Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/bb330b77-f6a5-3349-83dd-00364aa65fa2.roa
File:                     bb330b77-f6a5-3349-83dd-00364aa65fa2.roa (raw, json)
Hash identifier:          Z0BKZL4ekf66edu54fjqEA1ejR208RnJ7F1odsZfwm4=
Subject key identifier:   77:48:8D:14:60:CB:CE:88:CD:27:C3:70:0B:7F:6E:07:19:B2:6B:03
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F4328584A6DBB3D157B61F8869176AAC0
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/bb330b77-f6a5-3349-83dd-00364aa65fa2.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     396982
IP address blocks:        50.116.64.0/23 maxlen: 23
                          50.116.66.0/23 maxlen: 23
                          50.116.68.0/22 maxlen: 22
                          50.116.80.0/22 maxlen: 22
                          50.116.84.0/23 maxlen: 23
                          50.116.86.0/23 maxlen: 23
                          50.116.88.0/22 maxlen: 22
                          50.116.92.0/22 maxlen: 22
                          50.116.112.0/23 maxlen: 23
                          50.116.124.0/22 maxlen: 22
                          96.125.162.0/23 maxlen: 23
                          96.125.174.0/23 maxlen: 23
                          108.167.132.0/24 maxlen: 24
                          108.167.133.0/24 maxlen: 24
                          108.167.140.0/22 maxlen: 22
                          108.167.144.0/23 maxlen: 23
                          108.167.146.0/23 maxlen: 23
                          108.167.148.0/23 maxlen: 23
                          108.167.151.0/24 maxlen: 24
                          108.167.152.0/22 maxlen: 22
                          108.167.156.0/22 maxlen: 22
                          108.167.164.0/23 maxlen: 23
                          108.167.166.0/24 maxlen: 24
                          108.167.168.0/22 maxlen: 22
                          108.167.188.0/24 maxlen: 24
                          108.167.190.0/23 maxlen: 23
                          108.179.192.0/23 maxlen: 23
                          108.179.194.0/24 maxlen: 24
                          108.179.200.0/23 maxlen: 23
                          108.179.212.0/22 maxlen: 22
                          108.179.228.0/22 maxlen: 22
                          108.179.241.0/24 maxlen: 24
                          108.179.242.0/23 maxlen: 23
                          108.179.246.0/23 maxlen: 23
                          108.179.252.0/23 maxlen: 23
                          108.179.254.0/24 maxlen: 24
                          192.185.2.0/23 maxlen: 23
                          192.185.4.0/23 maxlen: 23
                          192.185.12.0/22 maxlen: 22
                          192.185.16.0/21 maxlen: 21
                          192.185.24.0/21 maxlen: 21
                          192.185.32.0/20 maxlen: 20
                          192.185.48.0/21 maxlen: 21
                          192.185.56.0/23 maxlen: 23
                          192.185.58.0/23 maxlen: 23
                          192.185.60.0/22 maxlen: 22
                          192.185.64.0/21 maxlen: 21
                          192.185.72.0/21 maxlen: 21
                          192.185.81.0/24 maxlen: 24
                          192.185.82.0/23 maxlen: 23
                          192.185.84.0/22 maxlen: 22
                          192.185.88.0/21 maxlen: 21
                          192.185.96.0/21 maxlen: 21
                          192.185.104.0/21 maxlen: 21
                          192.185.112.0/21 maxlen: 21
                          192.185.120.0/21 maxlen: 21
                          192.185.129.0/24 maxlen: 24
                          192.185.131.0/24 maxlen: 24
                          192.185.132.0/23 maxlen: 23
                          192.185.136.0/21 maxlen: 21
                          192.185.179.0/24 maxlen: 24
                          192.185.180.0/22 maxlen: 22
                          192.185.184.0/21 maxlen: 21
                          192.185.192.0/21 maxlen: 21
                          192.185.202.0/23 maxlen: 23
                          192.232.216.0/21 maxlen: 21
                          192.254.224.0/20 maxlen: 20
                          192.254.250.0/23 maxlen: 23
                          216.172.168.0/23 maxlen: 23
                          216.172.172.0/23 maxlen: 23
                          216.172.175.0/24 maxlen: 24
                          216.172.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:3d:15:7b:61:f8:86:91:76:aa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=0d7b32db-deb6-4b1c-8197-3104ed57e33f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:79:60:c6:df:59:36:4f:f5:58:96:40:4a:a7:
                    45:4d:a6:fb:4b:b1:2f:92:26:bf:dd:cc:ec:52:8f:
                    d4:b4:09:ee:a0:d7:fc:07:0a:35:bd:72:9e:49:be:
                    b9:93:8f:ee:b0:cf:4f:72:35:f0:1e:16:7c:f8:ba:
                    52:9e:66:b9:d9:3a:ad:e5:20:0b:8c:d0:f8:a9:84:
                    a5:10:95:a3:67:de:6c:0f:c4:ca:66:4e:d5:ac:3b:
                    42:36:70:cd:08:96:10:09:93:15:c8:89:ec:dc:75:
                    b6:4c:86:1d:30:dd:bc:cc:82:b9:96:a8:6f:fe:c6:
                    2e:0b:58:e0:1e:65:39:ce:92:09:b6:b9:d0:96:9b:
                    06:28:3f:bb:66:8c:99:41:a0:ad:82:db:70:e4:d5:
                    80:c1:c0:09:f3:5f:7f:9a:28:d7:e5:41:14:76:11:
                    24:89:b9:95:c7:b2:77:03:7c:f1:bf:f8:61:42:90:
                    83:b6:b6:d7:ca:fc:18:4a:4c:97:86:1e:6d:43:70:
                    e2:a0:57:bf:00:d8:94:01:b8:39:af:a9:07:83:53:
                    59:06:da:97:c6:56:af:bd:4d:b6:5c:57:ff:e7:ee:
                    fe:dc:de:f2:4b:ac:e7:b4:4e:f2:c9:43:49:d9:f1:
                    90:78:a6:aa:77:f2:67:3f:6f:7b:ec:84:10:3f:24:
                    ca:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:48:8D:14:60:CB:CE:88:CD:27:C3:70:0B:7F:6E:07:19:B2:6B:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/bb330b77-f6a5-3349-83dd-00364aa65fa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.116.64.0/21
                  50.116.80.0/20
                  50.116.112.0/23
                  50.116.124.0/22
                  96.125.162.0/23
                  96.125.174.0/23
                  108.167.132.0/23
                  108.167.140.0-108.167.149.255
                  108.167.151.0-108.167.159.255
                  108.167.164.0-108.167.166.255
                  108.167.168.0/22
                  108.167.188.0/24
                  108.167.190.0/23
                  108.179.192.0-108.179.194.255
                  108.179.200.0/23
                  108.179.212.0/22
                  108.179.228.0/22
                  108.179.241.0-108.179.243.255
                  108.179.246.0/23
                  108.179.252.0-108.179.254.255
                  192.185.2.0-192.185.5.255
                  192.185.12.0-192.185.79.255
                  192.185.81.0-192.185.127.255
                  192.185.129.0/24
                  192.185.131.0-192.185.133.255
                  192.185.136.0/21
                  192.185.179.0-192.185.199.255
                  192.185.202.0/23
                  192.232.216.0/21
                  192.254.224.0/20
                  192.254.250.0/23
                  216.172.168.0/23
                  216.172.172.0/23
                  216.172.175.0/24
                  216.172.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:7d:07:35:d3:ef:72:89:49:3c:63:c3:f2:0f:4f:42:3c:a1:
         fa:9c:7c:b1:6e:df:5b:f9:b4:49:66:50:4c:d3:14:1d:70:5c:
         97:67:f9:e7:e5:18:30:b6:bf:b2:d5:df:d7:79:a0:53:da:e1:
         6d:4c:96:f4:c9:bb:42:e9:7f:13:a4:16:b3:c7:31:66:9a:c3:
         6d:ee:72:fd:8a:5d:75:a6:fc:62:fe:4d:43:a0:39:74:12:29:
         10:87:ae:46:00:ff:4c:19:f1:c3:78:9e:59:23:89:62:97:bd:
         42:0c:a5:e7:5c:17:85:a3:30:4b:06:28:b0:80:c3:15:81:8b:
         82:e5:4b:1d:f6:fd:12:1c:81:9d:4f:b1:6d:7a:2f:c6:8a:c3:
         2a:f6:5a:24:b6:12:08:56:fa:93:5e:23:91:f5:a3:42:6e:c0:
         aa:34:ae:0c:73:5c:7e:5a:69:2d:92:e8:02:6a:9f:7b:1b:e3:
         00:0e:17:11:2e:49:97:3e:aa:48:de:1d:35:90:78:2a:ed:d4:
         8c:e8:1b:83:ac:71:60:e3:b7:a0:46:91:72:62:5e:a5:98:c9:
         3a:f5:ed:4f:db:e8:9a:e6:40:65:57:3a:20:bb:bd:e2:ca:2e:
         86:99:b0:fc:a1:a3:58:34:ce:52:a5:25:49:c5:98:03:82:b7:
         08:51:fd:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 01:02:06 2025 by rpki-client