Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/1685097c-739f-30c4-ac24-25042f3a3fc2.roa
File:                     1685097c-739f-30c4-ac24-25042f3a3fc2.roa (raw, json)
Hash identifier:          eBGLpOiztaE/+21EXzvIzBMbFe5prXfzvDLeYH97Jjo=
Subject key identifier:   E3:5D:0F:AC:32:71:05:4C:29:CE:FE:F9:1F:A7:7B:55:94:8A:65:94
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F4328584B970CF13BC0C7E6DD15C1F480
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/1685097c-739f-30c4-ac24-25042f3a3fc2.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     400754
IP address blocks:        50.62.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:f1:3b:c0:c7:e6:dd:15:c1:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=b8ec666d-7a82-4068-913d-ea06df6e557a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7b:01:2c:84:b9:79:66:70:59:36:7a:d7:9a:
                    8c:8a:2e:75:f9:cc:d4:dd:59:01:31:98:c1:b7:b5:
                    48:77:70:ee:cc:46:9c:79:5a:9b:e7:48:10:2e:13:
                    34:3e:4b:2f:31:29:04:f7:80:06:35:6b:59:23:59:
                    a8:ab:5a:7b:19:77:bc:76:d9:da:15:72:ff:62:e1:
                    d4:23:3f:1e:28:c4:ac:f3:70:a7:60:80:12:b1:b9:
                    52:d2:77:bc:93:ff:e3:dd:de:46:0a:df:96:eb:1b:
                    82:df:01:ff:19:76:5a:0c:6b:b4:8f:76:63:36:20:
                    37:43:76:5e:af:3f:b8:72:6b:a2:a8:37:ae:b4:64:
                    96:7d:5b:89:e0:31:56:b8:5d:74:40:5c:cc:39:52:
                    eb:fe:b8:82:23:26:d5:b6:4f:94:6e:57:15:bb:28:
                    74:70:d3:48:e4:87:d9:4e:0e:72:0c:ef:96:9d:3a:
                    7d:66:d4:7f:d9:1f:73:c9:2f:71:fe:d2:29:21:cd:
                    09:6b:8d:05:b7:b2:af:e3:2d:c0:f3:68:3d:14:b3:
                    f7:9c:90:bd:f2:57:13:4d:a7:72:66:89:23:c9:91:
                    b9:2e:6c:d6:b7:20:eb:b9:7b:a8:49:6d:35:f7:19:
                    52:08:5b:41:e1:dc:3f:62:2e:cb:2a:4d:57:39:d5:
                    cc:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5D:0F:AC:32:71:05:4C:29:CE:FE:F9:1F:A7:7B:55:94:8A:65:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/1685097c-739f-30c4-ac24-25042f3a3fc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.62.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:99:7f:b9:5c:f4:78:db:a8:3b:5c:05:b3:dd:af:38:c9:07:
         c1:ee:cd:db:fd:86:04:2a:fa:66:d5:e5:b9:7c:e3:d2:02:f3:
         18:30:82:8d:92:01:d6:91:b4:71:86:ba:db:00:31:c2:0b:30:
         98:1c:0d:7d:95:2d:d7:07:bf:9b:76:e4:3d:4d:cf:31:7f:7a:
         8a:f7:49:80:28:35:f9:d4:a8:9c:c1:52:30:68:66:65:46:4d:
         67:fc:e1:12:30:26:5e:b5:11:7e:4b:22:53:5a:08:ca:04:99:
         5c:5f:f9:70:fe:40:96:68:be:be:80:8d:4f:f5:ee:ca:c3:f8:
         25:67:8e:42:ae:24:6b:ab:d3:3e:7d:fe:a3:d0:a5:fb:db:df:
         a9:bc:33:1a:72:28:23:09:2d:4e:0b:50:ea:fd:6a:1d:f3:50:
         f0:4c:20:7a:85:40:29:d9:38:be:cb:69:0b:6a:c7:5a:32:31:
         5d:c3:d6:49:28:f2:ad:22:f7:4b:89:e4:1b:ab:03:a0:05:8f:
         7e:98:21:45:14:5d:32:43:af:35:1d:7d:de:f0:e8:e5:2b:e5:
         ac:a7:43:0b:fd:e7:61:d3:d1:19:59:ec:03:fa:39:c3:e4:17:
         61:c7:00:8f:17:82:c7:3b:91:4c:8a:d7:d3:fd:ce:8a:e1:fd:
         08:d0:fe:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 08:54:36 2025 by rpki-client