Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/50786a16-0073-3f4d-b1e6-df1e5eb16eb8.roa
File:                     50786a16-0073-3f4d-b1e6-df1e5eb16eb8.roa (raw, json)
Hash identifier:          PJqX4s5swsQedBYfdhONOScoqscn9a0WnOO50OgkcAY=
Subject key identifier:   82:F9:2B:B2:F5:81:44:56:D9:31:37:0B:1C:70:A9:AC:49:96:E4:F8
Certificate issuer:       /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c
Certificate serial:       010D0C9F43285849F2E535795FDFDACB3CFFA600
Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/50786a16-0073-3f4d-b1e6-df1e5eb16eb8.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     32181
IP address blocks:        70.32.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:35:79:5f:df:da:cb:3c:ff:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=a238c815-4aa1-4bf1-8e71-9d75c8254371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7a:66:a5:a0:c3:9e:4d:42:cf:54:41:18:cb:
                    9f:8b:07:1a:f8:95:02:04:61:c4:eb:63:18:b4:8a:
                    04:8a:db:c8:d6:a2:6b:64:21:9e:a1:a3:32:23:3f:
                    33:12:12:32:76:39:49:c5:6b:a8:fc:9d:50:84:9f:
                    a5:32:e7:7e:35:9b:f7:51:97:96:b3:f1:38:cd:c4:
                    59:09:5a:56:42:85:8b:97:a0:b7:b2:81:b8:3b:52:
                    ba:a5:63:b4:95:57:dc:30:65:80:e4:94:73:52:48:
                    22:6f:7f:da:9b:15:21:4b:37:6d:a5:12:a1:1e:52:
                    5d:26:f0:f5:6c:e6:1f:44:e0:73:46:26:8d:bb:e8:
                    19:ba:97:ce:27:0a:7c:3b:42:8a:0c:ec:83:4c:65:
                    19:be:4c:c1:1f:fd:5d:94:f0:0b:3c:f7:54:b8:3d:
                    f3:b8:cd:b1:db:15:be:20:9b:b1:c1:d0:1e:d2:fd:
                    68:05:4d:38:fe:1a:6c:3e:80:b6:d1:60:04:47:97:
                    a4:bf:05:cf:a2:9b:bd:75:f9:0d:26:7e:4c:79:78:
                    cb:0d:44:98:b4:60:aa:92:0a:5e:c7:71:2a:97:e9:
                    17:0d:91:1c:08:19:d2:fc:ca:dc:13:d7:83:d4:3a:
                    29:09:db:93:b2:aa:e5:b0:90:44:4c:30:01:1b:f1:
                    02:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F9:2B:B2:F5:81:44:56:D9:31:37:0B:1C:70:A9:AC:49:96:E4:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/50786a16-0073-3f4d-b1e6-df1e5eb16eb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl

            X509v3 Authority Key Identifier:
                keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:b0:ff:b2:e5:9c:85:3a:f3:30:78:06:be:66:e0:da:3f:95:
         c1:4a:79:16:73:d9:7e:9b:07:5d:82:50:ef:f3:f0:6d:d0:4e:
         f6:58:1c:40:98:c0:1e:83:f3:b6:6f:be:1d:d8:7e:1e:c7:27:
         5d:68:9d:b6:b3:ce:49:1e:c5:58:f1:ad:f4:dd:2c:c5:49:5b:
         10:be:d4:ef:f9:7f:cd:36:d1:d2:ac:10:79:7c:85:5d:fa:07:
         61:1f:28:e2:f1:04:1e:29:c5:a2:29:8b:07:10:00:c9:c1:d7:
         78:5d:36:c9:01:b7:1b:cc:0a:6a:6c:d8:96:6d:68:85:57:e9:
         90:00:99:0c:f3:23:7d:07:25:4c:b7:32:07:8b:09:51:65:de:
         49:3b:5e:33:59:aa:19:28:3b:09:24:51:2b:c1:a6:dd:0c:89:
         9f:64:e4:c0:df:4b:f6:0e:fc:84:05:4b:9b:f8:93:0f:4b:05:
         29:8b:1b:e9:3c:f7:3b:e6:01:f4:58:55:f2:a5:78:38:7b:5d:
         ef:d8:f2:4a:e9:ea:f1:ee:b4:0d:d6:63:a1:2a:2d:32:7b:38:
         91:9b:04:9e:d4:6e:af:fb:33:94:7f:b5:96:9b:63:f1:bf:ef:
         25:f7:e5:09:35:15:20:13:19:fd:34:b7:32:53:a7:6c:34:37:
         85:d3:cf:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEny5TV5X9/ayzz/pgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQ0ZDZmOGMtODVlOS00YTQ3LTk3YzktZGJjMTFjMTIy
MTBjMB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk
YTIzOGM4MTUtNGFhMS00YmYxLThlNzEtOWQ3NWM4MjU0MzcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0npmpaDDnk1Cz1RBGMufiwca+JUCBGHE62MY
tIoEitvI1qJrZCGeoaMyIz8zEhIydjlJxWuo/J1QhJ+lMud+NZv3UZeWs/E4zcRZ
CVpWQoWLl6C3soG4O1K6pWO0lVfcMGWA5JRzUkgib3/amxUhSzdtpRKhHlJdJvD1
bOYfROBzRiaNu+gZupfOJwp8O0KKDOyDTGUZvkzBH/1dlPALPPdUuD3zuM2x2xW+
IJuxwdAe0v1oBU04/hpsPoC20WAER5ekvwXPopu9dfkNJn5MeXjLDUSYtGCqkgpe
x3Eql+kXDZEcCBnS/MrcE9eD1DopCduTsqrlsJBETDABG/ECLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIL5K7L1gURW2TE3CxxwqaxJluT4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk
NmY4Yy04NWU5LTRhNDctOTdjOS1kYmMxMWMxMjIxMGMvNTA3ODZhMTYtMDA3My0z
ZjRkLWIxZTYtZGYxZTVlYjE2ZWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDZmOGMtODVlOS00YTQ3LTk3
YzktZGJjMTFjMTIyMTBjL2Q0NGQ2ZjhjLTg1ZTktNGE0Ny05N2M5LWRiYzExYzEy
MjEwYy5jcmwwHwYDVR0jBBgwFoAU0rkksb0h0dn/8sdeo3qMSJ2QuRYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkNmY4Yy04NWU5LTRhNDctOTdjOS1kYmMx
MWMxMjIxMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERiAAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH6w/7LlnIU68zB4Br5m4No/lcFKeRZz2X6bB12CUO/z8G3QTvZYHECY
wB6D87Zvvh3Yfh7HJ11onbazzkkexVjxrfTdLMVJWxC+1O/5f8020dKsEHl8hV36
B2EfKOLxBB4pxaIpiwcQAMnB13hdNskBtxvMCmps2JZtaIVX6ZAAmQzzI30HJUy3
MgeLCVFl3kk7XjNZqhkoOwkkUSvBpt0MiZ9k5MDfS/YO/IQFS5v4kw9LBSmLG+k8
9zvmAfRYVfKleDh7Xe/Y8krp6vHutA3WY6EqLTJ7OJGbBJ7Ubq/7M5R/tZabY/G/
7yX35Qk1FSATGf00tzJTp2w0N4XTz4s=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:11:41 2025 by rpki-client