:28:a1:9c:1d:43:3e:48:c1:f6:6b:68:74:
         a5:b0:43:62:09:2f:d1:ee:6e:87:f4:09:5c:40:14:13:1d:a0:
         52:bf:80:7d:57:20:c8:bc:6e:c8:25:9b:fc:4f:5a:36:4e:5d:
         30:f0:58:f4:a1:4a:e4:d1:66:fb:52:7d:05:69:bc:e9:e3:3a:
         d8:1b:39:fb:cb:68:34:1b:2a:4d:60:39:b4:2e:03:f9:bc:e1:
         d4:40:40:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:56:54 2025 by rpki-client