Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5fb6d777-d07d-3e51-9d97-bfbc105bd093.roa
File:                     5fb6d777-d07d-3e51-9d97-bfbc105bd093.roa (raw, json)
Hash identifier:          gcVrj411KvB+Yi+por3eqFe90FZgXARRjlaXisz9W2M=
Subject key identifier:   12:CA:5A:EA:AD:C0:65:32:3F:F3:F8:93:69:A6:60:F6:F9:65:B0:7B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE907799E223EE685883820
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5fb6d777-d07d-3e51-9d97-bfbc105bd093.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     33659
IP address blocks:        50.225.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e9:07:79:9e:22:3e:e6:85:88:38:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=336ee3fd-499c-4b25-bc7e-065773e6de44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b6:2d:72:14:90:31:8c:0d:5c:b1:78:56:e5:
                    69:5f:a1:94:b4:a6:05:f0:06:09:4c:5e:dc:c2:86:
                    41:99:9f:d8:6b:60:cd:67:1b:6d:e6:1d:5d:9e:78:
                    59:3c:b3:78:5b:32:6a:d5:e1:3f:86:2f:0d:8a:6a:
                    40:17:2e:e3:a2:f3:8f:a9:e7:85:04:bc:8c:f8:19:
                    1c:5b:9e:16:ec:fe:c3:5b:3d:f6:3c:14:17:65:d3:
                    bf:e6:90:fe:ae:41:06:94:8c:3e:18:b6:ee:1c:3c:
                    33:19:80:f9:df:71:6c:a8:66:18:4e:bd:9d:fa:f3:
                    36:d9:7c:a5:84:bd:d0:60:61:49:78:7f:3b:b4:d8:
                    14:e4:49:6a:f4:b6:9c:84:d2:41:24:6c:b0:af:67:
                    81:38:41:9e:41:54:54:34:e7:5a:9a:15:2e:0f:f6:
                    80:60:e2:b1:34:be:17:1b:16:d2:61:4c:27:03:ee:
                    90:48:bf:aa:7c:41:21:7b:9b:04:a1:ee:8e:17:03:
                    62:28:d6:84:ac:2a:b7:01:58:b9:89:37:3c:c9:fd:
                    89:10:fd:15:09:4b:26:bf:3c:56:38:91:21:53:40:
                    1c:b8:96:f3:ae:c6:ee:6b:82:90:f8:4f:22:6b:14:
                    1a:2d:de:18:d1:98:8d:7a:7b:c6:cf:4c:e2:3c:7d:
                    45:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:CA:5A:EA:AD:C0:65:32:3F:F3:F8:93:69:A6:60:F6:F9:65:B0:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5fb6d777-d07d-3e51-9d97-bfbc105bd093.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.225.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:ec:d1:39:8f:a1:0b:bc:05:1b:f9:9d:cb:ab:ed:78:51:42:
         50:91:0c:f2:37:99:06:a4:5b:05:9d:79:94:ef:dc:92:7e:6d:
         19:cb:c7:1f:9f:33:ec:29:5d:c5:cb:62:80:50:91:08:99:9a:
         1e:70:8a:fb:d7:fe:d3:b6:cb:e4:b8:58:c0:50:4a:4e:8a:28:
         51:66:01:90:ad:c7:2b:16:2f:13:bc:8d:83:2d:48:d5:4f:b8:
         63:d9:1a:71:50:76:d7:20:f9:78:d7:c7:b8:4b:4f:67:48:bf:
         a5:2f:63:b4:79:33:fa:41:82:ce:d1:54:90:8a:bc:96:36:f9:
         d1:05:7a:0f:84:d4:e1:4a:b5:bb:70:66:40:66:0c:82:c2:e7:
         24:cc:e4:d0:10:cd:8e:5d:a6:80:0d:05:f0:c7:5e:fc:4c:24:
         9c:f1:fe:7a:e6:49:7f:4e:9d:32:0b:3d:ab:87:5a:89:fa:81:
         1d:07:fe:ea:d9:1b:09:94:44:04:ca:5f:6a:a9:5d:a6:d0:3a:
         0b:bd:c7:7a:1b:d7:e4:46:e4:45:06:75:27:69:fa:69:7a:27:
         9d:7b:8e:f7:7b:51:95:fb:63:84:b7:af:ef:19:e8:9c:de:33:
         ab:e4:fb:5b:e2:61:67:b9:0f:72:53:b8:23:f8:4a:49:03:57:
         73:b7:1a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:31:12 2026 by rpki-client