Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea796775-cbd3-360a-9295-81dc1517078c.roa
File:                     ea796775-cbd3-360a-9295-81dc1517078c.roa (raw, json)
Hash identifier:          2+MRpj+JFwThyL5nqNquzgWYyGveeDLXxHRjKAifNxA=
Subject key identifier:   85:4F:A3:56:2F:4E:71:88:7E:7F:E0:EA:0D:AE:44:20:A5:BE:85:AF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849EBEA52D8D641E0864135CA40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea796775-cbd3-360a-9295-81dc1517078c.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     33287
IP address blocks:        50.148.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:52:d8:d6:41:e0:86:41:35:ca:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=d4b491bd-7147-4716-be1d-8eb2ee7e5c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:bf:d0:f9:8c:b0:3c:43:41:f8:bd:ef:7f:d2:
                    53:50:5c:6e:bd:50:aa:28:a6:c5:f3:ab:32:d7:6d:
                    11:3b:e7:34:02:1e:eb:ef:72:4a:e8:df:17:e1:24:
                    39:7a:fe:d5:41:68:54:8d:62:85:97:ed:5e:b6:e4:
                    62:f1:3a:9a:45:be:4f:77:6d:dd:54:13:5e:dc:de:
                    ce:aa:a8:3b:44:3a:54:ed:22:49:d0:e5:21:9b:6a:
                    64:b2:d2:b8:30:7d:c7:a4:01:ae:49:0a:d4:6f:14:
                    a8:ad:67:a1:e1:6e:68:11:d6:d0:fd:a6:14:16:1f:
                    ff:d1:eb:1e:be:eb:4e:f9:a0:43:04:e5:9a:cd:ee:
                    e2:26:9e:c7:5c:e3:b1:3e:82:52:1a:05:c6:85:e5:
                    dc:93:72:c3:3e:fd:58:d7:ce:cf:ca:53:8a:1f:3c:
                    06:83:59:5f:d4:f6:09:92:40:88:80:9f:69:97:e2:
                    12:df:ff:64:fc:f7:10:33:fa:d7:f1:72:dd:11:12:
                    63:3b:49:fb:53:2a:5d:a0:2f:4d:f9:4c:86:64:81:
                    31:2d:e5:ed:44:3d:7d:c7:35:ee:07:3a:ee:f0:6e:
                    71:a4:45:b4:39:80:9e:3b:3d:2d:c6:ed:f3:cb:2d:
                    62:36:52:d9:ff:e3:43:e4:69:c3:3d:41:c0:5d:f3:
                    e3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:4F:A3:56:2F:4E:71:88:7E:7F:E0:EA:0D:AE:44:20:A5:BE:85:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea796775-cbd3-360a-9295-81dc1517078c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.148.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:30:d9:40:eb:a2:43:df:96:38:16:97:19:6a:94:14:7d:eb:
         76:16:16:24:01:01:bd:e9:cd:7e:bd:55:a6:a8:38:ad:d2:43:
         29:c1:48:4a:ef:5d:44:ac:87:70:4e:55:03:32:82:e8:fb:e0:
         76:85:7e:84:6f:89:22:de:62:5f:4c:be:af:2d:d3:1e:24:d0:
         ca:0c:d2:9e:e7:28:9f:6e:a1:e1:5d:ef:03:28:f5:d9:ce:31:
         0e:f7:b1:fc:3e:ea:f5:02:4e:0a:e3:f5:e4:6d:f1:25:06:a2:
         55:dc:f6:3d:1f:1c:bc:63:7c:87:35:04:bd:ee:39:65:6a:1e:
         86:dc:9f:c7:70:86:c2:68:e7:1f:68:a5:ba:93:de:4c:b2:70:
         bd:56:12:54:7f:c2:0e:bf:f1:f2:3e:59:ca:fc:b2:02:b8:40:
         01:66:1e:76:44:61:ed:e7:25:e0:33:7c:07:71:9d:ed:8a:b6:
         88:31:5c:dc:39:7e:51:e4:35:39:b5:98:32:d3:28:bb:9d:d5:
         c7:b9:66:2a:66:72:a3:05:4c:ca:70:c0:45:1a:14:e7:fa:0a:
         b3:18:b9:88:00:0c:70:9d:3d:76:5c:62:14:e0:e5:82:9c:f9:
         23:79:44:3f:0b:ac:e6:ad:d4:f0:33:88:b1:bd:d7:30:f3:29:
         34:8a:7d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:08:30 2025 by rpki-client