Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06d209ca-689c-358f-8fa6-f79936125b6c.roa
File:                     06d209ca-689c-358f-8fa6-f79936125b6c.roa (raw, json)
Hash identifier:          K6fZW49Ixz+Md6THBzYQCSkmQSncv5lZ7klbnqcLTEc=
Subject key identifier:   4F:20:71:DF:38:25:53:30:55:EA:45:26:B3:CC:25:66:23:CC:FD:21
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE86DD49E4DA63514FE91D06
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06d209ca-689c-358f-8fa6-f79936125b6c.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     397380
IP address blocks:        50.228.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:86:dd:49:e4:da:63:51:4f:e9:1d:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=8247bdef-8591-4f8d-ab79-7431350a6415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:09:b8:f6:0d:61:0a:c9:00:57:7b:9c:a2:29:
                    95:ce:83:1a:15:ae:69:98:c1:76:97:93:2e:6c:73:
                    d1:bc:39:6e:7e:c3:82:00:c1:6b:09:f1:32:58:31:
                    c9:f7:1d:65:27:45:4f:8e:67:0d:53:c4:fd:da:98:
                    14:74:fc:ce:4f:a7:05:91:f6:57:57:0e:fb:51:cb:
                    cc:c6:2b:c6:8f:16:02:d7:65:52:ce:c1:af:ed:36:
                    64:65:26:07:3f:b9:45:ae:d4:8e:09:4d:26:ae:36:
                    1b:cc:e8:79:8e:fe:71:13:13:4b:00:7b:16:2d:5a:
                    94:0f:ba:58:2e:39:e7:91:8a:b8:88:15:4a:14:75:
                    6f:4e:48:9e:76:58:92:b2:3a:78:68:78:13:7d:34:
                    48:99:bd:84:03:4e:6e:2f:5d:f7:1f:20:35:14:d6:
                    f2:c3:51:cf:7b:dd:27:29:a3:3e:2f:a9:1f:11:f8:
                    cc:96:b9:e1:6a:e2:d3:2f:16:88:fc:63:2f:c6:43:
                    92:ab:65:7c:ae:16:f3:59:52:34:0f:a0:6d:20:4c:
                    8d:14:a9:52:76:49:a2:0e:48:76:2a:89:5d:65:2b:
                    bc:70:62:da:27:af:a8:e1:88:b6:7e:a8:d1:c8:da:
                    0a:25:f0:18:1a:4d:28:82:0c:fe:64:25:e3:e2:5e:
                    06:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:20:71:DF:38:25:53:30:55:EA:45:26:B3:CC:25:66:23:CC:FD:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06d209ca-689c-358f-8fa6-f79936125b6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.228.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:00:56:f0:e4:20:8a:89:9c:5d:e4:90:5b:89:70:72:b1:4d:
         b1:a5:5c:2d:37:67:02:2b:33:99:f1:56:f9:94:bf:07:19:0d:
         d2:46:f5:f9:e7:38:9e:ef:10:2d:6c:85:6f:be:ce:9d:bb:f5:
         2e:1e:b8:26:aa:cf:24:52:59:b6:58:03:99:3c:d3:c5:4e:9b:
         99:84:75:eb:33:04:9c:cd:41:dc:e0:1c:af:d5:b5:d3:f7:f5:
         ad:1f:fe:d1:43:a8:d9:52:f7:f3:8c:34:de:33:97:8b:30:33:
         13:51:c4:3c:a3:33:85:98:e9:45:d6:23:cd:8b:a2:cf:dc:5e:
         2b:eb:34:24:9c:10:86:e4:29:04:d2:83:80:6d:af:65:36:2a:
         48:c6:94:ff:49:4b:94:fa:09:4d:22:17:49:36:08:5c:c6:a3:
         af:72:4b:4f:16:96:2c:75:ae:96:ba:ea:b1:fb:48:10:02:af:
         0a:07:d6:6d:d5:11:38:40:21:45:d4:b0:8d:0c:02:b5:e9:4f:
         f5:23:1b:ce:82:0d:66:e5:fe:76:c6:b0:7f:f2:fc:a6:cb:d3:
         ed:07:88:21:3b:f5:a4:90:b1:56:05:ad:7f:3e:77:42:a0:d2:
         f1:3c:94:d3:3f:8d:fd:11:55:83:ae:25:f2:d0:ae:69:09:5e:
         17:2e:d7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:48:35 2026 by rpki-client