Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/813789ec-658b-3a1c-9583-3dac7d532d21.roa
File:                     813789ec-658b-3a1c-9583-3dac7d532d21.roa (raw, json)
Hash identifier:          LS2BGbSvnOYgD8zk6ex5TwuNG7wgVZOr+lQv9bE2P4c=
Subject key identifier:   66:41:70:47:AC:AB:D8:B9:C2:3A:95:96:15:E1:57:51:D7:7D:FE:B4
Certificate issuer:       /CN=8e159820-cf56-42eb-b9f0-0187b10bb721
Certificate serial:       010D0C9F43285849C36F7A062AE41C73192F5780
Authority key identifier: 3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/813789ec-658b-3a1c-9583-3dac7d532d21.roa
Signing time:             Tue 06 May 2025 13:01:01 +0000
ROA not before:           Tue 06 May 2025 13:01:01 +0000
ROA not after:            Mon 04 Aug 2025 13:01:01 +0000
asID:                     11032
IP address blocks:        192.77.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c3:6f:7a:06:2a:e4:1c:73:19:2f:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e159820-cf56-42eb-b9f0-0187b10bb721
        Validity
            Not Before: May  6 13:01:01 2025 GMT
            Not After : Aug  4 13:01:01 2025 GMT
        Subject: CN=784dceb4-8b28-4ac3-9787-11e041cda479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:73:30:3f:31:30:9c:4f:4e:b6:55:9e:15:32:
                    d7:27:2d:27:c0:6c:b1:05:e2:19:ac:5f:1b:f7:28:
                    3d:a6:b9:a4:85:74:81:a1:f5:b9:6b:fa:9a:f9:5f:
                    84:bd:86:bf:94:ac:66:51:02:bc:02:be:7c:35:28:
                    41:e1:eb:fe:07:5c:3e:4b:0b:bf:71:96:12:dc:da:
                    c2:44:31:a8:ac:f5:8a:f6:49:49:34:81:87:f1:15:
                    a1:90:9e:25:4d:ac:00:d6:61:a4:f2:0a:bb:6c:92:
                    b0:b0:f4:bf:53:b3:82:30:bd:72:f2:a8:fe:57:74:
                    c6:52:58:8e:a2:3a:d5:85:38:3a:2d:ef:cd:05:c3:
                    b5:bf:73:ad:2f:bb:16:06:63:48:3f:09:25:73:94:
                    3b:bd:4d:d7:85:e7:5b:7d:dc:b7:dc:89:9c:b7:13:
                    5b:1f:14:4b:8f:18:21:7f:c6:f6:2d:70:08:8a:a3:
                    1e:cd:97:cd:bc:00:cd:a1:a3:49:a2:01:b7:b7:2a:
                    d7:75:f1:21:07:4a:85:ea:0c:a3:92:4d:23:ac:ab:
                    d6:77:ca:96:c5:49:fc:d2:4f:4b:fa:91:89:e7:92:
                    09:9c:74:f2:80:f6:0b:47:d6:63:92:11:d2:f7:21:
                    a3:e0:ed:99:94:32:5c:6e:ad:9a:bd:37:e4:3a:70:
                    44:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:41:70:47:AC:AB:D8:B9:C2:3A:95:96:15:E1:57:51:D7:7D:FE:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/813789ec-658b-3a1c-9583-3dac7d532d21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.crl

            X509v3 Authority Key Identifier:
                keyid:3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.77.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:97:3c:74:d2:65:15:91:b4:98:e4:c0:f0:9b:8f:a0:b9:24:
         7b:a2:95:b4:4a:cf:07:63:af:ec:80:01:d1:ed:b9:c2:be:9f:
         7b:34:43:95:8d:bb:1d:c9:64:ac:64:f5:ba:ed:5f:d0:58:e6:
         5c:3f:74:ac:ea:39:cb:59:ce:f0:4d:c9:58:f0:66:f2:3d:4a:
         9e:aa:1e:dd:d1:eb:c6:7b:ff:84:ce:54:50:28:df:7a:46:d6:
         04:59:8a:bc:e3:6c:0a:05:21:4a:4f:f3:11:94:68:25:3b:9f:
         10:52:a1:cb:03:a2:0e:12:98:ac:8a:4f:df:13:ca:50:d6:7f:
         36:86:3c:5f:3a:cf:f6:6e:e8:20:22:5e:45:54:f6:37:94:1a:
         31:58:b0:74:af:bf:bc:f6:7f:d9:1b:25:f7:85:ad:e4:31:4e:
         f6:52:21:a0:f3:0f:ff:1f:8a:55:32:92:f7:fb:68:01:65:75:
         3c:06:00:7c:4d:fa:ff:0e:cb:53:12:06:f9:a1:7a:5a:b0:30:
         d1:51:87:fa:00:1b:4c:83:b5:f3:0d:88:cc:f1:aa:2b:55:63:
         1d:ad:5d:f9:eb:14:2f:2d:c9:7f:73:14:c3:d8:bb:7c:e7:52:
         dc:c9:0a:73:9e:4f:b2:f8:43:b4:9b:21:75:1d:0b:8c:95:5f:
         fb:5e:c3:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnDb3oGKuQccxkvV4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGUxNTk4MjAtY2Y1Ni00MmViLWI5ZjAtMDE4N2IxMGJi
NzIxMB4XDTI1MDUwNjEzMDEwMVoXDTI1MDgwNDEzMDEwMVowLzEtMCsGA1UEAxMk
Nzg0ZGNlYjQtOGIyOC00YWMzLTk3ODctMTFlMDQxY2RhNDc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnMwPzEwnE9OtlWeFTLXJy0nwGyxBeIZrF8b
9yg9prmkhXSBofW5a/qa+V+EvYa/lKxmUQK8Ar58NShB4ev+B1w+Swu/cZYS3NrC
RDGorPWK9klJNIGH8RWhkJ4lTawA1mGk8gq7bJKwsPS/U7OCML1y8qj+V3TGUliO
ojrVhTg6Le/NBcO1v3OtL7sWBmNIPwklc5Q7vU3Xhedbfdy33ImctxNbHxRLjxgh
f8b2LXAIiqMezZfNvADNoaNJogG3tyrXdfEhB0qF6gyjkk0jrKvWd8qWxUn80k9L
+pGJ55IJnHTygPYLR9ZjkhHS9yGj4O2ZlDJcbq2avTfkOnBEZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGZBcEesq9i5wjqVlhXhV1HXff60MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZTE1
OTgyMC1jZjU2LTQyZWItYjlmMC0wMTg3YjEwYmI3MjEvODEzNzg5ZWMtNjU4Yi0z
YTFjLTk1ODMtM2RhYzdkNTMyZDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGUxNTk4MjAtY2Y1Ni00MmViLWI5
ZjAtMDE4N2IxMGJiNzIxLzhlMTU5ODIwLWNmNTYtNDJlYi1iOWYwLTAxODdiMTBi
YjcyMS5jcmwwHwYDVR0jBBgwFoAUP6asP+ah5UuMrQtDbx2HECUnhEQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZTE1OTgyMC1jZjU2LTQyZWItYjlmMC0wMTg3
YjEwYmI3MjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwE0yMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGWXPHTSZRWRtJjkwPCbj6C5JHuilbRKzwdjr+yAAdHtucK+n3s0Q5WN
ux3JZKxk9brtX9BY5lw/dKzqOctZzvBNyVjwZvI9Sp6qHt3R68Z7/4TOVFAo33pG
1gRZirzjbAoFIUpP8xGUaCU7nxBSocsDog4SmKyKT98TylDWfzaGPF86z/Zu6CAi
XkVU9jeUGjFYsHSvv7z2f9kbJfeFreQxTvZSIaDzD/8filUykvf7aAFldTwGAHxN
+v8Oy1MSBvmhelqwMNFRh/oAG0yDtfMNiMzxqitVYx2tXfnrFC8tyX9zFMPYu3zn
UtzJCnOeT7L4Q7SbIXUdC4yVX/teww8=
-----END CERTIFICATE-----
Generated at Thu May 8 02:34:55 2025 by rpki-client