Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e7a6b77a-f273-3d50-b2e3-9a011ba49b39.roa
File:                     e7a6b77a-f273-3d50-b2e3-9a011ba49b39.roa (raw, json)
Hash identifier:          /pRMVKca493eN2wHzZpDnserNdh1DOKafVHWxOLgc5I=
Subject key identifier:   C8:53:53:FF:96:4E:5E:A7:E9:4F:80:38:46:B7:7F:AF:47:D0:7E:5D
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584B6BC749495C72952A9D4112A0
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e7a6b77a-f273-3d50-b2e3-9a011ba49b39.roa
Signing time:             Sun 05 Oct 2025 13:00:40 +0000
ROA not before:           Sun 05 Oct 2025 13:00:40 +0000
ROA not after:            Sat 03 Jan 2026 14:00:40 +0000
asID:                     19871
IP address blocks:        50.6.128.0/17 maxlen: 24
                          69.49.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6b:c7:49:49:5c:72:95:2a:9d:41:12:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Oct  5 13:00:40 2025 GMT
            Not After : Jan  3 14:00:40 2026 GMT
        Subject: CN=fe330e27-aa02-40dd-9363-4a3b9581ca88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:25:33:9f:25:d4:56:fe:2b:53:37:d6:a4:02:
                    3a:70:1b:a6:89:75:fa:d8:a9:52:f6:9c:ea:01:44:
                    33:f1:cd:7a:a5:34:71:fd:2b:70:18:0a:f4:bf:66:
                    a3:2c:25:58:4a:0d:e2:b3:7e:08:36:1b:b7:5a:bb:
                    3b:a2:40:e0:49:40:ad:6b:76:eb:9f:45:98:e5:7f:
                    f6:7c:a2:a7:de:4f:5d:3c:b2:83:ec:30:f8:c9:ad:
                    e5:52:4f:c6:77:2a:ea:26:44:20:bb:62:e7:04:2c:
                    24:a6:8a:1b:71:df:99:8f:3d:af:ba:61:97:69:41:
                    f3:18:fe:72:8e:92:f7:88:60:84:49:31:5d:39:1f:
                    24:24:3e:ac:21:68:91:21:62:d9:4f:5f:7e:7a:53:
                    d7:ba:a8:1a:bf:c6:9c:bd:14:13:85:dd:66:52:40:
                    b7:77:30:87:61:92:3e:9e:0c:93:01:af:29:07:21:
                    d6:18:7d:f1:6d:10:bb:d3:b2:12:e8:50:d7:41:15:
                    ef:2a:a4:87:ce:ea:9d:81:92:3a:f4:8d:d8:36:ae:
                    05:bc:ea:b7:7b:ee:29:6f:a2:ac:b2:09:e8:61:e9:
                    28:2c:ff:3b:22:dd:66:05:7e:0c:bc:01:d3:bd:06:
                    2c:9c:29:47:b9:fd:cf:8b:3d:a0:f5:98:a0:91:19:
                    9d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:53:53:FF:96:4E:5E:A7:E9:4F:80:38:46:B7:7F:AF:47:D0:7E:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e7a6b77a-f273-3d50-b2e3-9a011ba49b39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.6.128.0/17
                  69.49.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:aa:ce:8f:28:a4:6c:fe:2b:2e:f8:b5:8e:bd:27:53:8b:81:
         cc:e3:1c:2a:3e:90:dd:77:1e:ba:40:9f:97:b1:07:bc:18:72:
         d8:87:70:77:17:2c:fc:31:11:f9:87:dd:db:e6:69:0e:e6:61:
         e1:26:3f:e1:43:a0:d2:f3:5f:3f:d3:93:ad:32:58:eb:48:35:
         f7:53:4b:80:d9:e5:b4:9f:c9:2a:10:dd:9a:f4:9f:ba:ed:23:
         fa:69:d1:46:db:cb:2a:57:38:dd:5d:99:5b:d3:21:78:0e:34:
         81:c6:15:29:8f:bf:c2:a0:b8:87:eb:78:24:aa:e6:07:d8:d2:
         a3:a0:c8:2e:3d:6c:4f:b6:d7:c5:16:e5:4c:4d:87:2e:96:39:
         a1:89:9b:8f:a7:99:ac:d6:87:00:28:5c:7d:3f:4e:2c:5e:22:
         ba:78:bc:b7:86:4a:f1:81:65:0e:5e:6e:db:27:e6:8a:ea:2b:
         ba:ad:96:fc:79:a0:da:be:13:dd:1c:87:a3:cb:04:52:b8:b5:
         5b:80:81:1c:38:e3:94:1d:fd:2d:1a:ce:ac:ed:86:85:65:69:
         3a:97:9c:e1:b9:2d:33:0e:d7:ed:b9:df:99:5c:69:a6:9a:71:
         86:7f:8f:eb:93:b2:05:91:1a:4f:e9:0b:7d:4e:c0:f7:91:04:
         04:cc:be:13
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEtrx0lJXHKVKp1BEqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTBmMzc3NWYtN2E2Yi00YjkyLWI1ZGYtODJkODE1NjJi
MDhlMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk
ZmUzMzBlMjctYWEwMi00MGRkLTkzNjMtNGEzYjk1ODFjYTg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iUznyXUVv4rUzfWpAI6cBumiXX62KlS9pzq
AUQz8c16pTRx/StwGAr0v2ajLCVYSg3is34INhu3Wrs7okDgSUCta3brn0WY5X/2
fKKn3k9dPLKD7DD4ya3lUk/GdyrqJkQgu2LnBCwkpoobcd+Zjz2vumGXaUHzGP5y
jpL3iGCESTFdOR8kJD6sIWiRIWLZT19+elPXuqgav8acvRQThd1mUkC3dzCHYZI+
ngyTAa8pByHWGH3xbRC707IS6FDXQRXvKqSHzuqdgZI69I3YNq4FvOq3e+4pb6Ks
sgnoYekoLP87It1mBX4MvAHTvQYsnClHuf3Piz2g9ZigkRmddwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFMhTU/+WTl6n6U+AOEa3f69H0H5dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMGYz
Nzc1Zi03YTZiLTRiOTItYjVkZi04MmQ4MTU2MmIwOGUvZTdhNmI3N2EtZjI3My0z
ZDUwLWIyZTMtOWEwMTFiYTQ5YjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTBmMzc3NWYtN2E2Yi00YjkyLWI1
ZGYtODJkODE1NjJiMDhlL2UwZjM3NzVmLTdhNmItNGI5Mi1iNWRmLTgyZDgxNTYy
YjA4ZS5jcmwwHwYDVR0jBBgwFoAUCUtXkuMVh55WqGUJuWfdMHF6F1kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMGYzNzc1Zi03YTZiLTRiOTItYjVkZi04MmQ4
MTU2MmIwOGUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQHMgaAAwQF
RTHgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAAmqzo8opGz+Ky74tY69J1OLgczjHCo+kN13HrpAn5exB7wY
ctiHcHcXLPwxEfmH3dvmaQ7mYeEmP+FDoNLzXz/Tk60yWOtINfdTS4DZ5bSfySoQ
3Zr0n7rtI/pp0UbbyypXON1dmVvTIXgONIHGFSmPv8KguIfreCSq5gfY0qOgyC49
bE+218UW5UxNhy6WOaGJm4+nmazWhwAoXH0/TixeIrp4vLeGSvGBZQ5ebtsn5orq
K7qtlvx5oNq+E90ch6PLBFK4tVuAgRw445Qd/S0azqzthoVlaTqXnOG5LTMO1+25
35lcaaaacYZ/j+uTsgWRGk/pC31OwPeRBATMvhM=
-----END CERTIFICATE-----
Generated at Tue Oct 14 03:13:35 2025 by rpki-client