Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/64d00f53-fb7e-316c-940d-84ea62ffb328.roa
File:                     64d00f53-fb7e-316c-940d-84ea62ffb328.roa (raw, json)
Hash identifier:          +4kqRkKWi1W/pvU1m3vKq1Zq4Hm4eNwV6Z+M9YLlNP0=
Subject key identifier:   6D:95:DA:A7:27:FE:0D:49:8B:7B:12:FE:55:7A:56:8E:9C:10:42:A9
Certificate issuer:       /CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
Certificate serial:       010D0C9F43285849D42FA868A5D5ACFEE5E3E7C0
Authority key identifier: AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/64d00f53-fb7e-316c-940d-84ea62ffb328.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     20055
IP address blocks:        50.34.0.0/15 maxlen: 15
                          50.46.0.0/15 maxlen: 15
                          50.125.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:a8:68:a5:d5:ac:fe:e5:e3:e7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=6438d5f9-6e2d-47f6-b369-68183d8236c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:39:83:09:77:9e:ad:57:50:34:16:8d:9a:3d:
                    40:56:40:47:cd:55:c6:70:ac:4f:62:70:a0:d3:f9:
                    9b:bf:2c:2a:c1:11:c5:b5:c3:02:33:6f:95:f6:ae:
                    5c:15:8a:86:69:b6:40:21:2f:56:12:64:4d:bf:76:
                    49:4a:b6:1b:90:e1:e4:50:18:bb:4f:a3:7c:d2:ed:
                    b5:98:44:67:b5:27:f9:f6:51:ea:ad:95:c9:27:93:
                    28:cc:c1:d6:94:05:53:66:7b:6b:ca:fc:9e:49:79:
                    30:0a:ee:5b:de:84:e0:c0:cc:ae:86:d2:e2:a2:92:
                    14:94:b3:e4:4b:db:f1:fa:6c:c0:34:05:37:c1:c7:
                    ff:5e:76:25:2c:e0:2c:a3:6c:7a:85:28:06:e3:71:
                    31:d9:64:c5:2b:e5:5f:39:ee:11:48:1b:dc:d1:6e:
                    9d:06:ee:41:a5:56:8f:50:17:3f:eb:ca:f1:2e:ab:
                    1d:c1:cb:62:e9:5e:27:eb:88:db:3b:6b:1c:6f:f2:
                    ed:f3:ac:4f:cc:6c:a1:de:a8:cd:1f:77:13:73:c7:
                    59:d8:24:b3:82:c9:9c:51:42:98:54:d0:11:cd:81:
                    c1:de:a3:62:93:0b:65:0d:23:2a:05:13:1d:2a:ba:
                    ec:40:90:bf:50:ff:dd:4b:38:10:7f:0a:d9:48:4e:
                    84:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:95:DA:A7:27:FE:0D:49:8B:7B:12:FE:55:7A:56:8E:9C:10:42:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/64d00f53-fb7e-316c-940d-84ea62ffb328.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl

            X509v3 Authority Key Identifier:
                keyid:AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.34.0.0/15
                  50.46.0.0/15
                  50.125.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:e0:01:24:d6:ce:f8:71:f5:3b:ad:e8:e1:0c:37:90:93:ea:
         77:c4:a8:09:89:86:dc:b2:40:c8:23:db:e2:5a:1d:f6:12:34:
         46:ad:69:fc:22:75:74:cc:eb:aa:2a:aa:9e:36:c2:7e:35:8f:
         88:4f:6f:bb:f1:a4:03:00:40:42:11:ce:c5:e3:13:e3:c7:be:
         34:d2:88:06:24:9d:52:65:38:d9:4e:bf:d4:e2:ca:36:a3:de:
         b7:1c:59:7c:16:06:be:08:54:05:f4:ad:2d:ff:14:a1:df:1b:
         53:b4:b2:aa:38:2a:81:da:7e:41:73:32:54:45:83:6d:a9:60:
         de:2a:2c:e0:c5:c9:13:a1:11:0e:b6:52:b8:1a:52:02:be:b8:
         68:91:12:77:00:ef:60:ec:55:16:67:6f:97:c8:c4:e1:a4:65:
         5e:94:10:7a:c9:c3:7c:f4:ec:e0:b5:8d:3b:8a:12:57:24:98:
         29:fd:d2:8f:07:e2:04:2f:37:ce:49:8e:d6:34:d2:3a:0d:c7:
         70:cf:bf:5f:28:a5:a7:a6:bb:1e:7e:28:21:d5:52:18:13:df:
         ca:84:e7:ee:d7:29:55:e5:4e:2d:e7:36:ec:59:ca:57:57:28:
         d9:ed:e3:3d:93:ad:23:13:b9:0a:5f:82:76:f5:a1:a2:e8:6c:
         5f:03:cf:d4
-----BEGIN CERTIFICATE-----
MIIGTDCCBTSgAwIBAgIUAQ0Mn0MoWEnUL6hopdWs/uXj58AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzFkM2EwNTAtM2VlNi00NWJmLTk5MmYtOWFjMDA1ZjNm
Zjg0MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk
NjQzOGQ1ZjktNmUyZC00N2Y2LWIzNjktNjgxODNkODIzNmMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTmDCXeerVdQNBaNmj1AVkBHzVXGcKxPYnCg
0/mbvywqwRHFtcMCM2+V9q5cFYqGabZAIS9WEmRNv3ZJSrYbkOHkUBi7T6N80u21
mERntSf59lHqrZXJJ5MozMHWlAVTZntryvyeSXkwCu5b3oTgwMyuhtLiopIUlLPk
S9vx+mzANAU3wcf/XnYlLOAso2x6hSgG43Ex2WTFK+VfOe4RSBvc0W6dBu5BpVaP
UBc/68rxLqsdwcti6V4n64jbO2scb/Lt86xPzGyh3qjNH3cTc8dZ2CSzgsmcUUKY
VNARzYHB3qNikwtlDSMqBRMdKrrsQJC/UP/dSzgQfwrZSE6ExwIDAQABo4IDXjCC
A1owHQYDVR0OBBYEFG2V2qcn/g1Ji3sS/lV6Vo6cEEKpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMWQz
YTA1MC0zZWU2LTQ1YmYtOTkyZi05YWMwMDVmM2ZmODQvNjRkMDBmNTMtZmI3ZS0z
MTZjLTk0MGQtODRlYTYyZmZiMzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzFkM2EwNTAtM2VlNi00NWJmLTk5
MmYtOWFjMDA1ZjNmZjg0LzMxZDNhMDUwLTNlZTYtNDViZi05OTJmLTlhYzAwNWYz
ZmY4NC5jcmwwHwYDVR0jBBgwFoAUqwDRM2gPLUxY5W+LXdxYiSD+kuswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zMWQzYTA1MC0zZWU2LTQ1YmYtOTkyZi05YWMw
MDVmM2ZmODQuY2VyMCgGCCsGAQUFBwEHAQH/BBkwFzAVBAIAATAPAwMBMiIDAwEy
LgMDADJ9MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs
aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ
KoZIhvcNAQELBQADggEBAELgASTWzvhx9Tut6OEMN5CT6nfEqAmJhtyyQMgj2+Ja
HfYSNEatafwidXTM66oqqp42wn41j4hPb7vxpAMAQEIRzsXjE+PHvjTSiAYknVJl
ONlOv9Tiyjaj3rccWXwWBr4IVAX0rS3/FKHfG1O0sqo4KoHafkFzMlRFg22pYN4q
LODFyROhEQ62UrgaUgK+uGiREncA72DsVRZnb5fIxOGkZV6UEHrJw3z07OC1jTuK
ElckmCn90o8H4gQvN85JjtY00joNx3DPv18opaemux5+KCHVUhgT38qE5+7XKVXl
Ti3nNuxZyldXKNnt4z2TrSMTuQpfgnb1oaLobF8Dz9Q=
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:48:04 2025 by rpki-client