Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b92910d3-737b-3455-b563-e3a446885f64.roa
File:                     b92910d3-737b-3455-b563-e3a446885f64.roa (raw, json)
Hash identifier:          9L9cW0q1TnarumwSue/hcICd9rrrSDk98jCSj78yiQA=
Subject key identifier:   9E:D7:55:5A:C0:BD:0C:27:5B:2A:BE:F7:75:FF:D9:45:FC:12:58:C5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA78CA5EDD6FC752B4D2E1000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b92910d3-737b-3455-b563-e3a446885f64.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     21508
IP address blocks:        50.253.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8c:a5:ed:d6:fc:75:2b:4d:2e:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b8409d0d-2929-4c3b-852b-3f73832bc080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:06:e9:7f:6b:36:89:ae:39:ee:bd:16:a2:9f:
                    bd:9d:7f:d1:de:79:af:93:8d:17:ef:10:33:fb:01:
                    76:82:a7:ad:fa:a3:7e:16:af:d5:ce:87:a2:ce:51:
                    f3:8a:d7:f5:6f:4b:bc:5f:37:1c:07:94:b9:39:a6:
                    eb:99:75:65:a7:83:3c:8c:be:c4:c8:9b:72:a3:2b:
                    fd:31:2c:87:88:41:1f:4a:65:34:c5:63:d3:9c:ac:
                    f1:49:ef:4a:8b:2b:2a:e6:4d:f4:ce:f2:75:3c:be:
                    8a:6d:87:1e:fb:f1:a6:16:b7:d4:92:3c:c5:c6:c5:
                    2a:71:8a:32:12:3a:27:61:e1:7c:75:3a:b8:dd:a9:
                    5e:26:da:73:9c:08:86:81:2d:0e:93:76:1d:a7:ee:
                    d8:f9:8c:90:96:32:cd:63:52:74:24:81:c0:ae:26:
                    fb:50:8a:ce:7b:8a:a9:31:a3:25:b9:64:0a:88:bd:
                    8f:c8:cd:c1:96:93:cc:a9:7c:5c:ec:cb:50:8c:93:
                    37:99:f0:b3:f1:23:90:76:f3:94:29:34:99:16:d5:
                    e2:a4:5d:24:98:c8:a5:3d:ad:a8:6e:c5:d7:a2:3c:
                    ce:ce:37:d0:4a:88:c7:8d:dc:77:c4:18:f1:87:e4:
                    97:d1:3d:70:21:ad:ba:d7:af:79:f1:b2:78:4c:41:
                    f8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D7:55:5A:C0:BD:0C:27:5B:2A:BE:F7:75:FF:D9:45:FC:12:58:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b92910d3-737b-3455-b563-e3a446885f64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.253.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:f8:6f:6e:5a:34:20:70:9e:5c:0f:b5:3f:a1:48:9c:56:1f:
         7f:14:b0:4c:fd:79:e8:58:f7:4e:d0:5c:f9:6d:13:62:99:5b:
         78:69:04:95:92:9b:9a:cc:3f:35:11:fc:42:4e:fe:c3:81:e9:
         78:4f:e1:99:d1:3b:a9:33:67:4e:b6:f7:02:43:4f:6e:36:fd:
         cf:6e:53:df:c9:e2:9e:21:be:2e:7c:b1:4a:3b:11:8d:99:fa:
         66:18:a5:2a:f5:43:c9:43:2f:51:51:47:2a:36:ee:9f:3a:35:
         19:23:92:f7:84:cd:30:c3:ef:57:1b:2f:cd:e5:e5:d0:af:ce:
         6e:6b:66:e8:a6:f9:fe:26:da:e2:9e:f5:1f:33:14:65:9d:55:
         85:a4:72:34:91:dd:fe:0a:0e:c0:52:00:e7:13:91:8b:af:b7:
         55:1d:c6:86:07:62:b0:e6:7f:0f:c6:53:84:20:8b:76:7a:f0:
         8e:f5:c7:77:e5:28:47:00:92:c6:ba:8f:bf:f6:ef:1a:d9:87:
         32:de:d6:f7:18:d0:6b:e8:22:cd:d2:03:ad:e7:21:50:4e:a3:
         b5:57:c1:75:11:4a:4a:97:f7:a4:49:78:84:c3:24:a2:7c:19:
         5d:dd:c0:6c:dd:a1:a3:3b:9d:47:d4:33:a3:1c:07:5e:53:17:
         9b:c2:7d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:47:18 2026 by rpki-client