Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c75b412a-1d88-3830-ad50-cd7950cc3ab2.roa
File:                     c75b412a-1d88-3830-ad50-cd7950cc3ab2.roa (raw, json)
Hash identifier:          9gr2EMzLEuekphmmh7FgN3ltbDChoSMhrPknAScoNms=
Subject key identifier:   D3:3C:31:2E:C5:00:25:63:06:01:CC:1E:F9:ED:48:AC:38:5B:76:FB
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584A9D30E04AB049370713F01ED0
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c75b412a-1d88-3830-ad50-cd7950cc3ab2.roa
Signing time:             Wed 23 Jul 2025 13:01:02 +0000
ROA not before:           Wed 23 Jul 2025 13:01:02 +0000
ROA not after:            Tue 21 Oct 2025 13:01:02 +0000
asID:                     61317
IP address blocks:        94.72.178.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:30:e0:4a:b0:49:37:07:13:f0:1e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Jul 23 13:01:02 2025 GMT
            Not After : Oct 21 13:01:02 2025 GMT
        Subject: CN=847a919d-0ac6-4da5-9fe0-7371c7293865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c1:ca:67:18:5a:b6:fd:03:9d:6c:5c:49:86:
                    05:6f:bc:9e:41:83:97:dd:c8:52:f8:0c:a1:ec:35:
                    d0:fe:e4:e6:c2:fe:05:e8:20:b8:f8:8d:4e:d7:2c:
                    3c:8f:3c:57:fe:62:8d:00:fa:2b:c5:34:5b:ad:07:
                    86:1d:77:e8:be:78:24:5e:18:7e:5c:fb:64:e3:91:
                    2d:9f:a0:d5:ab:2b:1c:7b:dd:8c:79:02:f9:ad:27:
                    4c:c2:a1:8e:96:42:d3:76:23:fa:27:1f:fd:84:1a:
                    a8:7d:51:b1:4e:df:3c:75:fb:fb:59:d7:69:93:f9:
                    fa:6a:8c:93:fb:57:48:35:49:3b:77:0e:73:71:7c:
                    0b:5b:01:19:42:17:dc:0f:80:e7:83:b6:c2:13:47:
                    b1:60:f6:4f:78:e8:38:af:9f:86:f6:52:8a:7a:98:
                    94:76:6f:45:6c:ae:c5:64:e4:8e:c8:a8:58:0b:22:
                    66:cb:f0:42:79:fc:97:e2:ba:b3:f3:ea:7d:2a:fa:
                    23:92:2a:f3:71:9f:3f:10:01:63:3f:6c:aa:5b:28:
                    14:67:ba:e1:54:b1:5a:f7:be:a5:1b:3d:69:30:90:
                    29:34:32:b0:69:fc:78:48:59:97:51:09:76:41:6c:
                    24:b2:8a:f9:6f:08:6e:02:4f:0c:b3:3f:5f:58:37:
                    05:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:3C:31:2E:C5:00:25:63:06:01:CC:1E:F9:ED:48:AC:38:5B:76:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c75b412a-1d88-3830-ad50-cd7950cc3ab2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.72.178.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:fd:68:c1:83:a5:b8:87:7b:23:08:d5:85:7f:ef:b3:14:89:
         7e:d6:6e:44:2b:fd:ef:34:8a:23:6f:74:ff:3b:50:f4:31:af:
         b9:78:0b:f3:5e:66:cf:85:5c:17:71:58:02:c4:9a:b4:a4:dd:
         98:2d:27:d0:38:b1:c3:19:b9:4b:da:f3:37:28:0d:28:b5:3c:
         da:4e:15:56:d2:34:bc:65:30:4d:71:89:1f:6b:5e:ac:81:e4:
         e7:86:fa:11:f3:f7:40:49:ae:2f:03:51:bf:95:d0:45:64:30:
         8a:b1:f8:dc:cb:d4:79:a5:dd:82:0d:bd:58:64:af:34:12:70:
         50:8a:80:6b:ed:b5:f4:a8:0a:b3:09:f5:dc:07:b6:a9:ae:49:
         33:25:c5:77:4d:e1:f3:cb:9f:3d:ff:8e:b9:ac:05:2a:df:37:
         de:da:4f:2f:78:e7:ab:bc:9e:2f:63:c6:46:8d:49:d2:32:15:
         45:a7:57:aa:a8:c6:57:58:c0:f2:28:e1:2a:01:e3:d1:3a:31:
         0f:df:a3:d7:6f:8e:98:1c:3c:90:c2:6b:83:bf:a5:86:96:1b:
         87:87:3d:19:6a:03:75:3d:99:e1:40:4f:bb:c7:8c:54:e7:0f:
         25:ff:16:70:23:52:42:bc:f8:c9:4b:e3:7a:5a:a7:b4:91:79:
         bc:fe:d7:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMOBKsEk3BxPwHtAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz
ZjFiMB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk
ODQ3YTkxOWQtMGFjNi00ZGE1LTlmZTAtNzM3MWM3MjkzODY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcHKZxhatv0DnWxcSYYFb7yeQYOX3chS+Ayh
7DXQ/uTmwv4F6CC4+I1O1yw8jzxX/mKNAPorxTRbrQeGHXfovngkXhh+XPtk45Et
n6DVqysce92MeQL5rSdMwqGOlkLTdiP6Jx/9hBqofVGxTt88dfv7Wddpk/n6aoyT
+1dINUk7dw5zcXwLWwEZQhfcD4Dng7bCE0exYPZPeOg4r5+G9lKKepiUdm9FbK7F
ZOSOyKhYCyJmy/BCefyX4rqz8+p9KvojkirzcZ8/EAFjP2yqWygUZ7rhVLFa976l
Gz1pMJApNDKwafx4SFmXUQl2QWwksor5bwhuAk8Msz9fWDcFjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNM8MS7FACVjBgHMHvntSKw4W3b7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy
MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvYzc1YjQxMmEtMWQ4OC0z
ODMwLWFkNTAtY2Q3OTUwY2MzYWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli
N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi
M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy
NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXkiyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEj9aMGDpbiHeyMI1YV/77MUiX7WbkQr/e80iiNvdP87UPQxr7l4C/Ne
Zs+FXBdxWALEmrSk3ZgtJ9A4scMZuUva8zcoDSi1PNpOFVbSNLxlME1xiR9rXqyB
5OeG+hHz90BJri8DUb+V0EVkMIqx+NzL1Hml3YINvVhkrzQScFCKgGvttfSoCrMJ
9dwHtqmuSTMlxXdN4fPLnz3/jrmsBSrfN97aTy9456u8ni9jxkaNSdIyFUWnV6qo
xldYwPIo4SoB49E6MQ/fo9dvjpgcPJDCa4O/pYaWG4eHPRlqA3U9meFAT7vHjFTn
DyX/FnAjUkK8+MlL43pap7SRebz+16o=
-----END CERTIFICATE-----
Generated at Fri Jul 25 01:05:12 2025 by rpki-client