Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee6a656-8b84-4850-8417-d53e22107f20/c48913d3-d604-38a9-b5ce-812827a00ed2.roa
File:                     c48913d3-d604-38a9-b5ce-812827a00ed2.roa (raw, json)
Hash identifier:          6qqCNrndXaDAwODTPaw716aYUKKWDc8oGSsUf2Eyfjs=
Subject key identifier:   FA:A7:56:AE:4A:53:28:E1:F9:E3:B2:B1:9E:4A:4F:30:77:55:31:78
Certificate issuer:       /CN=4ee6a656-8b84-4850-8417-d53e22107f20
Certificate serial:       010D0C9F4328584F103781C748D05C3B09393C80
Authority key identifier: 99:42:C4:9F:48:55:B1:8C:62:93:0C:14:E0:D9:39:D4:39:86:CC:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee6a656-8b84-4850-8417-d53e22107f20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee6a656-8b84-4850-8417-d53e22107f20/c48913d3-d604-38a9-b5ce-812827a00ed2.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     24459
IP address blocks:        74.50.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee6a656-8b84-4850-8417-d53e22107f20/4ee6a656-8b84-4850-8417-d53e22107f20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee6a656-8b84-4850-8417-d53e22107f20/4ee6a656-8b84-4850-8417-d53e22107f20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee6a656-8b84-4850-8417-d53e22107f20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:81:c7:48:d0:5c:3b:09:39:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ee6a656-8b84-4850-8417-d53e22107f20
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=f98a7b51-ad7e-43b8-8c24-871858bfc117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:af:b7:fc:0f:2e:9e:54:7b:45:b0:f7:9d:2c:
                    3d:74:3a:b1:cd:04:9e:63:5f:11:51:ef:17:66:02:
                    bf:78:2c:27:e5:3e:15:02:66:4a:17:ff:11:26:92:
                    de:32:b6:93:aa:23:ea:9f:1f:14:ea:20:f3:f3:7c:
                    ed:89:cf:29:f7:0c:e2:ac:1e:fe:b7:90:ef:62:3b:
                    20:16:d3:45:d4:17:ae:a1:68:df:7c:6e:a2:7c:23:
                    0e:e8:50:f0:e7:ab:4b:9e:ed:3c:c5:a6:ca:c7:8f:
                    d1:a0:99:b3:85:8a:52:d9:94:1f:fc:d2:5f:30:4b:
                    83:fe:0d:1f:7c:7c:85:8b:5f:a6:75:22:7f:ef:9d:
                    bd:ad:cf:5e:f2:18:14:8a:8d:ea:47:57:05:1c:74:
                    32:3a:a9:d7:8e:cf:fc:ac:36:4d:e1:f0:a9:3e:a5:
                    d5:90:40:3d:c3:12:a8:eb:16:b9:77:7e:03:c3:83:
                    b4:a8:ff:28:3f:eb:90:1a:3c:23:85:13:13:71:ba:
                    a7:76:52:f6:01:66:e6:18:ee:3a:4f:96:4f:d8:e6:
                    8f:fd:33:47:f7:68:cb:d6:c7:e8:b6:db:2e:6d:11:
                    1d:e8:4b:d0:70:58:ed:eb:5c:f9:bd:e7:35:5f:64:
                    c6:53:b4:f4:13:3c:14:8f:ea:e3:35:6c:30:4a:b3:
                    63:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A7:56:AE:4A:53:28:E1:F9:E3:B2:B1:9E:4A:4F:30:77:55:31:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee6a656-8b84-4850-8417-d53e22107f20/c48913d3-d604-38a9-b5ce-812827a00ed2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee6a656-8b84-4850-8417-d53e22107f20/4ee6a656-8b84-4850-8417-d53e22107f20.crl

            X509v3 Authority Key Identifier:
                keyid:99:42:C4:9F:48:55:B1:8C:62:93:0C:14:E0:D9:39:D4:39:86:CC:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee6a656-8b84-4850-8417-d53e22107f20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:db:20:f8:01:4a:e4:97:80:11:55:c5:42:9c:46:ce:c0:ee:
         4f:9d:82:dd:8e:ed:ab:6b:7b:4f:3e:cd:72:49:60:c2:48:96:
         55:4e:5a:1a:46:42:80:df:1e:47:74:00:68:c2:59:96:94:5c:
         29:da:61:f4:ae:43:1e:e7:6d:a1:33:c9:7d:c9:3d:04:c0:f3:
         e9:6b:73:8b:59:13:3e:6d:e9:ad:c2:9b:67:15:3b:88:f6:cb:
         07:ff:28:07:66:00:50:0e:70:21:5c:0b:ea:8f:10:4e:c9:b7:
         a6:fe:a1:f2:f3:75:ef:07:67:7d:35:e7:7c:b4:b3:db:6b:ec:
         e5:0d:19:da:f3:a4:1d:e5:c3:66:5f:77:21:27:30:8b:ed:de:
         78:97:02:26:af:d6:ab:1a:bd:bb:e3:c4:9c:e8:50:bf:9c:50:
         46:40:66:71:08:f3:7d:27:4e:60:bd:4d:60:53:d9:f4:ba:34:
         23:91:51:65:84:17:f8:86:76:f5:c2:dc:b6:98:eb:44:79:05:
         30:d8:cb:46:f1:c1:70:96:72:3e:83:f9:37:ca:11:98:cb:57:
         d1:dc:9b:04:46:1b:a1:48:c7:56:32:2c:36:cf:25:f8:3b:99:
         25:d1:94:68:25:6b:84:5a:2c:f6:59:c1:6b:20:0c:e2:35:ef:
         47:12:55:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:36:20 2026 by rpki-client