Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/3f299cab-9486-3373-857f-a888d71f4f3e.roa
File:                     3f299cab-9486-3373-857f-a888d71f4f3e.roa (raw, json)
Hash identifier:          Qb3K7Dn3M+PRyZRDwLGa6oap9rtmoyIzEadQuBsGRdQ=
Subject key identifier:   74:CF:60:8C:B4:28:70:04:33:27:F5:B5:7E:3D:2B:59:5D:15:5B:C4
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584B76F2329FE7F798443C310740
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/3f299cab-9486-3373-857f-a888d71f4f3e.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     26337
IP address blocks:        50.6.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:32:9f:e7:f7:98:44:3c:31:07:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=08959ec2-abe8-4bf6-a11b-1869188732ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e3:1e:10:8c:b7:5e:34:bb:39:ae:cf:78:af:
                    89:14:58:45:dc:0e:28:b3:8c:15:46:87:be:cf:1e:
                    72:92:bf:da:a4:e6:58:e3:ee:88:9a:70:8b:fd:b0:
                    7e:8c:c8:f8:c6:c5:65:22:a8:9d:89:20:56:70:c4:
                    59:79:f3:0c:f7:da:a3:96:d3:05:20:77:4c:ae:22:
                    80:ad:1d:73:5e:44:1e:41:13:01:a8:27:d2:77:79:
                    c5:08:86:1a:fe:41:e9:17:a2:3d:1e:2c:29:e6:df:
                    bd:70:fe:76:97:b9:d3:3e:ad:a4:36:29:d6:70:28:
                    1d:67:bb:25:1e:dc:4f:da:c9:4e:59:92:be:f7:b4:
                    64:c6:f7:58:fc:74:ce:57:b5:7b:f2:d7:79:2a:88:
                    46:57:3d:c1:c2:c2:97:ee:7e:3f:5a:37:45:de:48:
                    3d:3b:19:be:d3:c7:e1:24:96:30:9a:e0:32:45:ec:
                    93:88:54:47:a0:11:91:ec:11:1c:0b:f3:fc:24:5d:
                    25:63:e4:78:aa:17:5f:91:98:fd:23:a6:e2:87:40:
                    f7:25:e5:70:11:8c:9c:87:14:5e:a7:33:d7:af:82:
                    eb:6e:d0:d4:fa:a2:80:b4:4e:dd:1c:e7:4d:b9:9c:
                    c2:4d:46:c3:ce:9c:90:07:08:fe:d9:65:a9:82:21:
                    63:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CF:60:8C:B4:28:70:04:33:27:F5:B5:7E:3D:2B:59:5D:15:5B:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/3f299cab-9486-3373-857f-a888d71f4f3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.6.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:89:b5:9e:9d:2e:6d:57:64:96:23:03:14:9b:22:c2:90:5f:
         38:fa:8a:ef:d5:7e:ed:a5:de:5d:c6:ed:9d:fa:ee:37:c3:b3:
         7c:c0:95:6d:7c:24:8a:dc:48:2c:bd:32:01:04:a1:ac:40:51:
         0f:ba:96:23:e6:ce:c5:9e:06:7d:57:d9:dd:9c:28:22:9a:93:
         4e:55:77:e0:f2:f6:23:92:24:7f:99:c5:0e:14:c9:30:be:f2:
         31:e2:e2:ca:e3:fe:01:6e:01:6c:03:c4:d7:07:f7:00:15:af:
         ac:cb:03:c3:c5:bb:ae:d6:d2:dd:c1:1d:ca:e7:77:78:35:fd:
         0b:8c:87:4b:d7:77:57:f1:92:a6:78:d3:68:91:93:b2:a5:3b:
         37:28:7a:d7:6e:45:76:5c:8d:02:bf:7a:db:1a:c7:8c:f6:cb:
         92:3d:a4:ee:43:c5:6c:f7:27:02:b4:a3:93:96:88:ab:aa:62:
         00:00:ad:44:43:f7:0e:53:dc:c3:48:ac:5d:ce:15:68:2d:9c:
         4c:4b:8e:5f:f9:32:28:2f:3a:b3:a7:5e:4e:7f:63:bc:ea:98:
         51:d0:d8:7d:ba:94:7e:45:2f:67:49:d7:3e:ed:3c:ca:71:33:
         08:2c:cc:c6:f2:84:12:68:d6:9b:b0:96:64:57:f9:41:0b:50:
         0d:1d:a1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 14 03:14:20 2025 by rpki-client