Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35aea432-729f-32d4-82a4-89501f0b8cb1.roa
File:                     35aea432-729f-32d4-82a4-89501f0b8cb1.roa (raw, json)
Hash identifier:          8vj1OL0VAnwUdEGPW8wy5bi+OVbqkd2FtUh/bvggBvM=
Subject key identifier:   50:79:F3:46:42:B6:86:3C:E2:0E:59:63:92:82:88:6E:16:31:B4:F7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFB74B5A221B893C3D5E7C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35aea432-729f-32d4-82a4-89501f0b8cb1.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     17035
IP address blocks:        50.200.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:74:b5:a2:21:b8:93:c3:d5:e7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=82dcc107-07e2-4690-b46b-181c5e35c1ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:23:f8:e0:68:0b:ea:ca:82:b0:17:e7:92:1b:
                    b6:cf:38:94:46:93:f8:bf:62:99:a2:91:9c:73:eb:
                    fc:aa:11:6b:8c:90:6e:16:c4:01:19:c6:15:ef:5b:
                    77:d2:38:f9:5f:3c:ac:32:4a:a5:2d:39:b4:4b:49:
                    ae:49:87:82:89:0c:0a:61:8d:ad:4a:93:36:6c:10:
                    d5:1f:ee:aa:61:1d:4d:eb:e3:30:b6:2b:da:da:6a:
                    e5:3e:88:fc:95:b9:74:b5:4d:fb:d3:02:25:19:3f:
                    65:5e:a4:d2:9e:84:a4:b4:63:e1:2e:da:36:4e:43:
                    c1:e4:5f:10:3c:41:ec:56:ef:c1:36:42:2c:0a:e0:
                    ec:74:86:31:13:48:2f:bf:09:89:6d:7c:39:a8:c3:
                    fa:24:f9:57:5e:92:35:14:af:14:ff:79:dc:6d:f0:
                    59:0e:bb:22:d5:c2:63:40:ba:e0:98:07:d6:76:cf:
                    9b:c0:c0:b2:bd:13:3b:24:82:7a:fc:04:6e:8f:11:
                    93:aa:1a:8c:2e:51:f7:da:d2:b2:2c:14:42:1b:69:
                    f3:bc:97:44:bb:d5:1f:1e:c8:44:f8:e7:28:f3:80:
                    4a:e3:50:fe:ff:0e:d4:af:7f:3c:84:4b:31:36:ba:
                    63:2d:25:ce:a5:7e:d7:27:9c:1f:a4:cd:ec:e8:ae:
                    5d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:79:F3:46:42:B6:86:3C:E2:0E:59:63:92:82:88:6E:16:31:B4:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35aea432-729f-32d4-82a4-89501f0b8cb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.200.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:53:9e:02:c4:8c:17:fb:02:d8:1f:85:38:b2:77:99:5c:4d:
         5e:e7:8d:37:80:53:2d:7e:82:12:26:48:fa:fd:32:ba:da:a1:
         0b:15:bd:c3:fd:80:23:14:28:ba:9c:31:b9:7b:62:2e:00:ba:
         16:5c:bb:ff:90:44:b8:63:98:f9:a0:0b:06:c5:a7:46:16:dd:
         ec:18:54:61:7b:4f:3c:1e:e2:6f:df:1a:c7:82:1f:56:64:b8:
         ae:22:ef:fc:ea:1b:e3:9e:78:3a:4f:14:4c:92:00:c5:c6:18:
         65:84:e3:4f:be:b7:3c:8e:57:e1:ba:56:40:8c:04:53:3f:d6:
         71:23:d7:aa:af:5f:ee:96:53:4b:7c:e4:59:49:3b:25:64:8c:
         1e:74:94:a3:6d:3d:b9:78:4b:82:09:35:0f:1e:d3:0e:dd:d3:
         54:81:e8:e2:f8:3f:17:8d:1d:12:23:31:14:a2:e5:ef:e4:b8:
         cc:af:82:33:c8:34:5e:18:d9:de:17:1b:62:9e:16:90:0c:39:
         af:ba:7b:ca:b4:1d:3d:54:03:dd:88:90:40:4b:8a:ca:96:f9:
         08:ab:08:7a:33:c4:c0:bc:60:d3:4a:4c:90:6e:54:fc:b8:50:
         fb:03:94:79:d5:d5:ac:de:fa:aa:15:63:7b:4c:49:93:f8:b9:
         82:a3:64:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:31:11 2025 by rpki-client