Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/50d9c464-06a9-3c71-81b4-4dc3c759679a.roa
File:                     50d9c464-06a9-3c71-81b4-4dc3c759679a.roa (raw, json)
Hash identifier:          GivyNOyXazH9RQbkihi/FidGpNimLd0Oh25HBFh51/I=
Subject key identifier:   01:20:48:84:21:81:4A:07:09:DE:E9:A7:A9:8C:89:7F:49:9F:E7:D7
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584A8410E1BB68DB9B258231E8D8
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/50d9c464-06a9-3c71-81b4-4dc3c759679a.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     14813
IP address blocks:        72.51.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:e1:bb:68:db:9b:25:82:31:e8:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=eb4db549-6acc-4f24-afe2-afa7a74ea995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:82:6c:25:b5:da:50:78:a6:46:4d:6d:dc:3e:
                    8f:50:ac:e7:9f:26:e3:ea:71:91:b0:19:65:72:98:
                    64:58:01:00:12:18:e8:16:a0:44:95:56:c0:b1:65:
                    71:16:d5:b5:69:4b:8e:bc:56:b2:7e:40:45:a3:7d:
                    61:56:e6:b2:90:47:9c:e5:fb:af:ac:99:db:f9:00:
                    65:fc:93:45:70:c4:89:38:31:4b:ee:37:b7:ec:b8:
                    83:33:98:a7:9f:63:30:5e:96:98:23:0d:24:61:46:
                    c2:a3:9c:17:d5:90:ec:a4:26:ad:ac:f7:63:2e:92:
                    95:cf:4c:69:b2:d4:7f:c6:33:b6:f5:82:37:52:90:
                    d6:1b:f9:e1:82:c7:df:d0:dc:3e:34:c3:e5:45:23:
                    f1:3e:85:84:42:ff:66:32:51:66:95:03:b2:e6:49:
                    3b:b8:56:04:70:2a:c1:61:f7:47:2d:07:04:58:72:
                    f3:e3:6e:9a:12:45:1c:60:6c:ec:c2:5e:60:6c:f4:
                    1c:79:25:e3:95:77:91:6b:e6:62:db:99:d6:be:71:
                    34:27:32:44:b2:0c:79:ac:18:49:0f:ce:97:61:38:
                    e8:d0:df:b2:81:6e:87:86:5a:dc:4b:f7:70:3b:e7:
                    29:9a:f4:43:7a:b3:e6:7d:82:b5:96:ae:99:6b:47:
                    ea:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:20:48:84:21:81:4A:07:09:DE:E9:A7:A9:8C:89:7F:49:9F:E7:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/50d9c464-06a9-3c71-81b4-4dc3c759679a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.51.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:67:80:52:90:1b:78:09:2a:a4:1f:dd:f3:8e:29:e9:96:18:
         5e:30:e3:c9:c4:42:e8:6a:3c:87:e7:a6:ad:10:bc:74:18:a6:
         e2:0f:e7:43:44:d7:ee:e5:2c:4f:cd:f0:7b:e7:8d:1f:c0:9a:
         31:75:b9:f7:ef:0b:d0:14:67:20:7c:10:84:82:a4:7d:7d:b0:
         44:6d:0f:dc:b1:7c:43:e8:00:72:0f:a8:85:4a:ae:9e:b1:d0:
         ed:81:0a:bf:37:32:e6:29:83:07:9b:dc:c2:16:ac:c0:56:2d:
         ce:89:8b:b7:de:19:47:3b:10:93:c0:a3:60:16:78:32:e8:4b:
         6d:62:82:c4:85:53:15:b6:25:e9:9a:62:13:fb:f5:73:b8:d0:
         cf:76:64:60:0e:5a:e9:1d:26:0a:9b:1c:80:37:24:2b:06:d0:
         19:46:5a:ae:6a:cb:27:5d:ac:1c:46:66:69:ad:73:72:a3:52:
         c9:9b:7e:cd:9c:65:60:cf:16:53:15:12:e4:d7:3c:68:3a:88:
         ac:6b:57:2d:72:53:fb:ee:0a:2a:54:92:ce:a7:45:a1:77:46:
         7b:fc:f6:cc:90:bb:16:6a:c3:36:54:b7:ee:0d:7d:37:52:fb:
         ab:2c:f6:62:65:dd:65:c2:ee:05:66:d7:36:f4:3d:94:12:49:
         2f:e5:63:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEOG7aNubJYIx6NgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3
MTk1MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
ZWI0ZGI1NDktNmFjYy00ZjI0LWFmZTItYWZhN2E3NGVhOTk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoJsJbXaUHimRk1t3D6PUKznnybj6nGRsBll
cphkWAEAEhjoFqBElVbAsWVxFtW1aUuOvFayfkBFo31hVuaykEec5fuvrJnb+QBl
/JNFcMSJODFL7je37LiDM5inn2MwXpaYIw0kYUbCo5wX1ZDspCatrPdjLpKVz0xp
stR/xjO29YI3UpDWG/nhgsff0Nw+NMPlRSPxPoWEQv9mMlFmlQOy5kk7uFYEcCrB
YfdHLQcEWHLz426aEkUcYGzswl5gbPQceSXjlXeRa+Zi25nWvnE0JzJEsgx5rBhJ
D86XYTjo0N+ygW6HhlrcS/dwO+cpmvRDerPmfYK1lq6Za0fqewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAEgSIQhgUoHCd7pp6mMiX9Jn+fXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0
MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvNTBkOWM0NjQtMDZhOS0z
YzcxLTgxYjQtNGRjM2M3NTk2NzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk
YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy
NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5
MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDNjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIlngFKQG3gJKqQf3fOOKemWGF4w48nEQuhqPIfnpq0QvHQYpuIP50NE
1+7lLE/N8HvnjR/AmjF1uffvC9AUZyB8EISCpH19sERtD9yxfEPoAHIPqIVKrp6x
0O2BCr83MuYpgweb3MIWrMBWLc6Ji7feGUc7EJPAo2AWeDLoS21igsSFUxW2Jema
YhP79XO40M92ZGAOWukdJgqbHIA3JCsG0BlGWq5qyyddrBxGZmmtc3KjUsmbfs2c
ZWDPFlMVEuTXPGg6iKxrVy1yU/vuCipUks6nRaF3Rnv89syQuxZqwzZUt+4NfTdS
+6ss9mJl3WXC7gVm1zb0PZQSSS/lY7Y=
-----END CERTIFICATE-----
Generated at Sat Jul 26 23:50:54 2025 by rpki-client