Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3edf65fb-f19f-3bdf-acfb-20cef0bdd99e.roa
File:                     3edf65fb-f19f-3bdf-acfb-20cef0bdd99e.roa (raw, json)
Hash identifier:          zHCpI/mf659/UAJuKjeSuCZPwXPsOO/l7QqX1c7TyPE=
Subject key identifier:   40:25:D9:0B:3B:B1:0C:35:E4:50:88:1F:CD:F3:9F:34:22:0E:16:B8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFC331739717CBD8C0A7EE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3edf65fb-f19f-3bdf-acfb-20cef0bdd99e.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33287
IP address blocks:        50.73.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:33:17:39:71:7c:bd:8c:0a:7e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=58f6d21a-448a-4967-95c7-fd02aaa2d4ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:21:46:f8:db:60:2b:0b:ae:aa:b9:3b:11:bc:
                    f7:81:87:5b:11:7c:73:53:af:75:22:8b:96:2d:63:
                    15:f4:35:6a:b3:c9:80:cb:3c:fd:d3:ba:9d:40:64:
                    51:c0:8a:20:65:0f:b2:74:09:54:f8:b3:99:d4:6a:
                    a9:0d:32:5b:d1:41:e2:6e:54:cd:cd:f3:c9:17:51:
                    28:0d:9e:a9:58:d2:93:e4:dd:54:48:88:bb:43:ab:
                    de:4a:11:85:6f:81:70:4e:e8:4e:9b:ab:e3:e7:38:
                    be:a2:e0:9b:ac:bc:80:d7:28:e5:ce:e6:e3:3d:8a:
                    d8:1d:7a:36:d0:26:3a:40:4e:eb:01:a2:a6:e0:dd:
                    06:00:5e:d1:bf:e2:3a:f1:5b:ec:dc:da:4a:46:e4:
                    aa:04:bd:89:1b:d1:9c:cf:1f:5e:af:a3:95:dd:cb:
                    e1:14:08:af:d4:e5:28:e8:46:3a:bd:4f:29:d4:45:
                    fc:bc:f9:8f:24:fe:fe:77:83:b2:76:d8:9b:30:ad:
                    ce:e8:d4:9a:05:88:d8:86:ec:12:5a:35:e2:94:b9:
                    23:d5:70:cd:eb:cb:fa:1e:c5:4d:61:1c:6d:af:d8:
                    c9:70:56:20:01:92:c4:63:57:6c:c6:c4:34:28:73:
                    55:cd:99:c6:a1:48:b2:03:db:68:f7:3e:09:7f:d9:
                    93:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:25:D9:0B:3B:B1:0C:35:E4:50:88:1F:CD:F3:9F:34:22:0E:16:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3edf65fb-f19f-3bdf-acfb-20cef0bdd99e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.73.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:d3:82:ed:9e:dc:09:ac:38:d8:38:f1:2f:e8:49:84:28:98:
         5c:e5:27:03:19:2e:a5:dc:5d:8d:99:4c:65:45:42:65:5d:c1:
         c9:06:3a:69:2f:e9:df:f7:6f:ce:7b:2f:c5:58:de:e9:55:58:
         ab:b3:5b:8f:03:e1:a5:b1:df:01:0d:c0:bc:d1:ae:13:70:1f:
         b4:4f:ff:3b:37:1f:32:55:6f:53:20:0b:85:89:c0:1f:c6:c5:
         f2:0f:03:59:a3:40:4c:9e:0e:b3:ab:d4:f0:39:b8:cf:05:30:
         3e:b0:bf:59:ca:45:e3:ce:bb:e1:ba:80:00:45:e1:3a:b5:67:
         05:d1:b3:64:d6:2c:c1:d2:83:13:da:34:5d:73:99:72:4e:26:
         cd:61:ba:4f:4d:fe:93:28:1d:95:a7:0c:50:dc:3d:0b:9f:5c:
         fe:0c:a8:3a:04:69:70:e1:ca:0d:c7:81:f3:27:ea:3e:5e:81:
         e1:5a:ae:35:8a:3d:7c:67:12:a2:ae:de:9e:bd:c8:2d:d5:41:
         7e:35:ac:18:46:14:e8:af:ed:71:78:69:3c:38:33:8d:3f:b0:
         0f:2a:12:eb:05:42:3e:38:db:af:2f:e8:0e:1c:f6:c3:87:fb:
         70:be:75:66:7d:f2:2b:6a:5f:76:21:03:57:39:66:5f:7d:6c:
         21:fe:14:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 00:08:26 2025 by rpki-client