Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aade62ad-e22f-3ac3-a77e-385f8bda2606.roa
File:                     aade62ad-e22f-3ac3-a77e-385f8bda2606.roa (raw, json)
Hash identifier:          bMxWcRifCkMVAjz/abOkYC6OZmVMXVVG7Np8503f788=
Subject key identifier:   A6:65:DF:07:6E:73:35:4D:41:1D:0B:FC:F6:27:DA:93:E5:4C:7A:97
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFD02F46ED798440A10FB00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aade62ad-e22f-3ac3-a77e-385f8bda2606.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33490
IP address blocks:        50.173.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:02:f4:6e:d7:98:44:0a:10:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=55da757c-f671-4c59-b70d-13b60b98c142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:27:d4:eb:d4:47:e4:50:b8:bf:37:d3:5e:76:
                    39:a4:5e:81:74:71:77:85:57:a2:dd:dc:a1:4d:fa:
                    58:8f:39:56:51:73:1e:40:42:e3:19:82:24:73:f0:
                    c6:97:45:4e:61:ec:d3:8f:85:03:94:62:9d:b8:1f:
                    00:e7:93:3f:13:3a:40:db:e5:d7:f2:c6:a5:d5:91:
                    86:bf:88:7f:08:4b:41:4e:89:c2:9f:0b:bf:af:f7:
                    8a:78:8a:a6:2c:fa:e6:6e:cf:47:ba:20:25:92:8f:
                    a4:b7:53:13:6d:0b:71:43:8b:92:a5:90:1f:36:de:
                    e5:6a:0c:76:a9:ef:7d:10:c9:9b:97:3d:c0:a7:3c:
                    c7:c7:84:b0:b8:da:35:57:d7:de:f4:6a:92:db:59:
                    3d:72:e4:02:81:90:14:de:de:c3:f0:f3:30:33:48:
                    82:ad:7a:70:d7:62:e5:77:d7:06:55:91:dc:bd:9f:
                    cc:1a:92:00:17:ce:e4:c2:f3:78:ae:3a:21:d9:49:
                    7c:0d:bd:6e:f6:d5:f0:86:f7:43:a1:1b:91:ea:4b:
                    f2:e4:8b:af:00:0c:94:f9:6f:11:db:df:c9:b6:45:
                    14:e4:25:a4:39:36:d0:7d:0b:d8:36:1b:6b:75:2c:
                    b0:2f:84:ef:ca:58:50:20:c7:33:90:4c:50:f7:ee:
                    8d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:65:DF:07:6E:73:35:4D:41:1D:0B:FC:F6:27:DA:93:E5:4C:7A:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aade62ad-e22f-3ac3-a77e-385f8bda2606.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.173.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:f1:9e:da:8a:28:f1:40:f8:6a:58:ef:71:52:03:09:63:7a:
         20:4d:66:a2:a0:37:58:b9:6f:c0:3d:36:18:83:5b:9f:d0:fd:
         5e:01:48:8b:c2:58:35:86:9f:24:9f:08:c6:1a:d4:1b:e0:15:
         1b:a1:94:cf:d1:9d:3f:45:08:1c:6b:d1:2f:d7:db:14:59:f4:
         12:5e:4b:3d:b0:b4:bc:8a:b2:1c:f3:76:ac:de:82:c6:5f:82:
         6e:ba:e7:87:13:98:0f:87:3c:3d:e5:75:eb:d1:55:bf:dc:56:
         05:25:31:8b:b1:cb:bb:0d:b7:85:c9:fa:18:a1:8f:d6:8d:b4:
         43:35:1a:a8:dc:ca:b6:b1:d1:2b:f4:84:11:95:52:c9:b7:e1:
         8d:86:5a:ae:fc:e5:eb:13:69:79:23:3f:de:54:10:ad:12:5c:
         81:17:b6:e7:97:cd:a6:86:31:ca:59:de:5f:0b:e6:7f:ac:ce:
         1a:d4:44:bd:2d:de:f3:42:71:42:fa:21:7a:ef:95:64:f5:e7:
         c1:65:a2:a3:66:cf:74:08:7a:8d:77:b2:35:48:d1:9a:a4:a1:
         c4:07:d0:ef:38:42:c6:5d:a6:1a:89:25:52:36:1d:48:d2:b4:
         eb:f7:86:8c:c9:ab:a9:7c:d4:0f:e2:a5:1d:45:57:10:49:9b:
         ca:fd:d1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:19:24 2025 by rpki-client