Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/8a510825-83bf-3885-90a1-e8e8bfb13779.roa
File:                     8a510825-83bf-3885-90a1-e8e8bfb13779.roa (raw, json)
Hash identifier:          qz4dt/qKOTPjYxe2KRuamCqE6LrHsjULnT5V8t8gZos=
Subject key identifier:   6B:2F:18:34:CD:14:B7:82:3D:D8:93:D8:07:7B:87:76:70:34:9D:61
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584A1B5FFEC9B4E3577CB65EA600
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/8a510825-83bf-3885-90a1-e8e8bfb13779.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     29802
IP address blocks:        23.227.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:5f:fe:c9:b4:e3:57:7c:b6:5e:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=c819557b-a49d-4ce6-8dd1-e07b2ad59b53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7a:c5:5b:31:8b:d3:b1:53:40:de:63:06:ce:
                    b2:6e:6a:02:56:da:27:37:7d:02:44:ae:2b:96:4d:
                    46:47:1e:87:4e:6c:fd:42:54:d1:3a:02:33:e8:0d:
                    aa:a2:26:f8:c8:a1:1b:77:55:b5:26:4a:f3:b4:6e:
                    5d:71:40:b3:99:bf:4b:01:de:d0:12:8a:3a:bb:49:
                    58:2e:f4:86:1e:a5:ab:51:5e:cb:5b:3e:ea:44:24:
                    4d:c8:fd:74:5b:fd:df:86:c8:9e:04:92:26:ff:ce:
                    dc:96:05:de:15:dc:5d:b7:43:ea:d5:57:45:8e:a7:
                    58:1f:14:50:5b:fa:68:ea:07:e8:a5:d3:1f:ac:a1:
                    68:c7:08:66:aa:3c:bc:9b:f2:57:0d:24:ba:b3:cc:
                    84:ad:2b:8f:41:0f:70:5a:a6:76:e9:2a:ee:d0:69:
                    a3:ae:50:b0:c2:f9:9a:d2:74:e2:f9:fb:e6:87:87:
                    9e:0c:86:87:05:18:dc:38:3e:e5:2b:fe:24:0d:47:
                    ff:19:81:14:f8:5f:22:7f:ae:00:6d:44:0a:bb:10:
                    dc:bd:1c:41:dc:85:08:07:01:08:0f:cc:5a:d4:25:
                    1a:71:92:d8:d6:92:f0:ac:61:cf:d0:60:c9:31:b6:
                    cf:94:64:c1:ac:b0:8a:78:6f:ce:e9:ef:ca:92:c8:
                    19:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:2F:18:34:CD:14:B7:82:3D:D8:93:D8:07:7B:87:76:70:34:9D:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/8a510825-83bf-3885-90a1-e8e8bfb13779.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:26:6c:99:55:fc:34:61:a8:3c:96:26:96:a0:c3:a5:04:80:
         7f:f1:6b:0e:f6:19:1d:8a:68:75:96:d4:fd:dd:85:ab:39:26:
         66:b7:e6:84:9e:a0:49:e1:17:41:be:41:9d:89:d8:68:83:81:
         73:73:b8:7a:0d:73:47:a7:ca:a9:4d:6d:73:6f:65:43:40:33:
         ba:17:87:73:85:aa:6a:b3:7c:6d:84:f8:3d:e5:80:aa:91:51:
         e6:27:21:c7:90:9b:a2:43:6e:94:a3:46:d8:9c:99:8b:64:92:
         9c:e9:b3:3a:ef:f7:25:23:89:cb:ac:18:13:db:c6:92:a3:d2:
         48:3e:88:5c:15:36:29:cb:f4:17:42:eb:f4:14:55:28:18:d1:
         f7:cf:ed:2a:4a:ea:3b:fd:32:03:26:a0:96:c4:8a:35:d4:07:
         b2:7d:d0:3a:9c:66:a5:ed:07:e6:45:2d:86:9b:b9:db:af:b3:
         f4:79:d2:e4:87:ac:e4:ac:64:5b:69:e2:5d:ab:87:50:23:28:
         97:e6:51:9f:39:06:d1:4c:71:75:11:b6:71:f7:af:28:b9:30:
         ab:b6:33:cc:76:2a:2b:93:26:e2:99:0a:08:3d:94:50:48:c5:
         4f:66:36:a6:7c:fc:d4:0a:cb:0d:30:74:c1:d6:11:d8:bf:3e:
         ec:e7:1a:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobX/7JtONXfLZepgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz
ZjFiMB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk
YzgxOTU1N2ItYTQ5ZC00Y2U2LThkZDEtZTA3YjJhZDU5YjUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HrFWzGL07FTQN5jBs6ybmoCVtonN30CRK4r
lk1GRx6HTmz9QlTROgIz6A2qoib4yKEbd1W1JkrztG5dcUCzmb9LAd7QEoo6u0lY
LvSGHqWrUV7LWz7qRCRNyP10W/3fhsieBJIm/87clgXeFdxdt0Pq1VdFjqdYHxRQ
W/po6gfopdMfrKFoxwhmqjy8m/JXDSS6s8yErSuPQQ9wWqZ26Sru0GmjrlCwwvma
0nTi+fvmh4eeDIaHBRjcOD7lK/4kDUf/GYEU+F8if64AbUQKuxDcvRxB3IUIBwEI
D8xa1CUacZLY1pLwrGHP0GDJMbbPlGTBrLCKeG/O6e/KksgZUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGsvGDTNFLeCPdiT2Ad7h3ZwNJ1hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy
MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvOGE1MTA4MjUtODNiZi0z
ODg1LTkwYTEtZThlOGJmYjEzNzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli
N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi
M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy
NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF+PAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGQmbJlV/DRhqDyWJpagw6UEgH/xaw72GR2KaHWW1P3dhas5Jma35oSe
oEnhF0G+QZ2J2GiDgXNzuHoNc0enyqlNbXNvZUNAM7oXh3OFqmqzfG2E+D3lgKqR
UeYnIceQm6JDbpSjRticmYtkkpzpszrv9yUjicusGBPbxpKj0kg+iFwVNinL9BdC
6/QUVSgY0ffP7SpK6jv9MgMmoJbEijXUB7J90DqcZqXtB+ZFLYabuduvs/R50uSH
rOSsZFtp4l2rh1AjKJfmUZ85BtFMcXURtnH3ryi5MKu2M8x2KiuTJuKZCgg9lFBI
xU9mNqZ8/NQKyw0wdMHWEdi/PuznGno=
-----END CERTIFICATE-----
Generated at Tue Jun 10 20:52:13 2025 by rpki-client