Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/06554748-62b9-3f04-aed5-b6c931f948a1.roa
File:                     06554748-62b9-3f04-aed5-b6c931f948a1.roa (raw, json)
Hash identifier:          NQvh+7s/Mvn2wsOPdGesM69Z6Ia7Sklz68Xm+qe/Soc=
Subject key identifier:   01:77:BE:AB:A2:F0:81:A5:D7:73:06:1D:A2:44:D2:6E:8C:3F:BF:BD
Certificate issuer:       /CN=ae55b5de-dd92-467b-8e52-a8892152f63e
Certificate serial:       010D0C9F4328584AC9DBA57FEFCC18E2D61FF8A8
Authority key identifier: 3C:CB:7F:A8:B3:A3:29:3E:B0:7E:2F:BF:D0:6B:75:3C:D0:85:9C:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/06554748-62b9-3f04-aed5-b6c931f948a1.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     1097
IP address blocks:        50.20.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:a5:7f:ef:cc:18:e2:d6:1f:f8:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae55b5de-dd92-467b-8e52-a8892152f63e
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=1a195313-05ed-47e0-ab62-deb617aa5dee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c2:27:4c:d2:58:88:67:7d:48:02:b1:1a:73:
                    51:35:11:8d:73:e5:60:fe:1b:33:23:2e:9c:39:84:
                    71:51:6b:dd:aa:6d:9c:7a:43:40:98:38:ae:d2:d4:
                    32:34:41:9d:29:b7:b2:41:23:f0:fe:62:53:d6:e5:
                    af:3d:44:e5:ca:ce:d9:6b:03:ba:8b:74:fd:08:ce:
                    3c:38:f3:db:90:2b:37:5f:e0:05:99:6e:92:f2:83:
                    28:b8:08:6e:a9:c9:9a:f4:bf:b1:4a:66:b7:8a:99:
                    2b:6b:0e:cb:fe:f4:9b:b6:6f:50:14:1d:30:5a:62:
                    00:4d:28:2c:7d:15:f3:99:c5:46:38:b1:97:f1:2b:
                    68:d5:c3:02:57:04:14:48:c0:a6:2d:27:05:f8:23:
                    01:cf:b0:d1:7d:fb:08:e9:2e:e6:4f:ec:86:4a:49:
                    bf:d9:cb:97:2e:bb:9c:2f:47:7f:75:a4:13:91:91:
                    7c:7a:29:47:ee:f9:cc:69:b4:4e:13:cb:7c:2d:12:
                    1c:42:f3:22:6e:49:db:34:11:11:bd:89:17:f0:84:
                    5f:98:1b:b4:89:2d:d3:e2:4f:0d:4f:40:d9:c7:1e:
                    b8:32:b7:6b:64:ca:f2:72:bc:90:e2:6c:81:ba:12:
                    c7:53:27:5c:86:b3:12:33:ad:d5:3e:cf:02:95:51:
                    31:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:77:BE:AB:A2:F0:81:A5:D7:73:06:1D:A2:44:D2:6E:8C:3F:BF:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/06554748-62b9-3f04-aed5-b6c931f948a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.crl

            X509v3 Authority Key Identifier:
                keyid:3C:CB:7F:A8:B3:A3:29:3E:B0:7E:2F:BF:D0:6B:75:3C:D0:85:9C:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.20.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:1b:d2:ba:04:72:fb:9a:05:8e:1f:42:37:0b:56:3b:fe:c3:
         c3:be:76:22:d7:49:4e:b8:30:7c:33:a3:2a:21:d1:10:e7:fb:
         a0:6b:b6:ed:97:84:60:90:fe:9c:ae:04:e8:74:dc:a8:21:49:
         0b:8a:eb:b9:62:61:a6:a6:81:82:40:2c:d8:48:bb:84:40:16:
         57:2d:e3:94:03:28:4c:53:96:18:8e:a6:99:35:d5:0b:8d:30:
         70:5c:cf:d2:03:0b:da:c7:dc:d4:03:27:30:ea:e0:3f:14:b0:
         73:7c:87:c7:a6:3d:b9:19:38:44:c0:54:7e:3b:bb:df:b4:a7:
         d0:ff:9f:9e:dc:75:83:35:a8:7d:b4:d0:46:d7:92:16:33:14:
         ec:87:2c:e6:a7:71:41:64:28:ac:4e:b2:43:76:3c:03:79:d1:
         be:a5:85:35:36:be:3a:8b:7a:85:f8:3e:a2:87:3e:05:3f:e5:
         a4:1d:c7:27:03:eb:30:6b:37:66:c4:3f:fa:aa:a5:f5:bd:fa:
         16:e6:7f:ae:cf:60:d4:ee:fc:93:17:8e:2f:b9:19:91:fb:1d:
         43:e5:71:ac:0e:17:2e:ad:41:e7:f1:3d:2a:7c:d9:2f:ea:e5:
         c0:2a:9c:85:86:86:76:db:7c:2e:2f:be:b0:be:97:b8:a1:04:
         3a:e9:58:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ26V/78wY4tYf+KgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWU1NWI1ZGUtZGQ5Mi00NjdiLThlNTItYTg4OTIxNTJm
NjNlMB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk
MWExOTUzMTMtMDVlZC00N2UwLWFiNjItZGViNjE3YWE1ZGVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cInTNJYiGd9SAKxGnNRNRGNc+Vg/hszIy6c
OYRxUWvdqm2cekNAmDiu0tQyNEGdKbeyQSPw/mJT1uWvPUTlys7ZawO6i3T9CM48
OPPbkCs3X+AFmW6S8oMouAhuqcma9L+xSma3ipkraw7L/vSbtm9QFB0wWmIATSgs
fRXzmcVGOLGX8Sto1cMCVwQUSMCmLScF+CMBz7DRffsI6S7mT+yGSkm/2cuXLruc
L0d/daQTkZF8eilH7vnMabROE8t8LRIcQvMibknbNBERvYkX8IRfmBu0iS3T4k8N
T0DZxx64MrdrZMrycryQ4myBuhLHUydchrMSM63VPs8ClVExOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAF3vqui8IGl13MGHaJE0m6MP7+9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hZTU1
YjVkZS1kZDkyLTQ2N2ItOGU1Mi1hODg5MjE1MmY2M2UvMDY1NTQ3NDgtNjJiOS0z
ZjA0LWFlZDUtYjZjOTMxZjk0OGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWU1NWI1ZGUtZGQ5Mi00NjdiLThl
NTItYTg4OTIxNTJmNjNlL2FlNTViNWRlLWRkOTItNDY3Yi04ZTUyLWE4ODkyMTUy
ZjYzZS5jcmwwHwYDVR0jBBgwFoAUPMt/qLOjKT6wfi+/0Gt1PNCFnFMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9hZTU1YjVkZS1kZDkyLTQ2N2ItOGU1Mi1hODg5
MjE1MmY2M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMhTAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD8b0roEcvuaBY4fQjcLVjv+w8O+diLXSU64MHwzoyoh0RDn+6Brtu2X
hGCQ/pyuBOh03KghSQuK67liYaamgYJALNhIu4RAFlct45QDKExTlhiOppk11QuN
MHBcz9IDC9rH3NQDJzDq4D8UsHN8h8emPbkZOETAVH47u9+0p9D/n57cdYM1qH20
0EbXkhYzFOyHLOancUFkKKxOskN2PAN50b6lhTU2vjqLeoX4PqKHPgU/5aQdxycD
6zBrN2bEP/qqpfW9+hbmf67PYNTu/JMXji+5GZH7HUPlcawOFy6tQefxPSp82S/q
5cAqnIWGhnbbfC4vvrC+l7ihBDrpWKM=
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:56:21 2025 by rpki-client