Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee6a656-8b84-4850-8417-d53e22107f20/c48913d3-d604-38a9-b5ce-812827a00ed2.roa
File:                     c48913d3-d604-38a9-b5ce-812827a00ed2.roa (raw, json)
Hash identifier:          Qeh7kOB66vFYCet2XNJgQk7+p1VHsMf49AHqCFusi+M=
Subject key identifier:   93:E3:87:03:23:1B:DC:77:1B:44:42:04:75:5C:86:D1:99:6D:81:14
Certificate issuer:       /CN=4ee6a656-8b84-4850-8417-d53e22107f20
Certificate serial:       010D0C9F4328584E6CF8D8BEA7E1A354759BDA60
Authority key identifier: 99:42:C4:9F:48:55:B1:8C:62:93:0C:14:E0:D9:39:D4:39:86:CC:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee6a656-8b84-4850-8417-d53e22107f20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee6a656-8b84-4850-8417-d53e22107f20/c48913d3-d604-38a9-b5ce-812827a00ed2.roa
Signing time:             Wed 08 Jul 2026 01:37:13 +0000
ROA not before:           Wed 08 Jul 2026 01:37:13 +0000
ROA not after:            Tue 06 Oct 2026 01:37:13 +0000
asID:                     24459
IP address blocks:        74.50.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee6a656-8b84-4850-8417-d53e22107f20/4ee6a656-8b84-4850-8417-d53e22107f20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee6a656-8b84-4850-8417-d53e22107f20/4ee6a656-8b84-4850-8417-d53e22107f20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee6a656-8b84-4850-8417-d53e22107f20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6c:f8:d8:be:a7:e1:a3:54:75:9b:da:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ee6a656-8b84-4850-8417-d53e22107f20
        Validity
            Not Before: Jul  8 01:37:13 2026 GMT
            Not After : Oct  6 01:37:13 2026 GMT
        Subject: CN=e5864fb1-219e-473f-b170-5446dd6dcaee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2a:98:75:08:a1:51:d9:85:ae:7e:77:76:c4:
                    64:cf:9f:a1:a6:65:97:d3:96:76:52:7b:3d:80:b8:
                    5d:26:b6:39:5e:12:c1:9d:96:b5:66:5d:c7:78:42:
                    07:14:55:7e:a7:2e:fb:9e:3f:be:de:da:60:1b:e5:
                    8a:73:aa:73:0f:b0:e2:2e:53:88:ef:0c:ee:c4:e1:
                    76:da:77:60:a7:8c:ac:97:50:10:e6:66:76:05:00:
                    03:0a:57:e1:a9:41:18:5a:46:e4:d4:6b:7f:58:4e:
                    d6:8a:fe:6f:ce:52:90:bf:ab:b6:f8:e5:bc:23:f9:
                    d9:12:a4:7f:5e:19:28:5d:00:72:32:20:74:f8:ad:
                    f3:ed:49:ad:a6:dd:2c:77:55:ac:8a:b5:99:59:73:
                    0c:4d:38:28:9b:6a:8d:0a:28:13:72:11:a1:17:97:
                    d3:80:22:10:d9:4c:dd:5b:66:73:0c:29:6a:c0:ea:
                    71:78:c3:9c:7e:30:ca:95:53:5d:b1:8b:21:34:41:
                    29:b1:ad:1d:57:67:8e:82:08:1c:ad:33:f4:4c:2a:
                    8e:63:27:28:4d:a4:d7:77:5b:0e:a8:68:02:fa:28:
                    25:63:2d:36:a4:c3:7d:ae:e5:b4:79:e0:6d:4e:f5:
                    88:28:a6:ab:b2:5e:18:ca:eb:3c:f2:a4:fc:38:05:
                    b1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E3:87:03:23:1B:DC:77:1B:44:42:04:75:5C:86:D1:99:6D:81:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee6a656-8b84-4850-8417-d53e22107f20/c48913d3-d604-38a9-b5ce-812827a00ed2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee6a656-8b84-4850-8417-d53e22107f20/4ee6a656-8b84-4850-8417-d53e22107f20.crl

            X509v3 Authority Key Identifier:
                keyid:99:42:C4:9F:48:55:B1:8C:62:93:0C:14:E0:D9:39:D4:39:86:CC:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee6a656-8b84-4850-8417-d53e22107f20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:20:a9:ce:b6:57:81:00:6a:74:a8:60:91:ad:6e:9c:0b:16:
         56:7f:f6:4d:9a:da:6a:d8:99:58:87:b8:54:d1:65:29:cc:40:
         01:50:00:17:9a:40:ef:57:7a:15:0f:2f:b2:f3:c1:e1:35:4a:
         8c:57:cd:ba:05:82:c0:8e:92:1c:b6:dc:fe:49:34:49:89:93:
         20:27:bb:81:34:9d:03:11:3c:05:e3:13:61:90:c4:ad:f4:15:
         04:91:11:4e:59:cd:55:9a:dc:63:21:f0:3f:46:ac:9a:2b:e8:
         a9:74:78:7e:f8:cd:a3:1e:1b:10:75:6f:e1:9b:e3:e8:aa:d8:
         b0:c7:f4:67:8c:7b:71:56:11:13:fc:82:5c:94:c5:3a:ae:27:
         48:71:76:5c:2c:2d:f7:77:68:63:e6:97:d0:36:ba:c3:6f:88:
         b3:67:c0:2e:d9:d5:4e:27:70:5e:91:43:1e:c2:b5:d7:5c:3f:
         08:ec:44:5a:2e:fc:f2:11:ad:35:f1:ca:c9:a2:de:e8:03:ee:
         55:81:de:e5:cc:7a:27:6e:22:a7:b1:fe:a9:a0:44:f1:b6:47:
         83:a0:5c:39:09:d7:e2:c7:12:08:5e:38:8f:54:bd:f0:a7:76:
         c1:06:8a:00:16:00:47:bc:c7:6c:14:68:60:38:eb:91:ca:18:
         fe:8a:ff:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:02:10 2026 by rpki-client