Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ee52326a-580a-3f4d-bae8-61764be7716a.roa
File:                     ee52326a-580a-3f4d-bae8-61764be7716a.roa (raw, json)
Hash identifier:          mc6AcaMoFICOuSQKWep5T8LzEn6CktP/B+4J+oGg6Iw=
Subject key identifier:   18:C3:42:C9:C8:21:DE:19:53:CD:8B:CE:9C:81:2A:C3:3F:24:CF:FC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F4978263D6EDB69AEE3C74C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ee52326a-580a-3f4d-bae8-61764be7716a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7725
IP address blocks:        50.232.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:78:26:3d:6e:db:69:ae:e3:c7:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=17d984c0-0d57-4016-9246-dfef945c50b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f7:0f:93:04:79:03:e0:1a:cc:4c:12:54:42:
                    8e:a6:b6:f8:fe:e2:d8:ed:54:d1:15:10:46:f3:d1:
                    42:eb:56:5a:48:e4:be:27:e4:f0:8d:a9:ae:68:e1:
                    0b:3c:49:09:cb:af:4c:e6:d9:62:2b:86:0c:8f:bf:
                    b7:5a:c7:05:fb:a9:e9:05:67:1b:6b:1e:02:08:74:
                    bc:e6:e4:59:93:87:d0:2d:f6:d7:5d:56:ef:4d:e0:
                    ec:c2:6b:20:8a:ba:1d:5f:ca:30:fb:d7:08:e0:24:
                    22:d1:7d:86:14:be:fb:58:48:66:84:79:82:03:b9:
                    19:f7:99:9d:f0:d9:c3:39:23:ba:96:eb:71:cc:c3:
                    24:3f:b7:87:79:9a:48:48:ed:e5:5f:14:46:bf:d1:
                    d5:95:50:8c:a8:1a:bf:a2:ab:a5:00:da:2c:cd:08:
                    63:28:02:2e:6a:1f:c1:d9:de:4d:38:03:fc:0a:20:
                    68:2b:3e:7a:e3:af:ab:9f:24:25:82:43:7e:0a:94:
                    f5:87:2a:03:67:e5:97:f3:b8:a9:e0:aa:78:d3:2b:
                    7d:2b:97:c0:b1:0d:2b:50:8c:d0:51:f8:e9:3a:95:
                    e1:2a:7d:48:7b:ee:9f:9e:39:e2:e7:1b:b7:d4:16:
                    1d:c4:cd:23:33:23:c2:06:09:b4:70:63:96:db:25:
                    bb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C3:42:C9:C8:21:DE:19:53:CD:8B:CE:9C:81:2A:C3:3F:24:CF:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ee52326a-580a-3f4d-bae8-61764be7716a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.232.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:2d:7e:2f:71:c2:38:ee:57:ff:fb:f5:ac:5c:6a:b6:f9:38:
         d0:ef:d4:2c:fa:55:21:4b:c4:52:f7:3d:e4:2e:c4:a8:8f:12:
         41:d3:24:8b:72:83:ef:26:ee:f6:ac:9f:ee:0f:35:2f:8f:1c:
         3e:fc:a5:b2:73:c6:43:a5:a8:f7:ab:60:14:5b:87:c0:10:0e:
         e3:15:ad:7a:a1:08:65:84:50:d8:aa:83:d5:81:6e:de:92:9b:
         0b:d5:89:72:b7:f2:a3:cf:ff:f4:82:f1:85:d5:9d:44:79:42:
         5e:0e:02:85:1d:bc:be:92:8d:9e:ac:8a:f2:f6:43:44:ff:de:
         77:71:c7:0a:8b:ad:f1:15:cd:6a:fd:fa:2b:8d:27:f7:09:6d:
         45:a0:02:b0:08:de:49:14:a8:2a:e8:b0:c8:6f:6a:02:aa:19:
         c1:c4:2b:e5:06:1f:49:d8:4a:e2:93:3d:e7:ad:e2:cd:8c:32:
         13:c8:95:34:df:4e:08:2a:60:5e:44:4c:ba:63:b4:31:d2:df:
         61:27:86:78:98:51:0c:c2:76:07:e1:56:54:28:d3:d4:14:d7:
         c2:b4:d6:21:07:d0:31:a2:f2:01:7f:b2:df:6f:13:4b:fa:db:
         c9:0a:bd:4a:bc:4f:25:61:be:7c:6d:54:a6:f3:b0:48:86:73:
         70:29:ff:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:30:32 2026 by rpki-client