Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfa9d6aa-6cb8-3846-9b29-34786f5cce78.roa
File:                     dfa9d6aa-6cb8-3846-9b29-34786f5cce78.roa (raw, json)
Hash identifier:          n40g+ufyfjD6AUaxwhgEhmVMiZTzk1ODF5aYLX/T0ck=
Subject key identifier:   F2:E9:66:5D:4C:48:34:8B:65:62:BA:8A:FF:3A:F9:6D:00:38:2C:48
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE86C0D40F70BB892C34DD00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfa9d6aa-6cb8-3846-9b29-34786f5cce78.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     33659
IP address blocks:        50.78.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:86:c0:d4:0f:70:bb:89:2c:34:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=3ea1069b-9320-4a32-b18c-b76e3b8de1ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4d:a6:c8:4c:d9:99:98:f8:48:72:7c:2d:c8:
                    64:16:b4:94:16:3d:91:72:fc:21:8f:87:cd:ee:ba:
                    ed:47:ec:19:5b:a7:30:a7:27:3c:da:66:f2:16:a9:
                    fb:aa:ff:fa:40:22:17:34:c7:84:6c:4f:8f:8c:9b:
                    68:d8:18:86:5f:d4:06:d3:45:49:22:59:b2:b9:bc:
                    9f:e1:9a:29:e0:2a:c0:b0:b1:13:19:62:26:39:50:
                    e9:83:54:f4:70:13:b4:77:3d:36:02:92:c5:61:f7:
                    7a:b5:0e:fe:49:c7:0a:b0:40:ca:43:63:6f:cf:cb:
                    0a:83:46:cb:70:72:13:e1:b2:97:44:e9:38:07:44:
                    f9:04:a6:b1:f2:25:01:7a:ee:a2:2e:97:5d:61:76:
                    d0:44:d7:69:6c:a1:a5:4c:ed:b6:47:56:12:f8:aa:
                    21:67:a2:64:47:85:fc:3c:c5:81:65:fc:78:84:40:
                    55:06:ff:70:f1:38:e2:36:fd:ea:b8:03:8a:54:3c:
                    79:1b:a8:79:ef:99:81:a5:5b:84:e8:51:c5:ae:47:
                    85:72:35:89:54:6f:e7:52:33:fd:89:17:43:13:5f:
                    1a:dc:69:c1:21:48:f9:87:e3:4b:dd:00:24:ee:72:
                    2c:7a:c5:08:1c:5e:aa:8b:48:93:be:3a:64:17:92:
                    49:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E9:66:5D:4C:48:34:8B:65:62:BA:8A:FF:3A:F9:6D:00:38:2C:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfa9d6aa-6cb8-3846-9b29-34786f5cce78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.78.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:7f:e5:42:3f:36:0e:58:ba:bc:61:87:0c:95:1d:36:eb:ea:
         bc:ac:c1:29:0c:e7:80:3d:23:08:fd:79:70:36:47:6a:c4:67:
         05:37:c6:6e:70:38:77:ae:59:ed:97:65:51:c2:5f:ee:9a:de:
         fc:9b:97:17:2a:6e:d4:6c:ba:02:b5:33:59:eb:10:c5:8a:b9:
         2f:21:30:5f:65:c0:3b:47:45:83:b9:d9:68:df:e6:8d:51:d9:
         19:de:57:a3:d2:34:13:ba:e6:4a:8e:e4:69:c5:31:6f:eb:a8:
         1f:f6:17:94:42:fe:15:37:f1:71:db:2f:93:ee:64:97:83:ea:
         40:4f:61:03:2e:7f:2e:bd:b7:30:4a:ea:68:d6:2a:03:40:7e:
         14:a8:c5:15:34:f4:10:12:50:f3:34:3d:75:4a:7e:cf:9f:30:
         cc:45:fa:47:2e:41:44:93:04:07:ab:b6:a3:57:71:e5:da:0d:
         a5:d6:f7:77:c5:dd:61:a8:1a:35:25:7b:8d:3d:75:08:bd:72:
         60:09:01:b8:e4:9a:13:c2:27:ac:4f:94:d9:66:e6:c0:c8:01:
         b9:df:2f:39:44:b3:af:e8:af:f8:da:a6:5c:85:75:60:d4:43:
         d9:eb:a1:e6:f8:45:e0:69:e5:19:13:c0:08:8a:9f:2e:6b:fd:
         6c:b9:0f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 11:11:10 2026 by rpki-client