Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/458ae3bd-24e1-31f9-bfac-033b41a897c4.roa
File:                     458ae3bd-24e1-31f9-bfac-033b41a897c4.roa (raw, json)
Hash identifier:          m5poXyetL9bfHYSkBKO5OiXo1g6u8dtj6piz1/EQAFw=
Subject key identifier:   F4:CB:62:E8:D3:6E:2D:40:FF:2F:C5:54:A7:0D:FD:F6:F5:21:53:74
Certificate issuer:       /CN=4d4940f4-61c2-4251-acdb-36be83cdc744
Certificate serial:       010D0C9F4328584975F0F2AB0AAB97D883920B40
Authority key identifier: 3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/458ae3bd-24e1-31f9-bfac-033b41a897c4.roa
Signing time:             Tue 08 Apr 2025 18:48:53 +0000
ROA not before:           Tue 08 Apr 2025 18:48:53 +0000
ROA not after:            Mon 07 Jul 2025 18:48:53 +0000
asID:                     6407
IP address blocks:        50.93.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:75:f0:f2:ab:0a:ab:97:d8:83:92:0b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d4940f4-61c2-4251-acdb-36be83cdc744
        Validity
            Not Before: Apr  8 18:48:53 2025 GMT
            Not After : Jul  7 18:48:53 2025 GMT
        Subject: CN=32875d86-25d6-412f-abc0-67a3a670f01f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:65:40:e5:79:3f:fc:22:e7:86:f6:0e:ed:7b:
                    6f:f2:19:ff:d4:02:47:17:6a:f6:ec:c3:5d:97:b8:
                    6e:74:52:eb:fb:a7:19:81:31:f0:45:79:7a:c4:f5:
                    14:2f:47:e7:07:4a:2e:f6:07:64:6b:be:cb:80:5b:
                    56:97:a7:38:93:f0:21:e1:e6:2a:af:cd:e1:74:e8:
                    52:22:14:7e:c2:d5:df:48:90:cc:0c:48:82:a0:e5:
                    b7:95:75:ae:d2:4d:9f:da:ac:e0:0f:46:43:37:dc:
                    91:7e:9e:fe:c4:e9:02:d7:7b:39:47:91:e1:99:5c:
                    36:d7:d8:3b:3a:d6:eb:02:41:c9:b2:4e:27:31:04:
                    47:f1:42:43:26:48:46:82:a5:6c:aa:0b:9d:59:98:
                    8a:91:10:75:9d:9a:98:7c:9e:9f:bf:f7:a8:77:6c:
                    de:c4:86:69:15:d2:fd:41:67:67:a7:69:86:4a:7d:
                    78:5c:96:69:6e:50:32:d8:83:cb:b0:68:5c:bc:63:
                    12:08:b5:56:d7:53:88:a0:92:0b:a8:6f:d5:ef:5a:
                    3b:20:14:b1:aa:0f:9e:6f:9c:59:9d:4f:9d:eb:91:
                    0e:d2:a6:48:22:eb:52:f3:5e:f4:00:8f:29:41:b7:
                    b1:01:94:a0:31:9f:bd:f7:26:76:49:de:a5:ac:47:
                    fa:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:CB:62:E8:D3:6E:2D:40:FF:2F:C5:54:A7:0D:FD:F6:F5:21:53:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/458ae3bd-24e1-31f9-bfac-033b41a897c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl

            X509v3 Authority Key Identifier:
                keyid:3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.93.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:29:70:a4:f7:ea:d4:dd:a3:9f:5f:3c:bd:24:19:08:de:af:
         ee:c1:36:dd:e9:2e:99:1c:71:45:b7:4b:c4:91:cb:ef:d4:72:
         cc:c2:8f:4f:c4:3a:65:00:70:cb:2c:ec:0b:c7:06:0c:8f:6a:
         fd:57:ed:ca:05:7e:ba:3b:91:f5:dd:29:43:28:dc:a3:8b:a5:
         e1:ad:40:57:14:51:f3:51:c5:11:43:71:dd:bd:42:ce:1e:a2:
         26:d5:c2:e5:55:12:25:8c:c2:a8:25:3b:b2:f8:cb:9c:60:ba:
         5f:97:fe:ea:6d:6d:2a:09:a0:13:01:11:91:53:ae:cb:f6:b9:
         db:43:86:85:01:d0:d4:e8:12:40:4b:8b:e5:d0:17:52:bd:cc:
         33:a8:4b:a4:22:3c:cd:f2:42:1f:46:e0:2b:44:7f:3d:e2:9f:
         fa:f1:fd:bc:dd:8a:ec:e5:69:8f:c0:b5:e2:e9:3d:68:10:80:
         60:c2:62:05:df:9c:3c:f7:16:4a:7f:60:a2:4d:8d:d1:70:a5:
         10:fa:f2:1d:9e:7e:8b:66:11:61:0f:5a:50:72:90:cd:c6:dd:
         4a:5a:09:d7:df:0e:be:9c:e5:16:c8:ef:23:5d:ce:aa:28:b5:
         98:0b:5d:a4:9f:0f:5b:1f:d8:35:64:91:c7:8c:4f:46:f6:7d:
         26:50:8b:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl18PKrCquX2IOSC0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGQ0OTQwZjQtNjFjMi00MjUxLWFjZGItMzZiZTgzY2Rj
NzQ0MB4XDTI1MDQwODE4NDg1M1oXDTI1MDcwNzE4NDg1M1owLzEtMCsGA1UEAxMk
MzI4NzVkODYtMjVkNi00MTJmLWFiYzAtNjdhM2E2NzBmMDFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWVA5Xk//CLnhvYO7Xtv8hn/1AJHF2r27MNd
l7hudFLr+6cZgTHwRXl6xPUUL0fnB0ou9gdka77LgFtWl6c4k/Ah4eYqr83hdOhS
IhR+wtXfSJDMDEiCoOW3lXWu0k2f2qzgD0ZDN9yRfp7+xOkC13s5R5HhmVw219g7
OtbrAkHJsk4nMQRH8UJDJkhGgqVsqgudWZiKkRB1nZqYfJ6fv/eod2zexIZpFdL9
QWdnp2mGSn14XJZpblAy2IPLsGhcvGMSCLVW11OIoJILqG/V71o7IBSxqg+eb5xZ
nU+d65EO0qZIIutS8170AI8pQbexAZSgMZ+99yZ2Sd6lrEf6HwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPTLYujTbi1A/y/FVKcN/fb1IVN0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZDQ5
NDBmNC02MWMyLTQyNTEtYWNkYi0zNmJlODNjZGM3NDQvNDU4YWUzYmQtMjRlMS0z
MWY5LWJmYWMtMDMzYjQxYTg5N2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGQ0OTQwZjQtNjFjMi00MjUxLWFj
ZGItMzZiZTgzY2RjNzQ0LzRkNDk0MGY0LTYxYzItNDI1MS1hY2RiLTM2YmU4M2Nk
Yzc0NC5jcmwwHwYDVR0jBBgwFoAUPdev1k6DmBY4LIH9klbSh2ozmcIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS80ZDQ5NDBmNC02MWMyLTQyNTEtYWNkYi0zNmJl
ODNjZGM3NDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEMl2gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB0pcKT36tTdo59fPL0kGQjer+7BNt3pLpkccUW3S8SRy+/UcszCj0/E
OmUAcMss7AvHBgyPav1X7coFfro7kfXdKUMo3KOLpeGtQFcUUfNRxRFDcd29Qs4e
oibVwuVVEiWMwqglO7L4y5xgul+X/uptbSoJoBMBEZFTrsv2udtDhoUB0NToEkBL
i+XQF1K9zDOoS6QiPM3yQh9G4CtEfz3in/rx/bzdiuzlaY/AteLpPWgQgGDCYgXf
nDz3Fkp/YKJNjdFwpRD68h2efotmEWEPWlBykM3G3UpaCdffDr6c5RbI7yNdzqoo
tZgLXaSfD1sf2DVkkceMT0b2fSZQi1Q=
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:26:38 2025 by rpki-client