Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/341cc19d-39e8-3f31-874b-36f0544f2ca8.roa
File:                     341cc19d-39e8-3f31-874b-36f0544f2ca8.roa (raw, json)
Hash identifier:          Ygi/SLkFsntYSnipN10iXZUn2sC8mR63u+AdmH8tlc8=
Subject key identifier:   B5:D5:AB:1A:A3:26:08:CB:7E:DF:8B:77:B4:A0:91:1F:62:0E:75:A5
Certificate issuer:       /CN=329c727b-a867-426a-ad3d-167aed3107dd
Certificate serial:       010D0C9F4328584A11C43E35F84D90F846934F00
Authority key identifier: 3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/341cc19d-39e8-3f31-874b-36f0544f2ca8.roa
Signing time:             Tue 03 Jun 2025 14:24:55 +0000
ROA not before:           Tue 03 Jun 2025 14:24:55 +0000
ROA not after:            Mon 01 Sep 2025 14:24:55 +0000
asID:                     6327
IP address blocks:        50.72.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:c4:3e:35:f8:4d:90:f8:46:93:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=329c727b-a867-426a-ad3d-167aed3107dd
        Validity
            Not Before: Jun  3 14:24:55 2025 GMT
            Not After : Sep  1 14:24:55 2025 GMT
        Subject: CN=a780072d-f1f2-430e-8a05-b3356791d0d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e1:a0:0a:7f:9e:28:b2:28:54:4d:2a:fc:bd:
                    e4:0e:60:a8:29:23:1c:33:ca:7c:f7:1e:43:f2:29:
                    54:03:26:13:c2:a6:89:55:be:95:39:3c:03:bd:40:
                    3d:b5:6f:4d:02:8e:45:59:4b:4a:b8:37:f5:d6:31:
                    12:81:cf:3c:d4:3a:d5:00:b7:4a:ea:3f:4a:77:6b:
                    76:92:e4:35:9f:27:88:36:a8:a5:98:9d:e9:2e:62:
                    0b:c1:1b:5d:63:31:d1:ae:01:77:12:54:19:a4:3c:
                    7e:01:75:69:cf:a6:89:8a:8b:d8:6b:b5:5c:d4:d8:
                    00:74:94:d7:79:ac:14:5a:35:c6:84:ad:be:78:2b:
                    93:e8:72:01:5f:ca:8f:4c:a4:b5:6b:99:03:b2:52:
                    b4:38:45:c7:97:5b:41:0b:58:5d:50:1b:a4:54:ca:
                    58:52:ea:c8:ca:e4:38:ad:ab:d6:a2:5b:8f:57:2a:
                    41:b9:94:68:4f:a9:9f:d8:87:50:e1:87:8a:b0:fe:
                    2c:d5:4c:fb:9f:dd:b8:49:c5:5b:b7:77:66:7e:2f:
                    0a:a4:9f:33:42:8a:ca:05:50:f0:55:3f:2c:f0:fe:
                    ee:08:a8:7b:80:a8:c8:cc:76:ef:81:78:35:8b:94:
                    28:65:10:59:fb:0a:b4:15:b0:9a:6c:39:ad:f2:5b:
                    22:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D5:AB:1A:A3:26:08:CB:7E:DF:8B:77:B4:A0:91:1F:62:0E:75:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/341cc19d-39e8-3f31-874b-36f0544f2ca8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl

            X509v3 Authority Key Identifier:
                keyid:3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.72.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:0b:cc:8d:28:e6:f1:f2:af:97:88:2f:7c:de:e6:aa:24:24:
         5b:e2:9d:28:11:1b:79:6d:aa:c1:9b:47:b3:08:2b:c6:bf:37:
         f4:2d:bf:b5:a5:e1:43:e8:e8:e2:65:a9:62:b7:e9:70:16:8b:
         80:29:37:dd:b7:e2:fb:9f:b5:28:dc:11:97:6e:46:c5:57:c6:
         6b:c6:45:9a:f3:a2:6d:d7:99:b4:74:a6:3f:e1:4d:1a:af:45:
         ff:9b:66:fe:de:6d:d9:06:bc:49:b1:6d:4a:42:f5:d9:8e:5a:
         78:0a:ff:17:fb:ea:72:b3:00:0c:cd:4c:af:34:5c:46:68:09:
         43:ec:30:c2:b3:02:97:0e:ca:9a:9d:48:0f:aa:d1:f8:05:62:
         af:c6:ee:f6:03:8b:2e:cb:cf:34:86:05:74:7d:a5:57:46:e3:
         be:5d:a9:5c:dd:05:00:4b:49:95:f5:d1:f7:39:2e:ad:57:07:
         74:cf:d7:7b:91:5d:49:61:95:28:64:87:2b:61:d4:2e:d4:4e:
         c9:0b:1e:70:e0:cd:b2:98:a9:a0:a8:24:8e:c2:38:3a:39:c4:
         a7:c2:05:2d:df:73:f5:98:f2:80:58:5a:a6:a2:8d:16:76:7d:
         6d:43:91:16:d2:9f:8e:38:c1:39:6f:63:f6:eb:aa:3b:4d:dd:
         05:fc:9e:9f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEoRxD41+E2Q+EaTTwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzI5YzcyN2ItYTg2Ny00MjZhLWFkM2QtMTY3YWVkMzEw
N2RkMB4XDTI1MDYwMzE0MjQ1NVoXDTI1MDkwMTE0MjQ1NVowLzEtMCsGA1UEAxMk
YTc4MDA3MmQtZjFmMi00MzBlLThhMDUtYjMzNTY3OTFkMGQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuGgCn+eKLIoVE0q/L3kDmCoKSMcM8p89x5D
8ilUAyYTwqaJVb6VOTwDvUA9tW9NAo5FWUtKuDf11jESgc881DrVALdK6j9Kd2t2
kuQ1nyeINqilmJ3pLmILwRtdYzHRrgF3ElQZpDx+AXVpz6aJiovYa7Vc1NgAdJTX
eawUWjXGhK2+eCuT6HIBX8qPTKS1a5kDslK0OEXHl1tBC1hdUBukVMpYUurIyuQ4
ravWoluPVypBuZRoT6mf2IdQ4YeKsP4s1Uz7n924ScVbt3dmfi8KpJ8zQorKBVDw
VT8s8P7uCKh7gKjIzHbvgXg1i5QoZRBZ+wq0FbCabDmt8lsi2QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLXVqxqjJgjLft+Ld7SgkR9iDnWlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjlj
NzI3Yi1hODY3LTQyNmEtYWQzZC0xNjdhZWQzMTA3ZGQvMzQxY2MxOWQtMzllOC0z
ZjMxLTg3NGItMzZmMDU0NGYyY2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzI5YzcyN2ItYTg2Ny00MjZhLWFk
M2QtMTY3YWVkMzEwN2RkLzMyOWM3MjdiLWE4NjctNDI2YS1hZDNkLTE2N2FlZDMx
MDdkZC5jcmwwHwYDVR0jBBgwFoAUPZZSNdHOoxLv1MM8HGrn4fAf9SIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjljNzI3Yi1hODY3LTQyNmEtYWQzZC0xNjdh
ZWQzMTA3ZGQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAMkgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAdgvMjSjm8fKvl4gvfN7mqiQkW+KdKBEbeW2qwZtHswgrxr839C2/taXh
Q+jo4mWpYrfpcBaLgCk33bfi+5+1KNwRl25GxVfGa8ZFmvOibdeZtHSmP+FNGq9F
/5tm/t5t2Qa8SbFtSkL12Y5aeAr/F/vqcrMADM1MrzRcRmgJQ+wwwrMClw7Kmp1I
D6rR+AVir8bu9gOLLsvPNIYFdH2lV0bjvl2pXN0FAEtJlfXR9zkurVcHdM/Xe5Fd
SWGVKGSHK2HULtROyQsecODNspipoKgkjsI4OjnEp8IFLd9z9ZjygFhapqKNFnZ9
bUORFtKfjjjBOW9j9uuqO03dBfyenw==
-----END CERTIFICATE-----
Generated at Mon Jun 30 16:48:14 2025 by rpki-client