Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/83fddd14-2dd9-3b15-a71c-194b34405f05.roa
File:                     83fddd14-2dd9-3b15-a71c-194b34405f05.roa (raw, json)
Hash identifier:          zho/hoKGeqNQGyW8mzA89e6rhQkrpBqjB12ghj8BnoI=
Subject key identifier:   02:97:6B:2B:4A:B7:39:C0:B1:9E:91:02:7B:8C:C0:7C:47:00:AE:97
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584AFEE6A40ABE9B476E25018500
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/83fddd14-2dd9-3b15-a71c-194b34405f05.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     29802
IP address blocks:        162.213.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Sep 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:a4:0a:be:9b:47:6e:25:01:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=da3e068e-727c-4d31-81e6-820486f556af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1a:01:ee:b4:8a:c6:7f:e6:58:34:45:8d:d8:
                    3a:4b:46:a8:15:56:f5:3b:cc:59:94:2c:b5:73:fe:
                    88:7a:bc:12:9f:79:37:19:e9:17:d0:12:b3:5d:d8:
                    42:b1:e8:89:65:49:93:ae:97:51:e3:0b:dc:a0:6f:
                    a5:9a:4d:b0:ea:ef:af:98:86:26:80:d6:ce:f6:4b:
                    b4:58:e3:2b:2e:d0:79:d1:f4:51:73:3f:07:6c:16:
                    9f:be:45:26:f0:9c:64:9f:79:e5:65:cd:41:93:ba:
                    be:af:df:6f:ee:54:fc:79:bf:79:a9:16:d0:08:3f:
                    16:f1:2c:7c:36:5b:72:3a:70:d4:a1:7b:85:9c:4d:
                    99:38:88:81:51:64:30:90:ee:82:50:aa:1b:94:ce:
                    56:68:a6:e9:94:ce:21:c4:a6:3b:43:2a:50:60:db:
                    d6:32:34:a3:19:7d:f6:6c:34:4c:20:ba:2e:f5:27:
                    4c:a8:0e:33:bf:44:6b:08:ff:41:e1:49:4b:fe:2b:
                    df:7c:c5:c3:30:3c:28:5d:45:8a:16:ac:a0:ba:7f:
                    6d:e3:49:62:51:6d:20:6f:42:a2:fa:fa:49:28:2c:
                    79:74:c3:85:b6:6f:5e:43:81:1f:88:77:8b:1e:9a:
                    b4:db:05:ca:6e:08:af:8d:41:a2:44:d2:f4:c8:51:
                    1f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:97:6B:2B:4A:B7:39:C0:B1:9E:91:02:7B:8C:C0:7C:47:00:AE:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/83fddd14-2dd9-3b15-a71c-194b34405f05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.213.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:9c:57:cf:da:93:20:0b:66:56:b6:b9:36:76:52:2a:e8:62:
         85:71:c4:4b:5f:2f:fa:9d:1e:bb:8c:eb:42:b5:6b:6e:e4:7f:
         8e:db:bf:8c:3a:29:0c:49:45:f6:15:f9:70:5a:4d:05:20:b5:
         9c:9a:44:db:98:65:c8:62:4d:9a:9d:f2:37:a7:18:cd:df:95:
         fe:28:29:86:65:b1:72:00:15:2a:43:f8:e6:29:5d:3d:d3:5e:
         72:4b:5a:9e:d5:81:17:83:51:cd:99:f6:19:2c:a6:72:8d:53:
         94:3e:37:dc:04:02:c8:56:24:04:b9:6f:b7:c9:7e:da:ab:cd:
         3f:2a:1b:95:c9:72:09:b7:6a:74:bf:5d:39:af:bc:2c:ec:3a:
         01:5b:b6:df:e3:a5:3b:5a:8b:50:b2:2f:ce:b0:43:81:8a:54:
         24:ea:54:b5:db:77:90:cb:67:b3:6b:e5:37:c1:05:9a:0c:c0:
         b0:34:db:81:fc:c9:fb:38:d7:d4:f6:a7:ca:f6:2a:f7:d3:f3:
         fe:03:18:97:17:65:81:7c:a7:b6:64:1f:78:1a:6f:4a:ba:8b:
         f5:e6:c0:28:25:f8:ac:25:61:c0:7f:64:72:eb:29:40:85:33:
         0b:b5:94:f0:d0:81:94:c4:3b:58:4c:79:88:e0:be:4f:a9:57:
         75:ea:9d:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5qQKvptHbiUBhQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz
ZjFiMB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk
ZGEzZTA2OGUtNzI3Yy00ZDMxLTgxZTYtODIwNDg2ZjU1NmFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBoB7rSKxn/mWDRFjdg6S0aoFVb1O8xZlCy1
c/6IerwSn3k3GekX0BKzXdhCseiJZUmTrpdR4wvcoG+lmk2w6u+vmIYmgNbO9ku0
WOMrLtB50fRRcz8HbBafvkUm8Jxkn3nlZc1Bk7q+r99v7lT8eb95qRbQCD8W8Sx8
NltyOnDUoXuFnE2ZOIiBUWQwkO6CUKoblM5WaKbplM4hxKY7QypQYNvWMjSjGX32
bDRMILou9SdMqA4zv0RrCP9B4UlL/ivffMXDMDwoXUWKFqygun9t40liUW0gb0Ki
+vpJKCx5dMOFtm9eQ4EfiHeLHpq02wXKbgivjUGiRNL0yFEfPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAKXaytKtznAsZ6RAnuMwHxHAK6XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy
MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvODNmZGRkMTQtMmRkOS0z
YjE1LWE3MWMtMTk0YjM0NDA1ZjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli
N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi
M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy
NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDotXAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABKcV8/akyALZla2uTZ2UiroYoVxxEtfL/qdHruM60K1a27kf47bv4w6
KQxJRfYV+XBaTQUgtZyaRNuYZchiTZqd8jenGM3flf4oKYZlsXIAFSpD+OYpXT3T
XnJLWp7VgReDUc2Z9hkspnKNU5Q+N9wEAshWJAS5b7fJftqrzT8qG5XJcgm3anS/
XTmvvCzsOgFbtt/jpTtai1CyL86wQ4GKVCTqVLXbd5DLZ7Nr5TfBBZoMwLA024H8
yfs419T2p8r2KvfT8/4DGJcXZYF8p7ZkH3gab0q6i/XmwCgl+KwlYcB/ZHLrKUCF
Mwu1lPDQgZTEO1hMeYjgvk+pV3XqnYA=
-----END CERTIFICATE-----
Generated at Sun Sep 14 13:53:24 2025 by rpki-client