Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/50d9c464-06a9-3c71-81b4-4dc3c759679a.roa
File:                     50d9c464-06a9-3c71-81b4-4dc3c759679a.roa (raw, json)
Hash identifier:          IaKbVkk4tNnIirHg7wViaou0xuyRGljDJyHUIo8RLjU=
Subject key identifier:   4D:9A:54:08:63:63:20:8C:49:32:E2:51:82:12:30:89:22:81:20:5D
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F43285849A4B9FB6FC81CEA6093FE646C
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/50d9c464-06a9-3c71-81b4-4dc3c759679a.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     14813
IP address blocks:        72.51.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:b9:fb:6f:c8:1c:ea:60:93:fe:64:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=abffc0fb-d2be-4ecb-806d-bdd91d62ef9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:eb:e4:4d:fa:0b:cb:71:2a:e2:fa:c3:f9:8d:
                    81:19:21:db:43:a7:23:2f:26:f2:7d:d3:ca:7d:c8:
                    4a:bd:50:f0:07:21:d1:75:c1:c0:8d:fd:9b:b9:e8:
                    8c:28:40:81:4a:63:fc:de:f6:fe:ab:03:b5:38:55:
                    eb:c7:da:49:fe:d7:43:ef:7b:e8:2f:3e:98:da:83:
                    ac:79:80:69:ae:ed:38:9e:72:4d:68:f1:85:8f:2a:
                    29:77:91:2d:5e:ef:2d:45:61:00:4e:87:ff:4f:48:
                    89:6d:65:53:f0:68:85:10:34:e9:93:e3:9a:fb:34:
                    7a:62:57:07:12:a2:9b:6c:9d:fa:1b:38:99:2c:aa:
                    f1:76:b3:d6:3f:d8:ce:41:39:6f:4b:51:f9:71:49:
                    99:bd:62:18:8f:46:41:d0:6e:ce:45:1b:dd:af:78:
                    ec:f5:b3:9e:07:71:5b:b1:c7:c1:f8:a1:53:de:ed:
                    d1:0c:52:61:64:fc:98:f9:f1:b9:4e:f2:17:06:9b:
                    67:8e:f0:78:62:43:1f:07:e2:51:bf:56:a9:54:d3:
                    84:42:47:3d:8b:49:af:14:81:f6:a0:79:74:3e:36:
                    74:92:e1:38:c1:c0:58:d9:b6:2a:0f:1e:33:8a:5c:
                    98:0d:6d:76:45:50:6d:37:ed:e6:2d:38:cd:16:12:
                    67:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:9A:54:08:63:63:20:8C:49:32:E2:51:82:12:30:89:22:81:20:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/50d9c464-06a9-3c71-81b4-4dc3c759679a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.51.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:a5:87:15:07:63:2c:2f:68:99:e4:0d:5f:e8:a6:38:5c:3b:
         b2:92:25:02:2e:30:88:b3:6b:61:cd:a1:8d:cb:94:b8:d4:02:
         15:8b:80:02:1d:5f:40:f0:8b:08:c7:f4:28:af:fa:dd:b0:80:
         04:7f:8a:94:6d:3b:70:35:78:d3:f2:80:5e:f6:17:c4:37:5b:
         f2:86:80:ba:dc:e7:84:9b:3d:b7:61:ca:a6:5c:dd:17:a5:6a:
         e5:30:57:44:4e:fa:d8:f4:35:fc:c5:c6:f0:c8:0b:bc:6c:6d:
         32:f8:5c:8a:ed:ae:fb:40:2a:63:df:c7:10:80:1b:d7:e0:dc:
         c3:a7:da:fe:69:0b:91:07:1a:8e:60:fa:6a:b0:f9:ec:69:14:
         58:a3:b8:0f:0a:e3:5d:99:25:30:e4:22:b8:0c:02:63:e3:e9:
         79:7c:5f:46:0f:ce:e6:ba:b5:a7:5a:c7:9d:c0:dc:ec:14:81:
         f4:c7:f7:79:45:f8:32:3a:54:31:f5:f4:12:8e:e7:4a:ba:0a:
         9c:60:37:ae:6e:ef:76:de:c0:8c:30:d9:3a:d9:09:f1:60:6c:
         6c:9c:dd:a2:45:e1:7d:37:95:2f:b0:61:8a:96:82:7c:94:67:
         45:33:07:ca:1f:b1:75:8a:68:94:f0:4f:a9:36:4c:2b:e5:7b:
         2c:fc:36:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuftvyBzqYJP+ZGwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3
MTk1MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
YWJmZmMwZmItZDJiZS00ZWNiLTgwNmQtYmRkOTFkNjJlZjliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OvkTfoLy3Eq4vrD+Y2BGSHbQ6cjLybyfdPK
fchKvVDwByHRdcHAjf2bueiMKECBSmP83vb+qwO1OFXrx9pJ/tdD73voLz6Y2oOs
eYBpru04nnJNaPGFjyopd5EtXu8tRWEATof/T0iJbWVT8GiFEDTpk+Oa+zR6YlcH
EqKbbJ36GziZLKrxdrPWP9jOQTlvS1H5cUmZvWIYj0ZB0G7ORRvdr3js9bOeB3Fb
scfB+KFT3u3RDFJhZPyY+fG5TvIXBptnjvB4YkMfB+JRv1apVNOEQkc9i0mvFIH2
oHl0PjZ0kuE4wcBY2bYqDx4zilyYDW12RVBtN+3mLTjNFhJnAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE2aVAhjYyCMSTLiUYISMIkigSBdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0
MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvNTBkOWM0NjQtMDZhOS0z
YzcxLTgxYjQtNGRjM2M3NTk2NzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk
YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy
NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5
MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDNjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEqlhxUHYywvaJnkDV/opjhcO7KSJQIuMIiza2HNoY3LlLjUAhWLgAId
X0DwiwjH9Civ+t2wgAR/ipRtO3A1eNPygF72F8Q3W/KGgLrc54SbPbdhyqZc3Rel
auUwV0RO+tj0NfzFxvDIC7xsbTL4XIrtrvtAKmPfxxCAG9fg3MOn2v5pC5EHGo5g
+mqw+expFFijuA8K412ZJTDkIrgMAmPj6Xl8X0YPzua6tadax53A3OwUgfTH93lF
+DI6VDH19BKO50q6CpxgN65u73bewIww2TrZCfFgbGyc3aJF4X03lS+wYYqWgnyU
Z0UzB8ofsXWKaJTwT6k2TCvleyz8Nv8=
-----END CERTIFICATE-----
Generated at Sun Apr 27 21:31:36 2025 by rpki-client