Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/849e8e70-ea72-3396-b54f-a0fa910d8710.roa
File:                     849e8e70-ea72-3396-b54f-a0fa910d8710.roa (raw, json)
Hash identifier:          N6nYjuaRLSDqLJoWb/Mf5lt0PFgMDA8suncCN6lMuFM=
Subject key identifier:   12:0F:07:B1:07:AD:44:2A:1D:04:F2:6A:8A:46:84:8F:9F:E9:2B:49
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584ACCA6673BF892BF6588AFEB00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/849e8e70-ea72-3396-b54f-a0fa910d8710.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     16625
IP address blocks:        184.50.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:67:3b:f8:92:bf:65:88:af:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=5ccf7db8-c3c9-42d3-aae8-d25c6cf10496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:82:01:da:ef:fd:e1:f9:c0:c1:1c:54:5a:88:
                    42:8a:2f:9a:f4:6f:b0:c2:1c:29:e2:58:0d:c7:30:
                    42:59:dc:d7:6e:ad:a4:bb:8a:1c:4e:95:7b:9f:90:
                    0c:9b:50:98:30:54:cc:b2:4a:7d:6a:99:ea:89:1d:
                    66:d3:7c:4b:74:15:5f:ed:f7:6f:ed:60:10:4a:51:
                    af:40:8e:3a:0b:11:12:3a:af:2b:a2:d7:1a:9e:b2:
                    55:e4:8a:20:aa:fb:88:47:97:95:24:de:81:f3:ea:
                    5d:ce:20:76:bd:0e:e7:cc:d6:fa:bc:4e:25:a3:00:
                    7c:6d:d3:1f:61:9e:ad:b0:49:c9:2b:43:91:e6:40:
                    62:41:36:fd:ea:a1:b7:ba:ec:71:f9:33:cb:2d:55:
                    0e:42:68:1b:8c:09:79:f7:42:47:92:36:5c:c6:32:
                    29:18:b6:f2:34:e0:7c:1a:32:7d:bb:36:82:bb:0d:
                    6b:42:5c:5a:65:99:8f:6f:89:5c:3b:4c:af:2e:7e:
                    c4:31:33:a3:49:ca:84:0b:a3:44:1b:a1:95:13:95:
                    ad:a2:2e:51:69:93:fe:c7:7d:a9:85:d3:d3:ca:d7:
                    fe:cb:3b:ed:9b:63:65:05:96:07:07:61:0d:09:e8:
                    c0:b5:1d:a3:cf:46:d7:0e:db:4b:0c:ae:2e:ce:06:
                    b8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:0F:07:B1:07:AD:44:2A:1D:04:F2:6A:8A:46:84:8F:9F:E9:2B:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/849e8e70-ea72-3396-b54f-a0fa910d8710.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.50.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:a4:75:76:90:7a:62:6e:33:f0:2a:b1:d7:ac:26:99:2e:cd:
         50:a0:bb:d4:14:8d:a9:36:a1:ee:3a:57:c1:67:47:8d:ca:cb:
         13:96:79:b5:de:69:95:4c:7a:fb:f4:39:2b:9e:d3:1f:15:dc:
         53:ba:5c:cd:16:8b:ca:79:45:9c:26:0c:9b:b3:2c:de:5c:a2:
         2b:f6:59:a2:dc:23:5c:c1:ac:1a:0a:2b:a1:84:30:2b:a9:40:
         01:05:0b:a6:fd:6d:55:1b:dc:64:88:36:17:4e:9b:12:09:59:
         06:bb:61:bc:74:c0:07:28:fa:e7:ea:62:7d:2b:13:95:9a:90:
         a5:53:5e:81:b9:8c:3b:5f:36:c3:6b:0c:76:98:bd:89:68:9b:
         48:fe:0c:47:bc:6a:3f:3c:33:2d:0c:bc:1a:ac:66:22:68:dd:
         83:20:bc:d6:cd:88:8f:ee:69:a3:17:7f:7c:8a:e2:bb:7a:cc:
         36:2f:09:4c:34:71:f8:d3:76:a1:90:a6:50:cf:71:7a:d9:8e:
         01:98:72:df:57:19:59:6a:9e:a8:7a:08:56:15:a8:ef:2e:f8:
         25:d8:2a:2c:bc:e7:32:cf:2c:5f:15:dd:49:22:cd:ae:88:ca:
         32:d5:26:9f:a5:90:d5:15:fe:b6:d5:95:fb:b3:57:fd:8a:f6:
         62:40:d5:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpmc7+JK/ZYiv6wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk
NWNjZjdkYjgtYzNjOS00MmQzLWFhZTgtZDI1YzZjZjEwNDk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYIB2u/94fnAwRxUWohCii+a9G+wwhwp4lgN
xzBCWdzXbq2ku4ocTpV7n5AMm1CYMFTMskp9apnqiR1m03xLdBVf7fdv7WAQSlGv
QI46CxESOq8rotcanrJV5IogqvuIR5eVJN6B8+pdziB2vQ7nzNb6vE4lowB8bdMf
YZ6tsEnJK0OR5kBiQTb96qG3uuxx+TPLLVUOQmgbjAl590JHkjZcxjIpGLbyNOB8
GjJ9uzaCuw1rQlxaZZmPb4lcO0yvLn7EMTOjScqEC6NEG6GVE5Wtoi5RaZP+x32p
hdPTytf+yzvtm2NlBZYHB2ENCejAtR2jz0bXDttLDK4uzga4BQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBIPB7EHrUQqHQTyaopGhI+f6StJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODQ5ZThlNzAtZWE3Mi0z
Mzk2LWI1NGYtYTBmYTkxMGQ4NzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuDLIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHGkdXaQemJuM/AqsdesJpkuzVCgu9QUjak2oe46V8FnR43KyxOWebXe
aZVMevv0OSue0x8V3FO6XM0Wi8p5RZwmDJuzLN5coiv2WaLcI1zBrBoKK6GEMCup
QAEFC6b9bVUb3GSINhdOmxIJWQa7Ybx0wAco+ufqYn0rE5WakKVTXoG5jDtfNsNr
DHaYvYlom0j+DEe8aj88My0MvBqsZiJo3YMgvNbNiI/uaaMXf3yK4rt6zDYvCUw0
cfjTdqGQplDPcXrZjgGYct9XGVlqnqh6CFYVqO8u+CXYKiy85zLPLF8V3Ukiza6I
yjLVJp+lkNUV/rbVlfuzV/2K9mJA1QY=
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:51:02 2025 by rpki-client