Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f535985-7adb-3b33-a9bd-003c9dbb894c.roa
File:                     1f535985-7adb-3b33-a9bd-003c9dbb894c.roa (raw, json)
Hash identifier:          SJjkimHL6DWvfObAEOJS9EklQ8XtDdAN0UvdRimU0iE=
Subject key identifier:   B7:1E:E7:39:C9:B3:67:5C:B1:AB:21:03:16:93:F9:F6:BC:47:CA:96
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB220E6456FBC9E502913F780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f535985-7adb-3b33-a9bd-003c9dbb894c.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     22258
IP address blocks:        174.50.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:e6:45:6f:bc:9e:50:29:13:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=70e4f909-7020-4397-83b4-2728e1a38ef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:76:6a:bf:ae:8a:2c:8d:f7:5f:09:30:fe:98:
                    9c:bd:87:cb:3b:80:87:47:4f:a3:8f:bf:3f:37:06:
                    3b:30:dc:38:91:1f:48:a1:ab:79:49:50:4f:cd:01:
                    6d:d2:22:07:fe:ae:74:3e:99:14:46:1a:bf:fa:80:
                    1a:96:e0:06:fa:1b:bb:04:c7:fe:00:17:1d:fd:61:
                    99:3a:2a:f2:9d:4a:bc:36:39:87:dc:b8:ad:10:eb:
                    7d:2a:cc:90:e2:77:e4:56:b1:2a:78:95:f7:02:c2:
                    1c:a6:de:d1:d0:65:5b:dd:8e:40:c8:8d:66:57:2b:
                    a2:45:bb:a6:d1:ba:f8:4b:67:7c:8d:00:72:eb:05:
                    5a:3f:79:0b:9f:54:6f:cb:93:26:fb:81:65:dd:db:
                    2e:73:1d:e6:f9:32:24:15:cf:3a:31:e2:46:39:70:
                    7d:b7:f7:b4:07:1b:d6:f3:73:76:68:11:5b:e2:4f:
                    2f:ef:15:51:77:1e:29:71:94:37:15:6e:37:48:59:
                    19:bb:ca:20:10:d4:60:fc:b5:56:c8:36:0c:d7:30:
                    8d:5b:b1:c7:13:cf:90:3d:79:5c:00:9f:b7:82:e7:
                    55:ba:47:90:7e:77:55:b2:25:e3:93:07:49:3f:c4:
                    bb:7e:f6:5f:f0:29:ec:93:42:6a:fc:04:ee:10:90:
                    c5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:1E:E7:39:C9:B3:67:5C:B1:AB:21:03:16:93:F9:F6:BC:47:CA:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f535985-7adb-3b33-a9bd-003c9dbb894c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.50.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:c6:be:0c:bb:e4:55:00:24:8d:4e:9f:bd:67:59:7c:78:91:
         0c:0a:59:fd:22:74:8d:9c:76:50:05:04:8e:97:b8:68:74:ee:
         1d:88:c5:a9:fe:73:9a:9e:c1:b5:e6:7f:28:f7:75:b4:0a:dc:
         5d:98:c9:b6:26:44:47:57:0e:c8:9d:02:fe:8f:64:25:f9:2a:
         5e:f4:2f:df:4a:bd:5a:fe:8a:38:87:03:eb:8b:95:23:4a:bc:
         d0:96:2e:e0:33:5d:98:9c:0c:d2:2a:6e:c7:fa:da:77:85:9c:
         33:80:b3:5f:e5:d6:6a:6a:17:97:81:3c:c2:a3:05:51:8e:21:
         3b:25:3f:86:69:53:27:28:57:ec:25:f9:74:01:5b:b7:ad:25:
         5d:e1:31:32:43:a2:5e:b7:9c:ba:04:4e:c9:9e:7c:8b:da:81:
         f9:57:b6:a4:be:3f:5e:30:2f:dc:ca:0e:9c:9b:92:36:00:86:
         50:91:10:d1:fd:05:62:38:f7:b6:83:a4:c2:07:f8:39:4e:53:
         97:fe:2d:12:be:4e:33:f9:77:68:c7:c9:67:36:84:02:c2:46:
         41:10:72:f0:78:a7:ec:3e:df:e3:9a:48:75:5b:c7:ee:9c:26:
         5f:e6:a0:03:72:a1:ec:ff:24:77:9e:a6:b4:36:e5:82:e9:bd:
         9e:8f:ab:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:36:07 2025 by rpki-client