Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53189578-500d-3cee-836e-1f0e76060424.roa
File:                     53189578-500d-3cee-836e-1f0e76060424.roa (raw, json)
Hash identifier:          AQkbH9oiQAJ1qCwy1dtQiQ3lAr6H+nYmPwTKOHI1V4w=
Subject key identifier:   7E:98:5D:60:36:4E:4F:B0:71:34:5D:0B:D9:71:D0:75:1A:0B:49:65
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA789B46077E48F140CA4F880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53189578-500d-3cee-836e-1f0e76060424.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     33662
IP address blocks:        50.200.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:89:b4:60:77:e4:8f:14:0c:a4:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b719dabc-ac8b-4d6f-a0a6-92f56dc83b2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:69:b1:44:19:f5:db:db:df:45:9b:ce:ad:71:
                    a1:41:67:ae:a7:25:a5:8e:24:e3:db:8c:f2:66:cc:
                    42:90:b3:cc:23:db:cf:c0:4c:30:a3:15:86:42:68:
                    5d:4e:83:cf:2d:93:67:b7:5f:24:60:64:ed:3f:e9:
                    83:0c:f7:3c:be:08:6f:31:23:7a:70:f6:89:d6:70:
                    40:c3:54:9a:2d:21:55:13:59:83:1a:86:ae:55:a3:
                    00:af:48:d8:4b:ee:1d:53:86:90:be:ac:c3:38:42:
                    09:bc:65:a4:c8:ef:45:f0:ae:a6:43:85:07:de:e4:
                    0f:a7:44:c7:3d:99:fc:32:52:4f:57:d9:2e:6a:ba:
                    47:e9:05:95:d8:cf:70:38:d4:cb:4b:91:26:a2:f5:
                    49:48:b3:0f:62:3a:fc:fc:06:eb:d8:25:04:4d:90:
                    66:e6:d8:54:e5:3a:71:78:40:7d:cb:bc:0f:8b:64:
                    70:a6:1d:6b:b1:13:6b:95:42:34:c5:4a:a3:38:9e:
                    71:0a:49:80:98:9e:6b:d3:0e:12:5c:8b:a4:ef:c0:
                    5a:48:24:bd:33:d7:77:12:d3:4c:b7:fa:04:df:b9:
                    c0:c4:bf:41:f1:9e:10:89:64:4d:87:05:8c:4e:d8:
                    a0:1d:01:49:77:bf:12:00:f8:a4:3a:92:3c:81:ba:
                    07:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:98:5D:60:36:4E:4F:B0:71:34:5D:0B:D9:71:D0:75:1A:0B:49:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53189578-500d-3cee-836e-1f0e76060424.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.200.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:88:b6:b2:0a:7d:61:8b:22:ba:3b:95:ff:94:11:85:e2:47:
         12:b8:e7:36:42:82:b6:bf:85:3d:f0:b9:b6:d5:88:c7:ef:c8:
         7e:5f:d0:31:57:0b:1c:e5:b4:66:38:2d:be:f3:a5:ec:ff:ff:
         d6:e0:84:82:65:56:1a:d3:8a:85:4e:6d:37:28:13:dd:5a:23:
         9f:f8:48:fe:c8:a3:3f:27:13:c2:90:92:52:f6:64:ff:50:cb:
         b0:6a:d0:e7:a7:f6:d7:5d:cb:77:91:19:8d:16:46:cb:dd:33:
         f0:a0:ff:be:04:6c:97:98:ca:0a:0d:dd:db:05:7e:71:bf:9c:
         7e:f6:ed:dd:67:cd:2e:49:a8:84:97:ff:17:02:f9:75:7d:49:
         4d:94:86:c8:c2:fc:08:55:ea:50:82:3d:60:db:97:f3:76:4e:
         e5:2c:7c:d0:2b:13:ef:cc:2e:92:36:6d:37:b9:56:b3:49:4b:
         d3:90:8f:cc:d4:80:ad:f7:da:24:27:63:10:41:e1:df:d2:dd:
         0b:55:45:28:c1:aa:f1:6b:d9:ab:54:a4:30:25:ef:ef:94:a8:
         87:b5:24:4b:eb:cf:d8:05:8d:1d:c6:d0:fd:f7:7f:92:7e:e6:
         83:3e:7f:8a:ab:2b:1e:02:c7:0e:58:73:1e:68:c0:47:33:ba:
         8c:be:d1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:10:48 2026 by rpki-client