Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ffd587c3-22a5-32d6-9127-7ad9ae7ab44e.roa
File:                     ffd587c3-22a5-32d6-9127-7ad9ae7ab44e.roa (raw, json)
Hash identifier:          H3T3tXFkm3IQmfARFTZBczQV6Ta7Q4dYfEXFaOg048A=
Subject key identifier:   AA:DF:F7:6D:DC:91:EF:E3:2A:68:23:58:E0:13:7B:0D:96:36:AE:34
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE8617FB19E32A7948ECD8C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ffd587c3-22a5-32d6-9127-7ad9ae7ab44e.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     20214
IP address blocks:        50.224.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:86:17:fb:19:e3:2a:79:48:ec:d8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=13e8294d-54db-4c4e-8af2-e604a671cd0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:92:18:0c:95:98:13:2f:ba:fe:78:93:e6:ef:
                    62:29:81:0e:f3:79:2d:dd:d9:74:55:10:cd:23:65:
                    5b:ba:f5:43:ea:6f:0a:08:19:34:4c:55:7e:49:7a:
                    7d:ad:0f:04:fd:d5:02:a9:5d:53:92:a6:f9:b4:1a:
                    64:24:48:2a:2b:a0:bd:d9:24:2c:d4:a0:c3:d8:97:
                    b0:bb:ba:8a:df:a3:41:36:05:a1:ed:3b:1b:49:c9:
                    41:75:12:b2:4c:00:aa:a2:4c:c6:e6:f1:f3:35:b3:
                    a3:92:cf:2e:e0:cc:fa:85:5b:f5:ce:44:c1:31:d3:
                    ff:74:a0:a1:9b:29:77:8b:c8:cb:0a:36:0a:dc:22:
                    e7:b7:3f:9e:70:6b:9c:a9:e3:1a:0d:a1:c1:08:91:
                    d1:02:1e:c0:82:88:4d:f4:ea:ca:22:eb:ea:fa:ad:
                    02:34:5e:e7:49:99:97:25:f4:37:15:f7:16:d6:90:
                    cc:7c:74:8b:c4:bc:a6:4b:cd:c1:0d:99:0a:ce:f4:
                    cd:ea:5b:3f:4a:6b:8b:48:e6:08:cf:65:fb:54:83:
                    23:f7:05:c0:d8:70:ca:b8:32:9a:58:9d:be:4c:38:
                    75:a2:96:26:c1:12:c9:bc:28:0a:49:c5:e5:9f:74:
                    ac:85:20:1e:84:43:53:94:6f:a1:b7:41:2a:e8:dd:
                    29:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:DF:F7:6D:DC:91:EF:E3:2A:68:23:58:E0:13:7B:0D:96:36:AE:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ffd587c3-22a5-32d6-9127-7ad9ae7ab44e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.224.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:06:ea:02:b0:23:d1:c2:89:50:3d:d0:86:b5:94:af:b7:af:
         03:13:57:d3:f4:ee:44:6a:22:8f:20:59:46:7a:bf:0d:ff:02:
         f2:7e:27:82:e0:4c:35:6f:39:3b:47:59:77:16:64:51:c7:4b:
         76:47:ce:65:64:c1:a3:1d:8b:14:31:da:56:07:34:2a:ca:51:
         62:b0:1c:25:b6:8b:37:d0:07:c2:81:72:88:4d:24:2b:4e:de:
         2d:90:4f:9b:1f:d2:99:00:4f:19:c6:28:6c:03:ef:4b:44:98:
         51:06:67:15:28:53:9f:20:94:e4:84:70:be:fd:4f:74:9b:6c:
         0d:95:ba:17:31:b2:1d:20:51:ac:67:27:db:cc:69:49:cc:33:
         1a:4f:19:97:d1:2e:35:05:4e:2f:9d:32:15:24:03:6d:30:db:
         be:39:2e:23:5b:e5:2d:4c:1b:f6:da:0c:82:d0:3b:3d:25:97:
         01:fe:67:12:3a:6a:7e:cc:50:51:f6:5c:4a:ac:bb:b2:c8:96:
         87:23:f5:be:a1:4e:b7:61:73:23:cf:61:a5:c9:1b:b3:11:15:
         a2:14:c8:ea:78:d3:7b:ee:28:ad:6b:5f:63:4e:86:d5:91:6f:
         8e:51:20:5f:92:f7:85:67:39:98:eb:94:d3:1c:79:50:b3:d4:
         c6:22:c0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:34:37 2026 by rpki-client