Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/73b0ab99-a238-3b3e-8d9a-ce9a1687bfd1.roa
File:                     73b0ab99-a238-3b3e-8d9a-ce9a1687bfd1.roa (raw, json)
Hash identifier:          gAaMekHOsweJrIBqPnBM1uiszSDkLELlW2CK00fL+qI=
Subject key identifier:   AC:E4:4F:EF:46:1C:01:BD:C2:7F:60:7D:99:B5:1C:0E:9B:F4:D1:73
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFC8F38F92A624E99504240
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/73b0ab99-a238-3b3e-8d9a-ce9a1687bfd1.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     394304
IP address blocks:        50.225.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:8f:38:f9:2a:62:4e:99:50:42:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=7375eceb-bf8f-41de-84da-c59f806bc08b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1f:8e:c0:34:37:e2:a4:f7:bd:71:f8:74:12:
                    45:19:50:f5:a1:8c:b9:68:fa:f9:eb:49:7a:43:e4:
                    d2:c2:0a:00:3c:64:91:79:d7:22:11:2b:ce:da:8e:
                    9d:fb:f2:fb:f3:55:a3:40:7c:aa:8d:5b:76:9c:80:
                    98:b9:7b:3d:b9:cb:5c:8f:61:d3:32:de:a4:72:26:
                    3a:a3:6f:01:8e:ea:e6:81:b8:dd:9c:dc:d9:31:a7:
                    1b:fe:84:84:6c:74:e3:a2:d9:bd:ee:ac:4d:37:99:
                    56:7b:0c:02:84:08:ef:c8:db:0c:e2:bf:fd:1b:c4:
                    1b:44:18:ea:de:3e:72:d0:d7:ae:1b:2e:f5:06:15:
                    03:bc:d2:99:e0:f1:f6:ee:49:3b:db:b8:f2:c9:09:
                    ea:7a:f6:b3:a4:0f:c1:69:c7:42:0c:7a:74:77:60:
                    9a:26:5c:2c:bd:34:e4:cb:72:b7:f8:f0:30:0e:d8:
                    6f:7a:22:71:d7:55:49:02:83:81:d7:c0:bc:bb:a7:
                    a3:80:ee:ad:d4:50:5a:31:f0:60:ad:46:6a:16:01:
                    eb:6a:fb:26:3d:18:7e:3e:6c:7a:8c:be:71:44:89:
                    57:7e:cc:7f:4a:aa:cf:29:ab:0b:bc:be:2c:4c:5d:
                    bf:c3:38:f6:65:28:e7:ff:41:ad:4f:28:15:9f:e5:
                    f8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E4:4F:EF:46:1C:01:BD:C2:7F:60:7D:99:B5:1C:0E:9B:F4:D1:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/73b0ab99-a238-3b3e-8d9a-ce9a1687bfd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.225.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:89:a2:cc:fc:87:82:70:8b:41:d3:b9:23:6d:e9:91:f0:63:
         dd:50:2d:30:5d:6c:55:b4:4a:c4:4b:b1:69:38:3a:7f:ac:67:
         ab:a3:7a:91:3c:d2:1d:8e:29:43:74:4e:e9:6e:a7:8b:60:31:
         bc:a1:fd:2d:24:ea:4f:3d:b9:05:78:8b:70:b9:19:7d:0d:d7:
         42:fb:04:37:22:c6:fb:0c:6a:d7:4d:81:71:c5:c5:25:75:a2:
         9c:98:af:80:b4:a0:8c:35:a3:89:a0:ff:87:ea:bd:e3:90:91:
         8c:0d:c2:8b:ab:5c:1f:70:26:a7:15:f2:39:9c:21:68:1a:8f:
         21:ba:48:00:5c:f4:63:91:49:5a:fd:e3:f8:1a:65:ff:33:5d:
         bc:e0:c9:05:9e:fb:42:e7:b9:53:ef:17:89:92:eb:29:6d:66:
         44:4e:91:d8:11:11:f7:14:91:4c:ea:28:10:dd:b6:69:7b:a4:
         f4:57:af:a6:21:a6:de:c4:f8:9f:65:a9:f2:a3:e1:ce:72:18:
         2b:9f:13:18:f8:8a:04:0a:cc:b0:d9:13:bb:81:0e:4f:10:9a:
         91:94:74:23:7c:65:0d:ea:40:9d:ee:ac:98:c8:6b:a8:55:27:
         0f:05:22:16:26:07:58:06:a3:0e:70:b6:05:4d:41:cf:c3:e2:
         cc:21:34:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:20:10 2025 by rpki-client