Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e4e507f-7c9b-3979-a74b-af9241029807.roa
File:                     9e4e507f-7c9b-3979-a74b-af9241029807.roa (raw, json)
Hash identifier:          9t7gYlAf+tRbG4JOvi4WET+QbKjcUOfuLv2Y9+LIopA=
Subject key identifier:   E8:1A:1A:55:55:7C:85:2A:86:82:A5:58:79:9A:DB:7C:D3:22:89:E4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB86ACECCC28848467DBC80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e4e507f-7c9b-3979-a74b-af9241029807.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33659
IP address blocks:        50.202.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b8:6a:ce:cc:c2:88:48:46:7d:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=3438e53f-997b-4d5e-944f-2d42ed4791ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cd:e2:9d:99:6b:ca:ab:69:62:91:d2:cc:22:
                    98:7b:c3:b2:8e:fc:3a:cd:d8:84:bc:1e:db:fc:38:
                    48:cd:61:d7:81:17:41:61:22:c9:63:55:0d:83:5b:
                    46:60:72:6b:7b:3e:4d:ec:ee:2e:df:db:58:00:cc:
                    3f:d4:7d:56:ec:54:c5:e5:26:ae:4a:8e:e6:92:13:
                    7a:c7:15:66:f9:7a:da:fc:23:07:c7:d2:f8:f8:21:
                    93:28:00:83:8b:f9:49:07:0a:3a:72:e6:95:ba:c7:
                    e6:e7:bc:b9:3f:12:22:cd:2b:88:8f:0c:a2:c2:3b:
                    73:73:2c:06:b1:98:39:62:2c:07:35:a4:7f:c0:e6:
                    e4:29:94:c9:e7:24:d7:c8:d2:e2:99:04:4f:d9:1d:
                    a3:77:d7:3b:54:c1:ca:12:d8:f3:cb:0d:90:17:0c:
                    6b:cc:f4:24:5e:48:12:9e:1e:ad:46:0c:7e:da:c3:
                    b7:03:27:33:4b:9a:60:ea:26:b4:0b:81:34:fe:ce:
                    ba:0d:02:c2:1f:28:ad:f0:20:d3:cb:8c:f7:a9:c8:
                    77:96:08:71:30:ee:09:1d:5d:a6:7d:84:e1:92:1c:
                    78:80:cb:00:f8:54:d2:ba:56:f1:f4:ad:00:cc:56:
                    de:5f:b1:53:1c:99:84:ee:e6:b6:5c:a2:6a:d8:ed:
                    99:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:1A:1A:55:55:7C:85:2A:86:82:A5:58:79:9A:DB:7C:D3:22:89:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e4e507f-7c9b-3979-a74b-af9241029807.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.202.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:c5:d5:1c:13:fa:ec:0e:8c:28:6d:b8:bd:05:dd:33:58:50:
         f7:53:4b:b1:54:27:d9:77:a5:ac:a9:0b:ea:e7:33:78:96:c2:
         09:ae:17:37:c9:ea:a9:22:6a:9c:fe:5e:0c:53:f2:0e:02:e7:
         27:19:d1:47:39:98:cc:cf:e3:e0:3d:af:41:fa:55:98:6d:c7:
         6a:2c:9b:50:44:8b:a7:c8:6e:87:d7:5c:aa:83:76:29:b3:5a:
         15:96:7f:26:30:8d:08:fe:1c:73:64:e6:40:4b:44:f4:86:99:
         77:5c:c5:82:5b:71:46:ed:19:69:cb:1d:a3:0a:17:97:fa:49:
         cc:89:24:2c:92:93:8a:da:99:a8:18:b4:a5:4d:4a:c8:a2:fb:
         98:b8:52:37:87:d6:ba:f7:12:dd:b8:65:7f:a8:39:5a:b3:e4:
         4b:a9:34:c1:1e:e4:da:84:a5:7c:fd:8e:f3:24:c4:a7:26:5e:
         61:c2:6a:62:f2:ee:fa:e7:51:a2:37:b7:ff:ee:e3:ac:3b:c5:
         ed:ff:0e:d1:be:a2:9c:44:7e:23:fd:63:59:ef:06:5b:3c:3a:
         db:b2:81:3f:03:c1:3d:74:30:38:df:aa:98:12:85:b4:c9:3b:
         5e:da:41:6a:76:27:08:70:98:17:22:bf:03:e3:c1:8b:c0:45:
         d2:4e:c5:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uGrOzMKISEZ9vIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk
MzQzOGU1M2YtOTk3Yi00ZDVlLTk0NGYtMmQ0MmVkNDc5MWFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoc3inZlryqtpYpHSzCKYe8Oyjvw6zdiEvB7b
/DhIzWHXgRdBYSLJY1UNg1tGYHJrez5N7O4u39tYAMw/1H1W7FTF5SauSo7mkhN6
xxVm+Xra/CMHx9L4+CGTKACDi/lJBwo6cuaVusfm57y5PxIizSuIjwyiwjtzcywG
sZg5YiwHNaR/wObkKZTJ5yTXyNLimQRP2R2jd9c7VMHKEtjzyw2QFwxrzPQkXkgS
nh6tRgx+2sO3AyczS5pg6ia0C4E0/s66DQLCHyit8CDTy4z3qch3lghxMO4JHV2m
fYThkhx4gMsA+FTSulbx9K0AzFbeX7FTHJmE7ua2XKJq2O2Z3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOgaGlVVfIUqhoKlWHma23zTIonkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWU0ZTUwN2YtN2M5Yi0z
OTc5LWE3NGItYWY5MjQxMDI5ODA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMsqOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI3F1RwT+uwOjChtuL0F3TNYUPdTS7FUJ9l3paypC+rnM3iWwgmuFzfJ
6qkiapz+XgxT8g4C5ycZ0Uc5mMzP4+A9r0H6VZhtx2osm1BEi6fIbofXXKqDdimz
WhWWfyYwjQj+HHNk5kBLRPSGmXdcxYJbcUbtGWnLHaMKF5f6ScyJJCySk4ramagY
tKVNSsii+5i4UjeH1rr3Et24ZX+oOVqz5EupNMEe5NqEpXz9jvMkxKcmXmHCamLy
7vrnUaI3t//u46w7xe3/DtG+opxEfiP9Y1nvBls8OtuygT8DwT10MDjfqpgShbTJ
O17aQWp2JwhwmBcivwPjwYvARdJOxQI=
-----END CERTIFICATE-----
Generated at Wed Oct 22 05:20:58 2025 by rpki-client