Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fcbceb33-d9b7-3c3f-a52a-435551ab0aa3.roa
File:                     fcbceb33-d9b7-3c3f-a52a-435551ab0aa3.roa (raw, json)
Hash identifier:          gGYGRv9OV2oE5vm+O7O9K8GzqmGYEgnSpag7opWhA7g=
Subject key identifier:   30:53:29:7B:3F:4B:9A:7B:7D:30:C2:AC:4B:D7:FE:7A:41:15:EB:2A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA78B17396C47C70347F9EC80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fcbceb33-d9b7-3c3f-a52a-435551ab0aa3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     33657
IP address blocks:        50.198.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8b:17:39:6c:47:c7:03:47:f9:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a1d5eac9-c0ae-429c-a30e-41b8f8cc8db0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:02:53:ad:78:bd:0b:e1:f4:78:f2:7e:ff:34:
                    0e:48:36:1f:3a:1b:95:63:b2:50:d5:3e:91:a0:0b:
                    0e:96:4c:35:60:54:89:0a:ae:ca:86:e5:14:7d:02:
                    d4:5c:18:f4:c4:49:a9:1e:67:75:9e:32:93:93:45:
                    ee:d5:97:cc:b1:26:c0:cb:ce:26:23:a0:46:38:42:
                    37:62:19:75:c5:9d:13:b0:66:8f:bb:0f:6b:af:12:
                    35:29:fc:f5:0f:93:b2:56:91:5a:f3:e4:06:37:ca:
                    db:89:72:7a:c9:d8:5c:6f:de:46:c1:e1:b0:a5:89:
                    de:ca:0a:c5:d6:f7:b4:77:1c:9b:e3:8e:3f:93:ff:
                    2b:f3:37:76:f7:1d:0d:64:b5:5b:62:20:59:37:17:
                    c6:14:84:13:b7:7f:f5:e3:55:ea:a6:3b:66:4b:4a:
                    ec:7a:67:4d:53:69:0f:c0:34:84:36:d3:21:98:2a:
                    e5:35:b4:02:20:ad:3a:eb:49:f7:e5:7c:48:aa:fe:
                    38:24:02:50:64:dd:43:a0:b5:1c:74:c6:7c:00:ab:
                    e0:ad:63:59:53:05:b9:5c:1e:91:88:4e:ee:2a:41:
                    88:94:ed:94:7b:83:3f:e6:c8:06:ba:d7:c7:a1:e5:
                    c2:46:c5:cd:f8:6e:4f:f8:2c:2d:b3:8b:3f:48:ee:
                    9d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:53:29:7B:3F:4B:9A:7B:7D:30:C2:AC:4B:D7:FE:7A:41:15:EB:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fcbceb33-d9b7-3c3f-a52a-435551ab0aa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.198.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:73:4f:3c:c7:3c:e1:e7:bd:41:4e:10:20:70:4b:8e:c1:fb:
         61:28:d7:e4:2b:16:ab:1a:53:d8:b5:88:85:90:bb:a0:e4:ea:
         47:00:d5:d4:4b:b5:60:17:c2:2f:61:86:fc:7e:e7:04:2c:38:
         65:b3:68:ba:04:08:39:ff:9c:45:b2:fb:2f:ac:43:e8:6d:cb:
         49:02:80:18:5b:4a:34:89:0f:ae:ab:63:ae:ad:ff:87:67:6e:
         89:d9:f8:75:df:ea:ba:b8:36:fe:10:75:22:76:e2:41:e7:f8:
         3e:7f:27:9d:c1:04:2a:ff:73:e7:1f:3b:9a:c9:8a:45:55:29:
         ee:c1:25:0a:39:e2:4b:b1:4d:b2:30:5f:05:7b:a2:33:f0:d0:
         35:7d:4b:e5:d8:63:ad:9c:90:7f:b1:e1:24:31:a5:a8:cc:80:
         38:95:d4:2a:31:83:15:35:ac:a4:cb:8d:01:ee:00:c7:c2:f2:
         6a:14:88:66:68:c8:9a:1a:2b:75:22:2b:99:b1:49:7d:5a:f9:
         de:0a:19:ae:11:2f:0c:bf:fa:ea:fe:ae:d8:37:0a:c3:5e:83:
         f4:31:7c:aa:2b:7b:58:1c:a7:fb:56:37:18:02:44:1b:46:3a:
         50:b9:aa:d6:e7:70:c2:13:9f:06:3c:6c:63:d6:24:59:06:69:
         d0:74:50:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:30:59 2026 by rpki-client