Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/0a814e36-fe37-38ec-8bb7-4226458a1679.roa
File:                     0a814e36-fe37-38ec-8bb7-4226458a1679.roa (raw, json)
Hash identifier:          YFf1rRSibtiPRVwGXHwexzLwlku9fFPcWO7TcVzik2U=
Subject key identifier:   C5:1F:E7:A7:75:57:4B:B2:8C:10:DD:6C:D8:07:A3:CB:FB:38:EC:CE
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584A268AB43E2F92B6E5DD825080
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/0a814e36-fe37-38ec-8bb7-4226458a1679.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     29802
IP address blocks:        199.231.160.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:b4:3e:2f:92:b6:e5:dd:82:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=e9c33808-397e-444a-a5c9-56a56a825737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f0:80:7d:ea:7b:db:c6:77:60:1d:a3:46:4c:
                    4c:5b:69:17:74:af:0c:9a:53:2a:cb:96:3f:81:ca:
                    71:b7:2f:0a:a5:9b:48:70:24:84:59:6f:54:3e:46:
                    5d:d9:eb:3e:42:0d:aa:ee:14:eb:77:a7:12:5f:3c:
                    a1:ff:0e:9d:d1:98:28:3d:bf:eb:3f:47:fb:1f:82:
                    5b:a5:d8:cd:97:fd:99:8b:72:fe:69:5b:de:dc:44:
                    ea:6a:09:9c:9f:e9:18:67:27:3c:28:47:81:ea:25:
                    a3:83:0a:43:93:d9:58:ca:93:5a:bb:df:3e:da:db:
                    77:b8:0f:0a:f3:8a:9e:81:82:2b:55:59:0f:a2:2e:
                    89:f3:84:15:84:c6:61:5e:1c:be:10:d3:e0:70:98:
                    8a:dc:96:4f:62:97:6c:55:6b:cd:70:92:66:9d:e5:
                    9c:c5:a9:63:bb:b4:4d:78:06:c4:32:f6:01:c9:c7:
                    8d:e7:07:e9:13:d9:96:9c:98:1a:09:e2:12:f3:20:
                    05:57:83:72:ec:69:13:15:23:31:ce:8a:e9:da:17:
                    be:13:a9:08:28:56:8f:8e:5e:54:9f:d9:9e:50:7d:
                    37:de:c0:a5:ea:02:a9:02:07:bb:ed:d5:bd:b6:37:
                    75:1d:98:38:85:33:b9:b3:4c:86:96:0f:d6:e3:42:
                    b0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:1F:E7:A7:75:57:4B:B2:8C:10:DD:6C:D8:07:A3:CB:FB:38:EC:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/0a814e36-fe37-38ec-8bb7-4226458a1679.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.231.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:08:ca:64:9a:f1:9d:8d:1e:23:70:89:2f:31:66:1a:4f:a1:
         ba:fc:07:45:72:87:9d:54:3a:31:7a:fa:56:20:55:bb:24:f3:
         14:12:2a:a4:a9:44:49:0a:5d:8e:e6:1b:aa:42:c7:d5:c0:9c:
         1b:2f:90:91:05:b6:42:eb:3e:f4:6d:e5:a9:44:6e:33:ce:71:
         6a:ca:18:4a:70:fa:49:a0:ee:51:42:26:07:80:4e:dc:63:66:
         e2:d7:02:3e:f2:01:e0:e9:b7:f8:6a:89:c7:ad:82:16:6c:6a:
         13:3f:06:b9:c3:50:43:e9:35:5d:ac:2f:da:64:e7:30:c2:09:
         6f:c9:3b:05:2d:1f:19:bc:a5:c9:4a:91:b6:67:14:6d:f7:56:
         40:56:7e:f4:e4:d2:49:d1:25:5d:03:96:ea:44:21:b2:91:13:
         dd:a0:86:96:6f:32:82:59:8c:b9:a5:79:0e:15:74:32:a8:bd:
         ff:16:5e:15:2e:fb:04:48:d3:d4:49:5f:f7:24:10:f1:9d:f5:
         e1:20:d9:02:4c:38:e9:f0:bc:d2:02:0a:e4:f1:44:d8:c3:12:
         d6:8d:30:bb:39:6d:7c:26:af:92:c8:43:72:c5:f6:1b:6d:61:
         40:41:8c:39:da:61:f8:a7:f7:b8:31:5a:eb:2a:78:4d:92:c6:
         38:11:46:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomirQ+L5K25d2CUIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz
ZjFiMB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk
ZTljMzM4MDgtMzk3ZS00NDRhLWE1YzktNTZhNTZhODI1NzM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfCAfep728Z3YB2jRkxMW2kXdK8MmlMqy5Y/
gcpxty8KpZtIcCSEWW9UPkZd2es+Qg2q7hTrd6cSXzyh/w6d0ZgoPb/rP0f7H4Jb
pdjNl/2Zi3L+aVve3ETqagmcn+kYZyc8KEeB6iWjgwpDk9lYypNau98+2tt3uA8K
84qegYIrVVkPoi6J84QVhMZhXhy+ENPgcJiK3JZPYpdsVWvNcJJmneWcxalju7RN
eAbEMvYByceN5wfpE9mWnJgaCeIS8yAFV4Ny7GkTFSMxzorp2he+E6kIKFaPjl5U
n9meUH033sCl6gKpAge77dW9tjd1HZg4hTO5s0yGlg/W40KwWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMUf56d1V0uyjBDdbNgHo8v7OOzOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy
MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMGE4MTRlMzYtZmUzNy0z
OGVjLThiYjctNDIyNjQ1OGExNjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli
N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi
M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy
NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx+egMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAwIymSa8Z2NHiNwiS8xZhpPobr8B0Vyh51UOjF6+lYgVbsk8xQSKqSp
REkKXY7mG6pCx9XAnBsvkJEFtkLrPvRt5alEbjPOcWrKGEpw+kmg7lFCJgeATtxj
ZuLXAj7yAeDpt/hqicetghZsahM/BrnDUEPpNV2sL9pk5zDCCW/JOwUtHxm8pclK
kbZnFG33VkBWfvTk0knRJV0DlupEIbKRE92ghpZvMoJZjLmleQ4VdDKovf8WXhUu
+wRI09RJX/ckEPGd9eEg2QJMOOnwvNICCuTxRNjDEtaNMLs5bXwmr5LIQ3LF9htt
YUBBjDnaYfin97gxWusqeE2SxjgRRro=
-----END CERTIFICATE-----
Generated at Wed Jun 11 20:22:52 2025 by rpki-client