Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/50d9c0da-ec47-3718-bcba-cafd486c3315.roa
File:                     50d9c0da-ec47-3718-bcba-cafd486c3315.roa (raw, json)
Hash identifier:          st7ThWh4J9zHIMLd15d1/+1InUriSOpmDAp1D3qc9+w=
Subject key identifier:   5A:1B:D7:B3:56:9D:3F:0A:03:24:C8:86:5C:AF:90:8A:A1:54:06:86
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36D520A7F4349C2287C800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/50d9c0da-ec47-3718-bcba-cafd486c3315.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     701
IP address blocks:        65.249.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:d5:20:a7:f4:34:9c:22:87:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=48bd4a6d-e7cc-46ce-99e3-d74ca9b84087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5a:c4:1c:d2:59:c1:54:30:e7:6a:71:40:0f:
                    67:7b:f6:00:09:07:21:0d:35:72:d3:6d:78:ad:e2:
                    ac:3b:b0:af:e0:d4:02:5a:fc:61:8e:40:4d:ac:4a:
                    a2:d1:56:f3:cb:12:43:1b:b1:3e:f3:5c:ea:ec:e8:
                    5d:e5:54:d5:07:8c:62:9b:b3:a2:de:a0:9f:3b:f1:
                    07:4f:ee:b1:03:64:a7:42:14:99:db:30:cc:4c:e2:
                    f8:a1:10:01:e4:00:ee:b4:c5:47:cf:e9:49:7b:36:
                    c1:04:59:3e:b0:a7:01:af:a7:0f:d1:92:ec:3e:51:
                    d3:bb:f6:a4:28:f1:fa:48:45:32:a6:21:a5:65:ee:
                    1f:26:a2:ba:58:60:97:41:28:0d:39:68:79:48:49:
                    f3:8b:95:d2:be:a8:10:d5:64:c8:40:01:b3:b5:05:
                    aa:43:c0:ba:fd:5c:bf:ff:37:94:9a:14:73:fe:b3:
                    1b:aa:67:7e:62:7c:26:c9:9b:28:3f:35:17:40:68:
                    e0:f5:2d:eb:ed:12:22:8f:2f:83:e4:d2:3b:1d:86:
                    8f:e6:ad:f6:eb:92:d9:8a:bc:99:72:d0:a9:95:08:
                    7a:51:4c:f5:49:aa:cc:23:01:14:e8:29:1a:89:7f:
                    91:e0:1f:95:81:27:00:17:14:80:e7:36:e2:be:cb:
                    ba:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:1B:D7:B3:56:9D:3F:0A:03:24:C8:86:5C:AF:90:8A:A1:54:06:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/50d9c0da-ec47-3718-bcba-cafd486c3315.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.249.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:c6:63:a4:99:e0:73:c6:2b:88:1e:c1:50:7c:7c:99:4b:28:
         bb:ec:24:55:22:47:b0:78:76:12:bd:04:87:58:b3:28:9e:b2:
         79:e3:43:5a:89:e1:28:c8:35:40:c4:9c:ba:ca:e1:60:f7:ec:
         3b:3b:87:97:25:df:ac:29:c6:2b:5a:30:d3:b7:38:c5:ec:37:
         dd:06:bc:f8:11:94:ff:08:f3:2d:58:b8:58:ba:52:f7:b8:a7:
         c7:b0:5b:6d:43:29:0b:6d:b4:7d:93:57:74:b8:6c:86:38:bb:
         39:02:64:85:f0:30:ab:1c:d4:a8:b4:5a:81:ad:32:d3:72:77:
         4e:c8:5f:60:86:be:eb:1f:e3:3a:a4:0b:3f:df:14:db:33:40:
         8d:f3:37:d8:2e:97:43:8a:a2:bb:e5:63:7a:5b:84:6a:bb:a2:
         8b:f3:e2:e7:06:8b:61:b6:b7:f6:60:f1:66:64:91:b7:9c:28:
         a2:84:88:ac:e4:77:5f:c4:b3:f1:64:f6:78:ab:9c:40:b2:81:
         00:43:76:05:42:10:bd:28:42:12:59:cc:19:d4:cf:60:a3:f7:
         a7:fa:56:b0:69:df:f3:44:3c:33:6c:2f:55:1f:c9:c6:d5:16:
         47:e9:a0:6e:05:e2:bf:34:76:c4:23:d1:c4:3b:48:e9:3d:ea:
         7f:2d:50:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNtUgp/Q0nCKHyAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk
NDhiZDRhNmQtZTdjYy00NmNlLTk5ZTMtZDc0Y2E5Yjg0MDg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFrEHNJZwVQw52pxQA9ne/YACQchDTVy0214
reKsO7Cv4NQCWvxhjkBNrEqi0VbzyxJDG7E+81zq7Ohd5VTVB4xim7Oi3qCfO/EH
T+6xA2SnQhSZ2zDMTOL4oRAB5ADutMVHz+lJezbBBFk+sKcBr6cP0ZLsPlHTu/ak
KPH6SEUypiGlZe4fJqK6WGCXQSgNOWh5SEnzi5XSvqgQ1WTIQAGztQWqQ8C6/Vy/
/zeUmhRz/rMbqmd+YnwmyZsoPzUXQGjg9S3r7RIijy+D5NI7HYaP5q3265LZiryZ
ctCplQh6UUz1SarMIwEU6CkaiX+R4B+VgScAFxSA5zbivsu6XwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFob17NWnT8KAyTIhlyvkIqhVAaGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTBkOWMwZGEtZWM0Ny0z
NzE4LWJjYmEtY2FmZDQ4NmMzMzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQfn0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGvGY6SZ4HPGK4gewVB8fJlLKLvsJFUiR7B4dhK9BIdYsyiesnnjQ1qJ
4SjINUDEnLrK4WD37Ds7h5cl36wpxitaMNO3OMXsN90GvPgRlP8I8y1YuFi6Uve4
p8ewW21DKQtttH2TV3S4bIY4uzkCZIXwMKsc1Ki0WoGtMtNyd07IX2CGvusf4zqk
Cz/fFNszQI3zN9gul0OKorvlY3pbhGq7oovz4ucGi2G2t/Zg8WZkkbecKKKEiKzk
d1/Es/Fk9nirnECygQBDdgVCEL0oQhJZzBnUz2Cj96f6VrBp3/NEPDNsL1UfycbV
FkfpoG4F4r80dsQj0cQ7SOk96n8tUKQ=
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:13:38 2025 by rpki-client