Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89babb33-c8da-3dda-9604-21b7368fbff1.roa
File:                     89babb33-c8da-3dda-9604-21b7368fbff1.roa (raw, json)
Hash identifier:          JM529VJAE5DRdkhj/fIk8q+dn1OMeCXgIle9uAAWpOs=
Subject key identifier:   63:DD:D7:C9:DE:D6:2B:61:F7:96:36:88:75:BA:1F:83:9D:49:5B:EA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFD28B9E0D158F53C33AA00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89babb33-c8da-3dda-9604-21b7368fbff1.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33662
IP address blocks:        50.194.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:28:b9:e0:d1:58:f5:3c:33:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=341dd526-3ca1-45ea-9ddf-84194d7072eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:04:da:a8:b0:63:da:35:0f:74:15:46:62:1f:
                    1b:dc:23:e6:f0:1d:c2:4f:6d:4a:19:10:66:d1:45:
                    30:3a:53:3f:de:ec:49:86:4e:86:fb:ae:bc:94:ab:
                    1b:02:12:15:b9:f3:50:22:d9:a3:17:bd:b2:60:b9:
                    55:46:ed:e0:b7:03:8a:6d:b5:9c:e8:ec:cd:ee:90:
                    1e:f5:4f:42:d9:fc:e4:dc:7d:b9:29:aa:80:a2:8e:
                    31:e9:13:b1:72:27:b2:5b:4b:6f:6a:d4:d2:e4:ea:
                    8d:c8:77:69:4d:b6:de:dd:3f:36:62:f1:fc:0a:6e:
                    98:98:54:83:96:f8:8f:b7:93:39:c7:df:4f:54:00:
                    25:02:e8:7a:a6:fb:9f:d9:44:9c:9e:2b:a1:9f:52:
                    85:19:7f:0e:66:f2:01:6a:a9:c8:f8:b9:3d:91:f6:
                    23:e9:1b:ac:a3:81:69:6b:51:fd:b1:25:07:b8:1e:
                    a7:f2:6e:99:07:7c:25:5a:61:6c:41:b9:3c:a2:a4:
                    72:bf:c7:47:e3:00:e3:c8:5f:33:e0:f2:59:17:71:
                    a3:08:f6:19:48:04:9b:69:49:c8:99:91:65:b1:52:
                    fe:bd:26:9b:2b:0f:ed:3f:a1:69:32:0e:f6:f4:87:
                    24:be:a8:53:2b:2e:c1:8a:96:a8:77:e1:cd:0c:c9:
                    57:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:DD:D7:C9:DE:D6:2B:61:F7:96:36:88:75:BA:1F:83:9D:49:5B:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89babb33-c8da-3dda-9604-21b7368fbff1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.194.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:33:83:2c:28:46:1f:ac:aa:32:b0:1e:2f:9f:aa:84:7a:5d:
         e6:ff:f8:49:7d:e9:ff:44:de:f8:05:b1:4c:49:6b:e0:3a:d5:
         38:79:88:25:e5:b4:0d:89:0b:cf:14:3f:19:37:38:70:26:de:
         0b:15:e8:0d:55:57:ee:af:4a:bf:80:c9:2a:65:0d:6c:15:43:
         a3:43:3a:b6:75:9f:35:20:62:09:4e:13:0c:e1:4a:4a:47:8c:
         51:bf:8f:e2:fb:55:a1:f9:b0:43:c7:2c:f8:98:68:b5:27:be:
         a0:d3:4b:90:67:cc:20:f2:7e:77:b4:1c:f6:a6:a2:50:ce:11:
         d1:6c:68:16:98:72:d9:d7:62:09:9b:de:b5:9c:4e:f2:54:ec:
         a4:00:fd:ac:76:3d:ae:8d:a0:ac:5f:3c:dd:f1:7e:94:e9:b5:
         9c:c7:7d:57:03:6b:e2:25:e0:d8:69:ef:df:9e:90:f0:f4:25:
         07:ef:8f:c2:53:71:69:22:e5:37:e7:3a:06:f9:98:0c:fd:6c:
         60:f6:c0:42:2f:81:2c:3b:4f:59:19:b3:49:cc:20:d4:3c:10:
         94:2c:89:d1:68:7d:27:41:79:43:22:a0:50:08:02:6f:3b:c9:
         03:ab:19:c1:b3:0e:7e:61:ec:88:f3:b0:00:a9:1f:c4:b7:99:
         d2:20:69:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/Si54NFY9TwzqgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk
MzQxZGQ1MjYtM2NhMS00NWVhLTlkZGYtODQxOTRkNzA3MmViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwTaqLBj2jUPdBVGYh8b3CPm8B3CT21KGRBm
0UUwOlM/3uxJhk6G+668lKsbAhIVufNQItmjF72yYLlVRu3gtwOKbbWc6OzN7pAe
9U9C2fzk3H25KaqAoo4x6ROxcieyW0tvatTS5OqNyHdpTbbe3T82YvH8Cm6YmFSD
lviPt5M5x99PVAAlAuh6pvuf2UScniuhn1KFGX8OZvIBaqnI+Lk9kfYj6Ruso4Fp
a1H9sSUHuB6n8m6ZB3wlWmFsQbk8oqRyv8dH4wDjyF8z4PJZF3GjCPYZSASbaUnI
mZFlsVL+vSabKw/tP6FpMg729IckvqhTKy7Bipaod+HNDMlXPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGPd18ne1ith95Y2iHW6H4OdSVvqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODliYWJiMzMtYzhkYS0z
ZGRhLTk2MDQtMjFiNzM2OGZiZmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFMsKgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMozgywoRh+sqjKwHi+fqoR6Xeb/+El96f9E3vgFsUxJa+A61Th5iCXl
tA2JC88UPxk3OHAm3gsV6A1VV+6vSr+AySplDWwVQ6NDOrZ1nzUgYglOEwzhSkpH
jFG/j+L7VaH5sEPHLPiYaLUnvqDTS5BnzCDyfne0HPamolDOEdFsaBaYctnXYgmb
3rWcTvJU7KQA/ax2Pa6NoKxfPN3xfpTptZzHfVcDa+Il4Nhp79+ekPD0JQfvj8JT
cWki5TfnOgb5mAz9bGD2wEIvgSw7T1kZs0nMINQ8EJQsidFofSdBeUMioFAIAm87
yQOrGcGzDn5h7IjzsACpH8S3mdIgabM=
-----END CERTIFICATE-----
Generated at Tue Jul 1 09:16:01 2025 by rpki-client