Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f3591f9-6eaf-3fe0-b25a-e00d32a5e17b.roa
File:                     0f3591f9-6eaf-3fe0-b25a-e00d32a5e17b.roa (raw, json)
Hash identifier:          faQr9qQvlXXa3HZ917+zrDX1IkQ+Do7HuSD7P6ooS4Y=
Subject key identifier:   17:EC:ED:A8:F1:88:18:56:8C:28:03:C4:A7:D3:85:BC:BD:96:20:E7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFCE69BDCD3E552B6209700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f3591f9-6eaf-3fe0-b25a-e00d32a5e17b.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     7725
IP address blocks:        50.207.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:e6:9b:dc:d3:e5:52:b6:20:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=bad847ef-be79-473c-93dc-a00c25f65b3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:96:cd:48:4c:3c:16:2b:f4:50:17:c1:23:86:
                    3e:ba:36:3d:f3:2e:65:a1:57:3a:62:3d:97:2b:e3:
                    75:6c:f7:ab:2c:df:71:9a:e5:35:52:ab:ba:11:61:
                    3c:31:30:45:9a:7f:d4:b5:a2:d5:62:1a:32:14:b9:
                    bc:2e:45:d5:33:c4:90:34:6b:f2:54:16:19:11:78:
                    20:8a:62:f0:9b:d0:13:c3:53:22:4e:d3:b7:db:3e:
                    fa:7a:00:c4:7a:b1:ad:92:19:03:b3:5f:6a:46:e1:
                    64:3b:75:42:fe:58:2f:64:25:21:56:a8:ba:f9:f0:
                    aa:44:4a:1c:aa:0c:c8:42:04:87:ad:26:ab:00:59:
                    0a:63:1c:47:7b:c1:07:4a:5b:2a:63:74:09:e5:4b:
                    25:8b:54:93:22:fd:b3:ec:f5:1c:f1:ec:6f:00:4c:
                    cc:30:6e:0b:f2:4d:8b:ae:2e:05:9a:e4:21:6f:50:
                    77:b8:6c:5b:3b:da:69:c1:ef:d8:aa:0e:06:76:26:
                    0f:ab:05:5b:5b:08:39:78:28:b1:6b:11:80:3d:49:
                    a2:a7:b2:93:90:97:b2:0f:57:3d:0a:82:97:fb:ed:
                    fb:a0:cb:62:86:13:17:b7:b8:20:e4:9e:c6:a0:79:
                    73:c8:e1:ff:fe:5d:bd:97:5e:41:76:2d:8a:39:42:
                    39:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:EC:ED:A8:F1:88:18:56:8C:28:03:C4:A7:D3:85:BC:BD:96:20:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f3591f9-6eaf-3fe0-b25a-e00d32a5e17b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.207.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:03:4b:a7:fc:94:7a:0e:ff:8f:57:2f:14:88:f8:89:ce:3f:
         49:e6:90:c7:e7:3a:99:82:fe:b6:a3:9b:56:9b:7b:24:7e:cf:
         0d:e2:0c:2f:74:d8:6c:b9:e8:12:7b:c4:99:db:b0:a4:33:e3:
         a7:54:f9:b5:87:39:f0:14:7b:b1:c4:19:c2:71:05:b3:ec:fd:
         a3:d4:e7:79:a7:46:23:ee:34:a5:ec:32:39:6a:94:79:7c:32:
         ae:24:d9:fa:8e:f9:d3:08:0e:64:e3:bf:68:bf:89:18:5b:95:
         94:26:11:b0:1b:7a:15:df:9f:22:32:53:14:d4:e5:a6:6c:13:
         bd:cc:1c:5d:9b:82:f3:d8:c4:e6:dd:3f:40:d5:3f:92:e1:f3:
         39:2c:aa:c4:4f:9c:53:85:18:f9:99:42:d1:6c:17:df:b7:6a:
         bd:e1:cc:15:04:17:b2:91:17:c3:32:4b:04:37:e0:78:2d:29:
         09:41:e3:37:2a:6c:00:3a:64:b9:56:86:14:c0:76:ac:05:10:
         44:05:7a:06:77:2d:a5:07:bf:d5:dc:21:e3:36:a1:d3:52:2c:
         43:55:7b:ea:a7:1e:6d:df:cf:63:38:92:09:62:65:5a:07:6e:
         08:ff:d4:69:43:c0:c3:76:98:c0:2c:79:ac:28:74:ca:8c:1a:
         2c:be:a0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:14:35 2025 by rpki-client