Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/3b43a7c9-4641-3b4d-8e32-a294f5201f8f.roa
File:                     3b43a7c9-4641-3b4d-8e32-a294f5201f8f.roa (raw, json)
Hash identifier:          oetxyce21tA81vf0mNACYCQUp+ABUK+3VhGKJESP6bI=
Subject key identifier:   A7:57:3B:C1:79:E6:26:B2:36:5A:0A:78:81:0F:A3:34:8E:87:80:CE
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584AAF05913E43BAD481B48C0F00
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/3b43a7c9-4641-3b4d-8e32-a294f5201f8f.roa
Signing time:             Tue 29 Jul 2025 22:18:26 +0000
ROA not before:           Tue 29 Jul 2025 22:18:26 +0000
ROA not after:            Mon 27 Oct 2025 22:18:26 +0000
asID:                     31898
IP address blocks:        50.6.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:af:05:91:3e:43:ba:d4:81:b4:8c:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Jul 29 22:18:26 2025 GMT
            Not After : Oct 27 22:18:26 2025 GMT
        Subject: CN=02f78e09-55b9-4c26-8c53-36ad6a30e537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fb:12:de:40:7a:52:c4:8c:be:9e:31:3b:c7:
                    46:3e:fa:31:e4:06:1b:42:24:42:b2:ec:c5:2e:c9:
                    89:37:5d:c9:7a:6f:a8:72:0b:b9:06:ba:fd:4e:f9:
                    26:a3:7e:45:bc:cd:75:0c:dd:c3:33:d2:43:91:84:
                    6e:f6:58:d3:a1:b4:ff:de:62:57:6b:10:95:95:9d:
                    17:b9:6b:4b:8b:0f:7a:ce:28:5c:64:bb:67:6a:0f:
                    df:ae:20:c0:de:f0:c9:f6:1a:29:54:b9:06:37:23:
                    d6:4f:7c:fc:30:3a:6d:d4:ad:ff:db:48:ab:9b:2f:
                    00:96:de:f4:a1:95:80:14:33:65:ea:37:a6:22:b3:
                    8b:9d:cb:bd:41:93:8a:eb:50:81:fb:53:54:8c:5f:
                    18:f4:de:37:b3:f9:c3:ad:e0:06:fa:76:68:86:c8:
                    4d:89:23:1b:7b:c7:43:54:54:19:64:80:27:5b:ca:
                    30:70:4b:90:c1:19:08:54:42:0c:c2:8a:2c:0a:23:
                    07:11:88:81:7b:f4:e6:54:a0:64:3a:0b:44:c8:69:
                    6a:79:f0:40:07:31:04:41:e5:7a:4d:86:76:90:6f:
                    23:d0:2f:b8:ba:cb:3b:59:67:c4:45:50:eb:d8:e9:
                    25:f6:94:ee:9d:f9:ba:e3:27:cc:17:fb:d8:1e:ac:
                    e3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:57:3B:C1:79:E6:26:B2:36:5A:0A:78:81:0F:A3:34:8E:87:80:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/3b43a7c9-4641-3b4d-8e32-a294f5201f8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.6.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:37:a6:2a:d3:d6:18:8a:33:17:3c:e6:50:0d:ed:20:15:40:
         98:00:22:80:3a:63:34:ee:c1:28:2f:df:b3:dd:c3:b4:7d:ec:
         ad:f6:ce:17:4d:b7:a3:07:59:b8:06:e4:d6:c9:1a:b5:ad:2c:
         b9:0c:89:bb:d8:70:9c:91:65:4b:22:18:90:43:bb:d0:eb:c3:
         06:5c:86:40:ff:3a:73:cf:0c:de:12:5f:ba:22:c9:ef:33:00:
         16:f1:08:9c:f0:12:56:a0:7b:5f:c7:99:37:c7:4c:b0:b3:17:
         31:bc:2f:16:a5:7e:2d:bc:a1:aa:09:8e:84:cf:31:80:03:c9:
         4c:dc:7c:de:6a:8f:05:85:ef:8a:ff:13:23:05:57:87:02:c5:
         a3:23:c9:05:20:28:a9:6f:93:2f:31:c0:71:07:d9:2c:bd:1d:
         25:35:eb:20:83:61:d6:d6:26:d5:b9:f5:fa:aa:a1:f6:ef:53:
         c4:0b:81:27:6f:22:2e:eb:91:56:b7:ae:df:24:5e:23:22:b4:
         ff:57:cd:03:f0:84:47:ea:56:b6:45:50:90:f4:5a:4a:36:3c:
         0a:c2:84:70:b2:76:41:45:6a:11:8d:40:96:aa:54:87:cd:2f:
         cc:20:74:6a:56:7e:2f:e1:89:12:fa:f9:72:d8:0d:eb:ce:2a:
         f8:e9:47:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:31:26 2025 by rpki-client