Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/f72adc35-9eb4-3118-8c85-285ff915009f.roa
File:                     f72adc35-9eb4-3118-8c85-285ff915009f.roa (raw, json)
Hash identifier:          LDw9K6tMsc+RGj/s6+xLlAXNG1DOSywwurE0TTD2P9U=
Subject key identifier:   89:5B:04:B2:DD:44:E8:E2:A6:54:11:43:19:4D:E7:D9:FD:A9:A7:84
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F4328584A6290937A03FCEF5AC3CC1E60
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/f72adc35-9eb4-3118-8c85-285ff915009f.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        50.116.96.0/21 maxlen: 21
                          96.125.168.0/22 maxlen: 22
                          108.179.208.0/22 maxlen: 22
                          108.179.216.0/21 maxlen: 21
                          198.154.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:93:7a:03:fc:ef:5a:c3:cc:1e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=e10348c9-8f41-4912-bb86-68b55567067c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ee:e4:ef:c5:df:e8:71:49:ba:c1:05:64:c7:
                    07:79:4a:c9:2c:9b:25:b3:6d:75:90:14:7b:f2:ac:
                    a7:9d:20:58:fe:cd:6d:d5:23:e9:01:d1:90:21:29:
                    12:c7:9b:8e:56:61:cd:f1:0f:23:51:9b:64:48:fc:
                    17:96:0b:d6:bf:50:91:5c:75:b3:d2:30:f4:c0:52:
                    7d:08:11:1d:f1:10:b1:b4:7a:b8:b2:d4:6b:30:97:
                    b4:97:e1:39:d1:33:19:59:a3:ec:2f:4e:78:c4:62:
                    77:55:df:30:cb:03:dd:ad:09:35:ba:f5:00:1c:17:
                    55:ab:e4:72:f4:b2:d3:8d:73:0e:33:eb:3b:f9:af:
                    7d:4d:4b:3a:6c:fd:4a:81:8d:a6:cf:40:25:da:44:
                    22:de:c2:ed:75:16:df:40:06:84:27:92:e3:d4:17:
                    3d:e0:ee:a4:81:20:af:b1:2e:d9:f8:68:1a:ed:3f:
                    51:74:8a:ec:12:c4:3c:db:cc:28:43:87:29:3e:0e:
                    1f:c4:f3:9a:70:e1:e7:6b:ef:d0:e9:ae:b2:fb:0b:
                    ae:a8:67:1a:dd:fe:18:19:5a:3a:a0:0b:9d:30:e5:
                    5f:d9:1b:df:a8:06:0b:06:9b:fe:d9:7e:96:71:2f:
                    30:dc:93:3d:99:ed:bd:bc:c3:20:ee:ac:2c:95:4f:
                    64:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:5B:04:B2:DD:44:E8:E2:A6:54:11:43:19:4D:E7:D9:FD:A9:A7:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/f72adc35-9eb4-3118-8c85-285ff915009f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.116.96.0/21
                  96.125.168.0/22
                  108.179.208.0/22
                  108.179.216.0/21
                  198.154.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:53:68:d0:1d:a7:34:85:ec:fe:e3:8e:70:a3:cb:21:72:a3:
         cd:f1:61:8a:b4:65:cb:26:66:8d:5a:99:d1:62:24:2d:3f:ce:
         86:76:7c:0c:fe:05:10:49:ca:65:7c:dd:5d:f6:64:8d:5d:62:
         cf:48:b2:ab:74:26:1a:31:9f:85:1e:1f:d9:38:26:1e:f4:81:
         b3:27:3a:80:72:09:99:94:7c:7e:c7:03:c0:93:93:bd:51:42:
         fa:70:65:28:1d:51:8a:cf:5b:56:f9:4c:6f:b0:7a:7e:8f:ec:
         c9:c1:6e:84:f0:54:d2:64:5b:8a:7d:c2:67:c4:1d:e2:1a:1a:
         bb:21:43:88:58:3d:97:64:81:c4:97:80:8c:8e:54:ea:4e:f5:
         f0:39:93:52:af:d8:60:e9:ef:c9:5c:8c:1d:c3:7c:8c:6d:01:
         24:7e:d3:cb:5c:7f:af:b7:54:78:7c:31:d2:0d:7a:c7:e8:ae:
         96:4b:74:3e:be:96:1f:2e:f4:3b:64:ed:8e:b8:53:ce:90:03:
         98:50:43:18:99:41:2a:5f:5a:02:34:a3:44:2c:47:76:a2:88:
         06:f1:df:2a:c3:87:0a:8d:3e:30:52:a6:d5:d2:a4:76:85:f2:
         2e:30:66:90:53:27:c7:db:f6:a7:3d:5f:5d:76:7c:a5:d4:8c:
         16:14:ac:2a
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEpikJN6A/zvWsPMHmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODM1MTUyYzItMmVkOC00MTUxLThmODItYWM5NDA3MzM1
YjJjMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk
ZTEwMzQ4YzktOGY0MS00OTEyLWJiODYtNjhiNTU1NjcwNjdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApu7k78Xf6HFJusEFZMcHeUrJLJsls211kBR7
8qynnSBY/s1t1SPpAdGQISkSx5uOVmHN8Q8jUZtkSPwXlgvWv1CRXHWz0jD0wFJ9
CBEd8RCxtHq4stRrMJe0l+E50TMZWaPsL054xGJ3Vd8wywPdrQk1uvUAHBdVq+Ry
9LLTjXMOM+s7+a99TUs6bP1KgY2mz0Al2kQi3sLtdRbfQAaEJ5Lj1Bc94O6kgSCv
sS7Z+Gga7T9RdIrsEsQ828woQ4cpPg4fxPOacOHna+/Q6a6y+wuuqGca3f4YGVo6
oAudMOVf2RvfqAYLBpv+2X6WcS8w3JM9me29vMMg7qwslU9kQQIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFIlbBLLdROjiplQRQxlN59n9qaeEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84MzUx
NTJjMi0yZWQ4LTQxNTEtOGY4Mi1hYzk0MDczMzViMmMvZjcyYWRjMzUtOWViNC0z
MTE4LThjODUtMjg1ZmY5MTUwMDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODM1MTUyYzItMmVkOC00MTUxLThm
ODItYWM5NDA3MzM1YjJjLzgzNTE1MmMyLTJlZDgtNDE1MS04ZjgyLWFjOTQwNzMz
NWIyYy5jcmwwHwYDVR0jBBgwFoAUip902Uy3YwUwNo8P7EWat+Zpdd4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy84MzUxNTJjMi0yZWQ4LTQxNTEtOGY4Mi1hYzk0
MDczMzViMmMuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQDMnRgAwQC
YH2oAwQCbLPQAwQDbLPYAwQFxprgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEZTaNAdpzSF7P7jjnCjyyFy
o83xYYq0ZcsmZo1amdFiJC0/zoZ2fAz+BRBJymV83V32ZI1dYs9Isqt0Jhoxn4Ue
H9k4Jh70gbMnOoByCZmUfH7HA8CTk71RQvpwZSgdUYrPW1b5TG+wen6P7MnBboTw
VNJkW4p9wmfEHeIaGrshQ4hYPZdkgcSXgIyOVOpO9fA5k1Kv2GDp78lcjB3DfIxt
ASR+08tcf6+3VHh8MdINesforpZLdD6+lh8u9Dtk7Y64U86QA5hQQxiZQSpfWgI0
o0QsR3aiiAbx3yrDhwqNPjBSptXSpHaF8i4wZpBTJ8fb9qc9X112fKXUjBYUrCo=
-----END CERTIFICATE-----
Generated at Sat Jul 12 01:18:41 2025 by rpki-client