Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88552136-bf24-316b-9961-a7ae51297181.roa
File:                     88552136-bf24-316b-9961-a7ae51297181.roa (raw, json)
Hash identifier:          XRL3wY+dgXUbq//3KJwU+ZjTBnGNftJhmceK0pGF2lI=
Subject key identifier:   51:4A:8C:95:A9:2E:77:47:E6:CA:FA:4B:38:EA:30:0A:C8:1D:50:00
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFCF3580C6C26048938B1C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88552136-bf24-316b-9961-a7ae51297181.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     21508
IP address blocks:        50.235.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:f3:58:0c:6c:26:04:89:38:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=9784a3bd-9674-4986-94fc-1f915444cc1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:56:00:2e:c7:b3:5b:61:ba:d4:c5:0a:c3:21:
                    b1:f5:dd:03:59:7d:8e:2c:16:c0:1a:b1:28:7c:ee:
                    0a:51:fb:0d:48:cb:e5:15:4c:7a:5a:b2:3e:82:4f:
                    99:18:9e:4f:f9:10:a3:20:bc:5a:d3:91:b0:9a:00:
                    78:fa:32:f9:f3:b4:ba:9a:03:96:1d:b8:b1:70:07:
                    bc:bb:f7:4b:69:f0:54:7f:86:6c:ff:1a:3f:54:38:
                    b3:09:bf:87:8f:8a:45:d7:32:29:79:6e:66:0d:0e:
                    f7:96:a2:64:42:3f:94:b1:cc:39:e3:aa:d0:29:60:
                    cb:18:e4:65:4c:c7:10:b1:8e:bf:4b:d4:a1:5b:95:
                    28:de:d6:1a:0c:09:01:38:45:87:05:0a:ac:54:f4:
                    0a:7a:c7:3d:53:b0:aa:03:77:83:a5:a5:0e:3c:b3:
                    9d:d6:e9:30:b7:5a:3e:d6:33:57:44:1c:3c:6c:5b:
                    af:b1:b7:52:3d:27:d5:50:6d:0c:71:3c:c0:92:d8:
                    e6:c9:9f:e2:4d:f3:63:78:d7:51:7f:bf:67:15:c4:
                    18:34:82:ad:12:58:67:1d:03:0a:74:d9:cb:d6:a4:
                    14:0a:ba:47:0c:59:9c:15:39:89:06:73:e4:56:ed:
                    5f:95:06:ef:be:31:f4:98:74:e6:c1:c5:de:c2:d7:
                    0d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4A:8C:95:A9:2E:77:47:E6:CA:FA:4B:38:EA:30:0A:C8:1D:50:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88552136-bf24-316b-9961-a7ae51297181.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.235.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:8f:10:06:51:ec:b5:7c:fd:b0:d2:dd:e1:8c:98:18:ed:09:
         42:a5:dd:93:a1:a4:fc:89:85:74:45:b5:a1:e6:a1:8c:8e:ab:
         1b:25:9a:ea:28:bf:24:3a:06:ef:11:15:ad:48:b7:32:83:cf:
         81:b1:fd:8c:77:4b:2a:ac:54:35:ae:dc:aa:05:16:f3:f6:01:
         78:e5:63:88:b6:54:0a:dc:ad:87:99:9e:6f:83:b3:0a:3a:fc:
         e9:d5:4b:99:45:8a:32:12:20:78:98:bf:12:83:0c:e7:6a:88:
         1d:44:ea:59:84:44:3f:da:2a:05:15:1c:ea:fb:ce:9c:d2:8c:
         84:a8:02:ad:b2:00:bb:a2:b8:d3:0b:e1:d0:1e:60:82:f6:ea:
         0f:f5:8e:93:54:08:01:26:82:b1:e5:0d:cb:77:f3:12:e6:da:
         a3:90:b2:05:9c:05:9f:ff:95:7d:8d:e1:f5:dd:0e:90:ab:39:
         5c:89:44:c3:ec:26:69:52:c9:e5:33:c5:36:e7:77:eb:48:0c:
         63:db:aa:52:d7:c3:fc:ee:9f:1b:06:bc:2c:ec:38:97:d5:e4:
         b7:e5:6e:27:08:9a:15:0b:3b:ac:d0:ce:f7:67:cf:c2:d0:9a:
         7c:8a:ab:4e:03:63:67:e5:2c:6f:f4:e3:fc:65:04:45:14:4c:
         39:98:b8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 05:09:29 2025 by rpki-client