Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c82c981-041e-3b24-ac57-4809be2f9c89.roa
File:                     8c82c981-041e-3b24-ac57-4809be2f9c89.roa (raw, json)
Hash identifier:          4pdTwP1Wadf4K+QdRfVutvuGVAr38T7rzsB/X+5pgps=
Subject key identifier:   D9:B9:D7:7E:E2:6E:14:CC:B0:49:BD:4F:FC:74:6D:90:6D:9D:EC:E4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE87C7EF09D7C1C3393ADC00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c82c981-041e-3b24-ac57-4809be2f9c89.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     33491
IP address blocks:        50.228.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:87:c7:ef:09:d7:c1:c3:39:3a:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=9b848605-c3d0-4b28-ac84-677abe64bac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:20:65:d8:98:e6:a5:25:84:15:a2:d0:a0:29:
                    e6:3c:37:78:bd:f9:d3:76:c4:d7:b9:51:92:45:27:
                    09:ad:98:04:31:19:ec:04:a2:e1:7f:f6:8b:6e:d7:
                    dc:51:7c:92:66:4a:22:e0:dd:32:af:b0:95:97:a3:
                    b6:06:4d:67:a0:65:e8:14:e2:e5:8f:96:f2:e4:99:
                    d1:01:4e:bd:eb:e2:ac:a7:e0:cd:59:86:af:33:dd:
                    4c:59:9f:f8:4c:df:51:d3:07:ee:55:20:8e:8d:19:
                    e3:13:b2:dd:d8:40:13:b3:68:8e:81:e7:34:20:15:
                    78:38:92:83:e4:9f:58:1f:de:ae:9a:fb:03:54:9f:
                    fd:a4:3c:e0:05:20:d9:2e:a6:f8:de:0a:a3:49:87:
                    45:0f:ec:e0:60:78:01:aa:e9:70:c9:0d:68:62:86:
                    42:c8:90:07:f4:a2:1e:ad:31:31:43:d4:c1:92:d9:
                    b8:86:32:34:5a:91:29:20:a0:05:00:6d:60:5f:1c:
                    02:d8:3c:59:c9:14:ff:2b:74:a9:fd:27:da:c2:52:
                    36:16:39:c3:1d:ed:84:f2:41:22:ad:a9:ac:75:c5:
                    95:90:f0:7d:17:20:cf:b0:8c:05:6f:8f:26:6e:a5:
                    b7:89:f5:86:86:f9:61:aa:8d:b4:9f:c4:48:43:19:
                    5c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B9:D7:7E:E2:6E:14:CC:B0:49:BD:4F:FC:74:6D:90:6D:9D:EC:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c82c981-041e-3b24-ac57-4809be2f9c89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.228.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:e8:85:8f:24:20:c0:ff:e4:8f:01:cc:20:2a:34:fa:b1:da:
         0a:5d:2a:45:e8:9f:0b:2c:e1:b2:b4:ee:84:9e:18:ee:7e:b6:
         b8:ff:5d:bb:ff:35:66:97:05:86:6b:78:58:e7:0b:e9:7e:dd:
         c6:33:75:55:fe:df:57:07:a6:5f:c6:8b:ad:7e:cd:43:d5:ec:
         6a:f3:85:3d:5a:2a:79:30:62:0d:a7:65:2b:6d:f5:88:e9:c3:
         c4:6f:72:dc:bb:c7:cc:f7:99:3c:3a:de:2c:cc:fd:84:03:df:
         bc:2a:2c:27:a8:52:dd:66:27:88:34:66:b2:6b:b3:e0:e6:71:
         58:d1:98:8e:f6:d1:b5:e3:da:11:ec:cb:00:e5:26:d5:03:4a:
         03:d6:e1:a7:27:7b:3b:f9:0a:79:b1:54:e1:4c:94:57:d2:0b:
         51:1e:9b:cd:9e:0c:b8:3c:e4:2d:49:5b:75:84:11:f9:07:87:
         f4:f9:41:0c:69:2d:2c:bb:07:b7:2d:d1:dc:2f:86:f2:b2:43:
         4b:25:96:df:be:6b:71:8d:ae:bb:a5:db:aa:9b:ef:68:e3:01:
         22:b2:d9:47:a0:88:af:9d:ca:4b:fe:85:ed:7c:e6:32:7a:2e:
         91:9e:ee:1c:8b:ab:43:59:14:53:57:f4:64:2a:f1:ba:90:0c:
         70:e8:68:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:19:14 2026 by rpki-client