Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ddfcf938-dfdf-3622-8929-cc58943cdadc.roa
File:                     ddfcf938-dfdf-3622-8929-cc58943cdadc.roa (raw, json)
Hash identifier:          srp+wcHUt/uGRlBllVdsQt8lBWbRF+z9NdH24UmwI/I=
Subject key identifier:   F6:98:88:AE:F8:15:2A:41:3D:63:E9:48:D1:03:81:71:DF:4C:2B:C5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB2212DF2FE4B20647B7CF2F0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ddfcf938-dfdf-3622-8929-cc58943cdadc.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     22258
IP address blocks:        174.50.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:21:2d:f2:fe:4b:20:64:7b:7c:f2:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=93610a49-145c-4f25-a618-4f880f5550ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8a:07:75:33:84:34:9e:6f:cb:e7:0f:80:9c:
                    6f:61:b1:0c:a2:a6:cb:50:20:e9:53:20:0e:4f:f2:
                    0e:f3:76:a1:9d:e4:e6:43:70:27:4c:69:e8:f5:02:
                    9b:e5:62:20:16:7a:54:1a:5e:ea:45:9b:74:70:10:
                    4d:5d:15:4a:cf:15:11:e4:a4:5e:ee:07:ac:d8:db:
                    2d:8c:bd:da:b4:ad:a4:92:66:b6:95:d0:3a:2d:2f:
                    b8:70:76:90:6f:4b:fc:19:20:f8:57:ed:5e:30:4c:
                    ea:37:52:13:2e:d9:ce:50:31:22:c5:2b:fb:53:1f:
                    9a:59:41:6b:7a:95:ef:b0:f2:b4:e0:fe:a7:33:0f:
                    cd:6a:80:2f:2c:21:46:58:e0:52:6b:44:10:4a:ac:
                    95:c0:79:38:c3:67:4d:23:8f:63:db:b3:21:0b:39:
                    41:b8:97:9b:74:2a:83:db:68:82:0c:b8:e0:43:6a:
                    09:5e:62:98:62:17:e8:44:d2:31:38:16:c9:5f:c2:
                    ca:21:67:0d:26:b4:f7:7a:1d:91:e2:46:53:ec:1f:
                    9a:81:c5:fe:6d:b0:e0:f4:f9:99:a5:27:94:99:c4:
                    bd:3f:46:ef:0c:ec:29:cf:07:8c:50:cd:b5:91:45:
                    ce:43:f2:91:08:3d:b6:c5:99:b9:b6:a9:66:72:8e:
                    97:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:98:88:AE:F8:15:2A:41:3D:63:E9:48:D1:03:81:71:DF:4C:2B:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ddfcf938-dfdf-3622-8929-cc58943cdadc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.50.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:c7:41:19:dd:3f:be:67:92:de:ef:5d:42:6e:5b:e2:06:e8:
         3c:a5:fd:c0:7c:63:24:63:eb:28:e3:6e:48:db:a2:9a:c7:06:
         cb:bd:df:c3:f4:d7:7b:98:56:9d:24:a6:59:1a:ac:40:81:0a:
         29:27:0f:bb:94:4d:28:03:2c:91:3c:35:04:8f:48:ef:ed:35:
         ae:bf:66:e0:e8:f7:17:1d:b3:3b:a9:a0:22:7f:e6:68:91:b3:
         49:64:a3:df:77:e4:fb:c4:fa:fd:0c:0c:f4:41:b9:d1:8f:4e:
         ed:47:96:0a:79:d2:08:09:df:4f:e4:a0:69:a6:6a:11:dc:5a:
         76:14:b1:0c:60:79:f2:36:3a:3f:60:b9:42:f9:28:8f:8d:e4:
         98:1b:8f:76:98:0a:70:2b:fd:eb:f8:db:49:d9:1b:9b:fc:7a:
         63:7f:13:2d:91:62:a2:50:2f:e8:d8:6f:5c:b4:8b:8b:fd:99:
         7a:04:36:40:89:84:3f:5f:5e:3a:eb:af:9e:8f:ed:81:1a:8e:
         85:ef:13:ce:e7:5e:65:ec:cb:e7:72:70:45:03:9a:c1:4f:b5:
         44:c3:0f:11:c3:f0:d3:e4:5c:d4:c3:77:11:9f:e3:bc:d6:7c:
         dc:0b:1c:43:a0:e8:c7:66:b3:05:b7:22:79:bb:79:59:d4:a8:
         10:d1:5d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:42:23 2025 by rpki-client