Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS53850.roa
File:                     AS53850.roa (raw, json)
Hash identifier:          jMsZUEwrQ0Tv8tAJo61ugAnDdy7vXJtVZqkVZXXEdo4=
Subject key identifier:   F8:BD:AF:E2:67:F1:AD:B8:07:68:6B:21:A8:5B:52:F8:DF:E9:41:4D
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       0838290EE727D27FB07AE4A1FDA4C66A0CAA861E
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS53850.roa
Signing time:             Fri 20 Jun 2025 09:23:04 +0000
ROA not before:           Fri 20 Jun 2025 09:18:04 +0000
ROA not after:            Fri 19 Jun 2026 09:23:04 +0000
asID:                     53850
IP address blocks:        64.50.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 11:37:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:38:29:0e:e7:27:d2:7f:b0:7a:e4:a1:fd:a4:c6:6a:0c:aa:86:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jun 20 09:18:04 2025 GMT
            Not After : Jun 19 09:23:04 2026 GMT
        Subject: CN=F8BDAFE267F1ADB807686B21A85B52F8DFE9414D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f0:3f:98:74:ac:64:08:56:53:81:39:6f:96:
                    fb:03:3e:63:eb:cb:e0:3f:95:f8:26:cb:a0:8c:1b:
                    6f:54:a4:76:47:21:46:22:b4:0b:b2:e9:3d:b3:85:
                    9a:67:18:a4:26:1e:8f:f7:04:b7:16:30:08:2e:94:
                    9d:0e:d0:51:ed:bd:47:87:ff:fd:7a:f3:6e:b1:b7:
                    fa:ea:7e:ec:fb:8b:a0:ac:b9:46:17:38:63:e3:9b:
                    5c:ee:e1:7b:eb:a1:40:d7:12:b0:d4:6c:5d:18:47:
                    3d:f5:a7:97:d8:81:31:8a:f3:e2:eb:bc:21:ea:e3:
                    57:ef:a4:52:73:bd:7f:10:7a:21:80:f1:39:5b:30:
                    b5:80:9d:dd:46:73:62:8c:ef:82:6b:fe:92:b4:ee:
                    30:79:96:c2:89:4b:1a:66:e0:fc:84:45:68:99:85:
                    d7:70:37:38:1d:a7:52:6c:2d:9e:fc:66:14:55:6c:
                    4e:9d:47:e4:de:a9:12:d8:7b:4e:2f:5a:80:48:39:
                    29:d3:83:1a:3a:07:58:3d:49:4f:c9:23:26:1b:5e:
                    3a:70:38:30:97:5f:8c:41:c8:09:b9:26:27:be:91:
                    5f:fd:06:e8:c8:6e:73:d2:e5:a2:df:6b:b4:d7:14:
                    58:cd:37:8c:1b:2c:85:79:2a:8d:14:c8:f5:07:72:
                    31:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:BD:AF:E2:67:F1:AD:B8:07:68:6B:21:A8:5B:52:F8:DF:E9:41:4D
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS53850.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:e6:b2:46:d5:1e:f4:26:c6:32:f2:7b:64:f7:6d:4e:25:95:
         29:97:e1:49:1c:b3:9e:c2:4b:ad:dc:1f:b9:38:9a:09:72:79:
         43:6e:2d:8f:9a:88:ba:b1:49:e8:99:3c:dc:ab:bb:0f:c1:72:
         0e:01:9e:c1:25:14:c5:08:cf:34:18:61:9b:b3:d9:08:25:0c:
         c0:5f:20:e7:ff:dc:1f:6f:0d:0a:4d:a6:4b:96:e6:e2:f2:e9:
         bb:f7:69:81:8b:6f:17:97:bb:4d:36:86:a0:69:c2:dd:28:78:
         45:f2:b7:9f:2d:bb:64:32:11:5f:6c:44:65:be:17:95:e3:28:
         11:5e:e2:3a:b6:d6:1f:8d:09:27:ba:7f:3a:d1:37:5f:e1:e6:
         9a:33:43:ac:0b:f9:c0:17:19:92:79:36:df:83:db:22:a5:01:
         f0:26:39:87:4b:82:e7:cb:6b:2e:98:14:83:1a:fb:ee:a1:61:
         8b:3d:a6:e5:3b:c1:3e:df:2f:7c:0d:76:c5:b8:bf:b4:4d:fb:
         1d:1b:31:32:0d:f3:60:74:79:34:d4:e0:71:40:ff:af:e0:76:
         61:b4:17:3c:f2:1e:24:87:e7:e8:4f:70:c9:6f:6a:ba:2d:b3:
         49:8b:f5:8f:fa:02:41:08:63:a9:86:0d:55:40:22:ac:d8:26:
         b7:76:49:ac
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUCDgpDucn0n+weuSh/aTGagyqhh4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNjIwMDkxODA0WhcNMjYwNjE5MDkyMzA0
WjAzMTEwLwYDVQQDEyhGOEJEQUZFMjY3RjFBREI4MDc2ODZCMjFBODVCNTJGOERG
RTk0MTREMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/A/mHSsZAhW
U4E5b5b7Az5j68vgP5X4JsugjBtvVKR2RyFGIrQLsuk9s4WaZxikJh6P9wS3FjAI
LpSdDtBR7b1Hh//9evNusbf66n7s+4ugrLlGFzhj45tc7uF766FA1xKw1GxdGEc9
9aeX2IExivPi67wh6uNX76RSc71/EHohgPE5WzC1gJ3dRnNijO+Ca/6StO4weZbC
iUsaZuD8hEVomYXXcDc4HadSbC2e/GYUVWxOnUfk3qkS2HtOL1qASDkp04MaOgdY
PUlPySMmG146cDgwl1+MQcgJuSYnvpFf/QboyG5z0uWi32u01xRYzTeMGyyFeSqN
FMj1B3IxaQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFPi9r+Jn8a24B2hrIahbUvjf
6UFNMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzUzODUwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQDKiMA0GCSqGSIb3DQEBCwUAA4IB
AQAa5rJG1R70JsYy8ntk921OJZUpl+FJHLOewkut3B+5OJoJcnlDbi2Pmoi6sUno
mTzcq7sPwXIOAZ7BJRTFCM80GGGbs9kIJQzAXyDn/9wfbw0KTaZLlubi8um792mB
i28Xl7tNNoagacLdKHhF8refLbtkMhFfbERlvheV4ygRXuI6ttYfjQknun860Tdf
4eaaM0OsC/nAFxmSeTbfg9sipQHwJjmHS4Lny2sumBSDGvvuoWGLPablO8E+3y98
DXbFuL+0TfsdGzEyDfNgdHk01OBxQP+v4HZhtBc88h4kh+foT3DJb2q6LbNJi/WP
+gJBCGOphg1VQCKs2Ca3dkms
-----END CERTIFICATE-----
Generated at Mon Jun 30 00:50:56 2025 by rpki-client