Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/c322ae6e-38c4-35eb-bb0d-fd4417d6bdb5.roa
File:                     c322ae6e-38c4-35eb-bb0d-fd4417d6bdb5.roa (raw, json)
Hash identifier:          QjHadlDaXBhteGkBy+0URL+YS0QyE3YnxwYzxxyXp+A=
Subject key identifier:   67:AF:A1:53:40:F7:AC:C0:75:14:AB:E8:BB:5B:EE:68:3B:A6:12:5B
Certificate issuer:       /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial:       010D0C9F43285849674EF6241949EF988C3BDD60
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/c322ae6e-38c4-35eb-bb0d-fd4417d6bdb5.roa
Signing time:             Thu 03 Apr 2025 13:01:02 +0000
ROA not before:           Thu 03 Apr 2025 13:01:02 +0000
ROA not after:            Wed 02 Jul 2025 13:01:02 +0000
asID:                     19637
IP address blocks:        192.19.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:67:4e:f6:24:19:49:ef:98:8c:3b:dd:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
        Validity
            Not Before: Apr  3 13:01:02 2025 GMT
            Not After : Jul  2 13:01:02 2025 GMT
        Subject: CN=7726084b-f2a6-4b80-9d6b-6663a46096db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5f:e3:60:9a:41:17:6a:eb:5f:59:fa:ef:75:
                    cc:5a:c1:7d:26:bd:72:1b:d9:bc:3d:de:ee:5a:a2:
                    8e:26:11:c3:fe:6a:0a:3f:44:53:8f:94:8e:9f:d6:
                    e3:05:6a:89:31:fe:ef:23:1c:b4:2d:93:11:2c:df:
                    b9:63:a4:4d:36:0d:6d:b7:0b:90:d7:cb:b0:9c:37:
                    a5:9c:ed:25:83:80:81:34:6c:61:a4:cf:ca:1e:91:
                    17:a6:75:7b:88:68:48:b7:8e:ef:3e:7a:1c:5d:1b:
                    16:d3:40:95:3c:5b:a3:59:3f:06:0d:05:0f:ac:c2:
                    c4:35:c7:6a:e5:5d:02:2f:19:e3:ff:3a:cc:7d:c7:
                    ec:c7:ff:c2:a2:cc:f6:ca:7c:0c:a0:40:c4:56:6c:
                    f2:1e:d4:64:3e:3e:4a:34:f5:65:e3:5d:b6:77:81:
                    39:31:05:b1:3f:85:a9:27:8f:0b:63:cf:ca:40:18:
                    35:4c:52:fb:26:98:59:5c:5f:33:a2:ed:7a:8b:4f:
                    d2:09:7f:97:a9:41:8b:71:bc:d1:c3:dc:6d:c5:2d:
                    97:f2:f0:c5:68:b3:09:7d:84:a7:0b:ed:43:f0:1f:
                    72:7b:ae:ed:28:9c:50:44:e5:10:fa:29:c8:00:b2:
                    5b:a2:cd:ac:9d:ec:4a:0c:9c:9d:e9:74:d7:17:16:
                    aa:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:AF:A1:53:40:F7:AC:C0:75:14:AB:E8:BB:5B:EE:68:3B:A6:12:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/c322ae6e-38c4-35eb-bb0d-fd4417d6bdb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl

            X509v3 Authority Key Identifier:
                keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.19.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:50:f1:70:a7:6f:fe:39:bb:2c:a6:79:fa:4a:05:51:9c:a5:
         83:7d:9e:64:66:f6:c9:ef:1f:ad:c8:e7:b6:34:fc:fc:71:e8:
         c7:10:4a:9a:29:7c:b3:6a:4d:64:b4:5f:32:28:0b:16:b1:1b:
         32:72:e6:a4:4c:cc:a7:42:f5:7d:8e:ad:68:62:b0:b0:dd:41:
         40:af:67:ce:6b:47:5d:4a:3d:35:d3:66:ba:fc:f9:b0:84:e7:
         36:90:42:5b:32:6c:b8:ab:17:58:51:02:db:4a:a3:a3:1b:a0:
         a2:8a:61:fe:7a:13:03:fd:e0:15:d1:4d:a0:4e:3b:99:16:ca:
         6a:d0:af:ba:0c:c6:af:ca:5a:99:8f:e5:8a:22:20:5f:d7:d0:
         bd:e4:b1:d1:72:41:0c:93:e2:98:e1:bb:7e:ff:5e:dd:ec:9f:
         72:fe:3e:32:87:95:84:27:fa:fe:5c:ff:b4:55:6a:6a:8a:64:
         9b:ca:51:d4:73:c3:4b:7b:58:d6:ae:5c:b8:6e:e6:19:ea:bf:
         e0:5b:1a:3d:e4:be:dd:a1:d7:9a:7c:94:d6:3e:76:f5:ce:a8:
         29:68:a6:3c:d7:13:15:29:8c:6d:d2:07:e6:37:fa:72:bf:e2:
         d1:63:67:66:91:43:d3:f3:87:6f:af:c8:be:6c:c3:71:de:92:
         21:5e:fb:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElnTvYkGUnvmIw73WAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3
NzY5MB4XDTI1MDQwMzEzMDEwMloXDTI1MDcwMjEzMDEwMlowLzEtMCsGA1UEAxMk
NzcyNjA4NGItZjJhNi00YjgwLTlkNmItNjY2M2E0NjA5NmRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl/jYJpBF2rrX1n673XMWsF9Jr1yG9m8Pd7u
WqKOJhHD/moKP0RTj5SOn9bjBWqJMf7vIxy0LZMRLN+5Y6RNNg1ttwuQ18uwnDel
nO0lg4CBNGxhpM/KHpEXpnV7iGhIt47vPnocXRsW00CVPFujWT8GDQUPrMLENcdq
5V0CLxnj/zrMfcfsx//Cosz2ynwMoEDEVmzyHtRkPj5KNPVl4122d4E5MQWxP4Wp
J48LY8/KQBg1TFL7JphZXF8zou16i0/SCX+XqUGLcbzRw9xtxS2X8vDFaLMJfYSn
C+1D8B9ye67tKJxQROUQ+inIALJbos2snexKDJyd6XTXFxaqyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGevoVNA96zAdRSr6Ltb7mg7phJbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1
YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvYzMyMmFlNmUtMzhjNC0z
NWViLWJiMGQtZmQ0NDE3ZDZiZGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2
NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx
Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw
Y2ZkMTc3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwBMyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADdQ8XCnb/45uyymefpKBVGcpYN9nmRm9snvH63I57Y0/Pxx6McQSpop
fLNqTWS0XzIoCxaxGzJy5qRMzKdC9X2OrWhisLDdQUCvZ85rR11KPTXTZrr8+bCE
5zaQQlsybLirF1hRAttKo6MboKKKYf56EwP94BXRTaBOO5kWymrQr7oMxq/KWpmP
5YoiIF/X0L3ksdFyQQyT4pjhu37/Xt3sn3L+PjKHlYQn+v5c/7RVamqKZJvKUdRz
w0t7WNauXLhu5hnqv+BbGj3kvt2h15p8lNY+dvXOqClopjzXExUpjG3SB+Y3+nK/
4tFjZ2aRQ9Pzh2+vyL5sw3HekiFe++A=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:36:50 2025 by rpki-client