Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0e11dd15-4b74-4b7f-92f8-15cc426b84b9/8a1f1ba0-80d9-3fc0-af82-f8798ed0e04a.roa
File:                     8a1f1ba0-80d9-3fc0-af82-f8798ed0e04a.roa (raw, json)
Hash identifier:          pSPPug7GYY3XzSOpF8Gp1gmN+6+H80V4mKPyIWtaKNU=
Subject key identifier:   29:E8:3A:1B:BB:D4:47:3F:37:D3:20:10:35:6C:C0:46:57:48:2B:B9
Certificate issuer:       /CN=0e11dd15-4b74-4b7f-92f8-15cc426b84b9
Certificate serial:       010D0C9F4328584B9FC8132FF35960768150C600
Authority key identifier: 5B:64:81:C5:3B:05:91:DA:55:E6:27:ED:CF:87:DD:A2:81:2F:D0:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0e11dd15-4b74-4b7f-92f8-15cc426b84b9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0e11dd15-4b74-4b7f-92f8-15cc426b84b9/8a1f1ba0-80d9-3fc0-af82-f8798ed0e04a.roa
Signing time:             Fri 24 Oct 2025 04:04:21 +0000
ROA not before:           Fri 24 Oct 2025 04:04:21 +0000
ROA not after:            Thu 22 Jan 2026 05:04:21 +0000
asID:                     6939
IP address blocks:        50.115.16.0/21 maxlen: 24
                          50.115.24.0/22 maxlen: 24
                          2606:3680::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0e11dd15-4b74-4b7f-92f8-15cc426b84b9/0e11dd15-4b74-4b7f-92f8-15cc426b84b9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0e11dd15-4b74-4b7f-92f8-15cc426b84b9/0e11dd15-4b74-4b7f-92f8-15cc426b84b9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0e11dd15-4b74-4b7f-92f8-15cc426b84b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9f:c8:13:2f:f3:59:60:76:81:50:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e11dd15-4b74-4b7f-92f8-15cc426b84b9
        Validity
            Not Before: Oct 24 04:04:21 2025 GMT
            Not After : Jan 22 05:04:21 2026 GMT
        Subject: CN=af45ebdf-cd66-4066-8460-1ec120c78695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a8:f9:5b:26:80:08:3b:fd:58:52:5c:cc:42:
                    30:e8:d8:01:ac:45:fb:e9:70:26:28:83:51:be:67:
                    7d:3d:1e:20:74:fd:69:4d:3a:e7:4d:61:b2:69:98:
                    3d:c4:10:62:f9:00:0c:14:dd:80:a6:9b:17:79:32:
                    3d:80:94:3d:c6:01:8c:2c:22:49:12:60:b8:97:dc:
                    19:05:4f:84:a1:17:df:12:4e:b7:e7:dc:d3:df:e3:
                    d2:a9:c5:b4:73:2d:ab:3f:42:32:03:af:ec:f8:80:
                    55:fa:d4:d8:86:51:04:41:fd:da:c8:ef:13:ad:31:
                    d0:21:3c:f5:53:14:7d:55:bb:88:7d:da:fb:8c:b2:
                    aa:90:d7:88:be:5a:56:2c:70:1c:15:33:1b:d8:0f:
                    32:5b:8d:21:64:d4:ce:48:ed:28:3d:5e:3f:75:30:
                    e3:23:0e:0c:4c:74:65:17:ed:5e:26:14:a2:6b:e8:
                    32:71:a2:4c:39:48:ca:f1:7b:6a:6b:b9:34:97:e3:
                    aa:85:dd:0b:b6:61:50:f0:9b:43:22:ad:6c:7f:e7:
                    12:da:ee:74:dc:49:d3:cc:87:76:27:2b:ca:ce:33:
                    20:87:34:e5:cd:24:c3:dc:3f:85:e6:49:9c:59:42:
                    a7:6f:5d:18:a3:57:68:2c:47:5a:eb:ee:82:ea:59:
                    40:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E8:3A:1B:BB:D4:47:3F:37:D3:20:10:35:6C:C0:46:57:48:2B:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0e11dd15-4b74-4b7f-92f8-15cc426b84b9/8a1f1ba0-80d9-3fc0-af82-f8798ed0e04a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0e11dd15-4b74-4b7f-92f8-15cc426b84b9/0e11dd15-4b74-4b7f-92f8-15cc426b84b9.crl

            X509v3 Authority Key Identifier:
                keyid:5B:64:81:C5:3B:05:91:DA:55:E6:27:ED:CF:87:DD:A2:81:2F:D0:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0e11dd15-4b74-4b7f-92f8-15cc426b84b9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.115.16.0-50.115.27.255
                IPv6:
                  2606:3680::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:5b:33:99:41:3e:cf:4c:a4:8e:89:d2:ae:ab:ec:30:95:2e:
         e3:92:37:61:43:e8:94:79:ec:47:fc:fa:6f:e8:77:3e:a5:88:
         3c:ca:23:27:65:28:52:2b:a9:40:ab:1a:8b:51:82:bf:b3:53:
         7c:be:47:36:32:23:31:2a:48:79:71:95:7e:4c:12:fb:5b:97:
         38:c8:1b:67:4b:db:1a:d0:b5:7d:96:bf:1e:5e:c8:72:4e:e1:
         95:55:f9:a4:11:ac:62:1a:3a:a1:ce:1c:98:8f:cd:e7:a4:2a:
         6d:41:a3:29:e9:e4:34:ad:9a:d6:32:d6:89:5e:c1:91:ec:fc:
         c8:13:63:84:8f:a8:0f:d6:29:6f:2e:7d:26:88:21:37:79:75:
         5e:72:73:6d:59:5a:9f:dc:e0:51:c5:2a:84:35:b2:98:a6:16:
         ac:d8:5c:0c:3e:17:54:81:d7:c0:d2:c3:cf:89:c4:d5:77:a1:
         77:ac:ca:40:a8:e8:22:d4:38:9b:b5:36:8f:84:7b:e6:b9:da:
         03:27:51:be:1b:2d:84:22:fd:91:e7:c8:bf:1b:ef:cd:41:8b:
         f0:36:99:61:1a:60:e1:35:f4:10:9e:3c:ab:f3:92:7e:b2:a9:
         b1:87:01:07:8a:53:78:6a:e9:bd:cb:cb:c0:39:3c:57:07:4d:
         0e:60:dc:5e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Oct 28 00:10:59 2025 by rpki-client