Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/50474eaa-5e69-315a-8a5f-9583ac0a64f3.roa
File:                     50474eaa-5e69-315a-8a5f-9583ac0a64f3.roa (raw, json)
Hash identifier:          lQ9B/gsb5cHNmbjcE4V9OEltGT3eqxoZwtyMfQr4DO8=
Subject key identifier:   7D:BC:36:00:EA:4A:AD:54:62:54:E7:15:F2:9C:5B:B1:7F:90:68:4A
Certificate issuer:       /CN=4ba03064-0288-4ec4-b73f-d6ba1d639961
Certificate serial:       010D0C9F4328584A96854D16C864F1C060CAA800
Authority key identifier: D5:B0:A1:F6:E8:C8:0C:9B:0D:B8:6F:3D:78:20:2F:7B:79:D4:AD:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/50474eaa-5e69-315a-8a5f-9583ac0a64f3.roa
Signing time:             Mon 21 Jul 2025 03:40:36 +0000
ROA not before:           Mon 21 Jul 2025 03:40:36 +0000
ROA not after:            Sun 19 Oct 2025 03:40:36 +0000
asID:                     6589
IP address blocks:        216.40.92.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/4ba03064-0288-4ec4-b73f-d6ba1d639961.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/4ba03064-0288-4ec4-b73f-d6ba1d639961.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:85:4d:16:c8:64:f1:c0:60:ca:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba03064-0288-4ec4-b73f-d6ba1d639961
        Validity
            Not Before: Jul 21 03:40:36 2025 GMT
            Not After : Oct 19 03:40:36 2025 GMT
        Subject: CN=29098d23-870f-43fc-bc02-77a859003609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:08:dd:d9:9d:af:78:b8:35:6d:fd:b1:c2:8d:
                    00:55:3b:25:71:c8:8a:cc:18:0e:1c:46:1f:1d:f3:
                    ea:b0:f9:40:41:3f:97:a3:76:ba:35:71:dd:59:2d:
                    c5:85:7f:e9:72:df:33:f0:b4:1e:b1:d2:9b:b8:2b:
                    76:94:e9:e7:aa:87:13:5f:dd:8e:ea:96:b1:6d:0d:
                    b3:43:8c:f1:aa:3c:c5:44:cf:f1:0e:43:94:e6:5f:
                    fc:b7:e4:b3:8b:a8:ac:b8:b7:be:02:1e:22:78:1c:
                    59:f8:fb:52:5b:90:d2:79:29:ef:ac:53:8e:1d:bc:
                    9c:98:20:05:c4:ab:e3:44:9e:b4:58:2a:c1:4b:29:
                    38:b5:30:a9:bf:f3:3d:ca:3d:27:e7:80:32:b2:87:
                    52:48:be:86:7e:c6:5e:76:93:ef:ca:c6:6d:64:60:
                    02:b4:6c:a6:06:3b:23:8c:0b:b9:d7:ad:fc:a8:ed:
                    c9:fd:01:93:44:19:94:68:b6:ac:7f:24:4c:92:50:
                    89:1f:c3:fb:23:8e:be:51:2b:b2:fb:26:35:d8:aa:
                    99:36:ef:00:21:6f:1b:5c:4a:8f:67:64:e0:9d:48:
                    31:6b:08:a2:30:d1:9f:99:46:dc:08:9c:0e:a9:31:
                    d7:d5:44:5d:35:93:16:a5:7f:55:30:33:96:cc:3d:
                    3b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:BC:36:00:EA:4A:AD:54:62:54:E7:15:F2:9C:5B:B1:7F:90:68:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/50474eaa-5e69-315a-8a5f-9583ac0a64f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/4ba03064-0288-4ec4-b73f-d6ba1d639961.crl

            X509v3 Authority Key Identifier:
                keyid:D5:B0:A1:F6:E8:C8:0C:9B:0D:B8:6F:3D:78:20:2F:7B:79:D4:AD:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.40.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:df:34:a1:4a:2c:a0:2e:a3:10:01:2e:c2:c5:21:67:26:d8:
         e5:09:ab:26:bb:db:dc:b4:4c:0c:de:de:fa:3a:aa:e3:5b:15:
         b4:9a:15:87:c5:06:24:ce:90:d8:43:1d:41:ae:91:52:70:ab:
         f8:c8:7b:a6:63:48:57:f3:fc:9e:95:41:03:50:d8:e5:21:d1:
         e8:ad:58:6e:9d:08:b5:03:38:4b:db:05:9b:3a:cd:48:72:29:
         49:db:f3:ed:a3:02:c6:1c:c5:1c:5d:81:ee:77:06:62:3d:3c:
         e6:c8:34:83:fe:54:53:e4:ff:98:e7:7b:c4:fe:df:7e:46:ac:
         f5:d7:14:0f:e7:22:f9:87:e4:92:53:3c:6b:fe:af:4e:e7:bc:
         98:bf:0d:9f:39:51:64:f3:01:f5:b5:17:12:0f:6f:8e:9f:39:
         60:4e:65:26:27:62:13:ca:55:f8:f2:47:b7:b5:c4:51:a2:27:
         16:d6:b8:13:84:d6:7a:0a:c9:3f:e0:0c:0e:30:b3:99:fa:e2:
         88:9e:cc:ea:04:ec:ec:5d:22:34:59:a2:46:79:40:1f:86:d4:
         59:a9:39:59:a0:09:a4:0a:fb:15:89:16:10:71:59:7f:22:a3:
         78:9f:79:7e:04:84:10:3d:f3:38:f1:0e:ad:65:1b:42:27:3e:
         75:0a:3f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:47:36 2025 by rpki-client