Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/6d14574e-b5d2-3a05-b121-6afafcc71131.roa
File:                     6d14574e-b5d2-3a05-b121-6afafcc71131.roa (raw, json)
Hash identifier:          Q3ZNPRG1WyK6EREuhxmgmQnnS6SQYyZy+L2OqU7fvJw=
Subject key identifier:   C7:DD:EF:22:CA:9C:45:65:30:C3:38:3F:F9:92:71:89:8C:47:97:1D
Certificate issuer:       /CN=221cdd91-10e9-41bb-8765-69edc6f1e631
Certificate serial:       010D0C9F4328584AB650E4ED4290873AB945F1E0
Authority key identifier: D4:0C:BD:52:74:20:06:4C:A1:FA:04:8B:7D:02:D2:8B:6E:9F:21:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/6d14574e-b5d2-3a05-b121-6afafcc71131.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     16509
IP address blocks:        130.50.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/221cdd91-10e9-41bb-8765-69edc6f1e631.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/221cdd91-10e9-41bb-8765-69edc6f1e631.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:e4:ed:42:90:87:3a:b9:45:f1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=221cdd91-10e9-41bb-8765-69edc6f1e631
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=738f89f8-063c-4cab-b1b4-c75dc5223c71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:98:03:87:eb:46:38:0c:74:77:9b:43:06:a3:
                    64:38:74:ee:dd:0e:d6:3c:4c:6d:cf:5d:0e:7e:38:
                    3c:1e:f9:5a:02:37:63:ba:46:5d:67:62:7f:00:ad:
                    a3:67:8f:6b:ec:0f:37:51:33:26:0f:5d:41:ff:a2:
                    1f:4b:d6:69:ef:c1:fc:99:f7:04:e6:ad:71:e1:7c:
                    93:18:5e:d6:0e:0c:23:99:0c:d2:b9:b9:9f:89:06:
                    b8:8c:47:91:ea:85:fa:f3:01:92:91:22:89:0c:fd:
                    4b:eb:05:e9:f5:2e:9b:9d:5e:4c:ee:de:96:b3:5e:
                    8a:97:da:20:ed:d3:c4:69:b5:ec:37:71:05:6c:9f:
                    bf:2a:cc:cb:4d:25:78:83:cd:35:0c:9e:4e:e7:cd:
                    7a:3e:84:33:17:0e:84:6a:5d:df:0d:ae:ee:84:55:
                    4d:ba:f2:aa:d8:08:e1:50:9e:1a:31:35:08:b5:56:
                    3e:d4:8a:12:00:e7:f1:ac:a9:7e:b9:05:50:9c:01:
                    c5:e1:07:86:40:9f:31:e9:4d:ee:cc:79:84:a5:58:
                    aa:4f:6f:81:3e:1e:ca:a6:dd:c0:2e:d1:97:eb:41:
                    0b:a9:81:39:44:8b:c0:aa:ca:84:bf:ae:c0:58:1a:
                    86:75:9d:49:8b:a6:25:66:96:26:5e:64:f8:2d:11:
                    27:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:DD:EF:22:CA:9C:45:65:30:C3:38:3F:F9:92:71:89:8C:47:97:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/6d14574e-b5d2-3a05-b121-6afafcc71131.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/221cdd91-10e9-41bb-8765-69edc6f1e631.crl

            X509v3 Authority Key Identifier:
                keyid:D4:0C:BD:52:74:20:06:4C:A1:FA:04:8B:7D:02:D2:8B:6E:9F:21:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.50.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:84:e8:79:8a:36:38:31:28:5a:87:31:8a:ea:b5:01:6f:68:
         ba:9f:2b:1a:53:70:54:ff:f0:56:b6:a9:09:a7:e0:41:25:18:
         e8:8e:70:81:5a:b7:ee:34:4c:b8:f5:cc:c2:c5:a4:37:ed:f4:
         18:85:76:d2:47:11:67:4b:2d:ef:96:ea:51:56:89:f8:d8:ee:
         47:f3:02:32:0a:b0:01:80:12:c0:e5:10:5a:6e:8f:4b:61:16:
         ec:c6:f8:26:b2:cb:ea:ab:70:ff:fa:1e:f4:e8:54:76:0f:c1:
         8f:e4:2b:2f:d6:31:66:b2:2e:c2:6d:db:94:5a:2b:e8:56:1d:
         c9:a9:57:f1:77:f1:26:11:ff:13:0c:e0:0b:36:3d:99:42:49:
         65:cb:58:6f:12:dd:ca:4a:98:69:f7:ee:39:dd:89:34:7b:95:
         ec:40:d4:71:25:4a:e3:f2:f0:74:6e:9d:4e:f9:8d:89:a9:97:
         4e:a2:04:ac:b5:4a:4c:b0:9d:3e:a1:be:10:2b:88:e4:e0:b4:
         d0:85:f7:cd:17:ed:cf:5f:64:3a:11:28:57:15:b4:12:07:b6:
         52:3f:e4:63:1f:f5:3d:2b:85:df:24:47:40:3f:97:12:b0:9f:
         51:cc:2e:bf:ee:7d:0d:bf:d2:46:ca:4f:bc:c5:77:ab:cc:b2:
         90:84:8e:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UOTtQpCHOrlF8eAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjIxY2RkOTEtMTBlOS00MWJiLTg3NjUtNjllZGM2ZjFl
NjMxMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk
NzM4Zjg5ZjgtMDYzYy00Y2FiLWIxYjQtYzc1ZGM1MjIzYzcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZgDh+tGOAx0d5tDBqNkOHTu3Q7WPExtz10O
fjg8HvlaAjdjukZdZ2J/AK2jZ49r7A83UTMmD11B/6IfS9Zp78H8mfcE5q1x4XyT
GF7WDgwjmQzSubmfiQa4jEeR6oX68wGSkSKJDP1L6wXp9S6bnV5M7t6Ws16Kl9og
7dPEabXsN3EFbJ+/KszLTSV4g801DJ5O5816PoQzFw6Eal3fDa7uhFVNuvKq2Ajh
UJ4aMTUItVY+1IoSAOfxrKl+uQVQnAHF4QeGQJ8x6U3uzHmEpViqT2+BPh7Kpt3A
LtGX60ELqYE5RIvAqsqEv67AWBqGdZ1Ji6YlZpYmXmT4LREnVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMfd7yLKnEVlMMM4P/mScYmMR5cdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMjFj
ZGQ5MS0xMGU5LTQxYmItODc2NS02OWVkYzZmMWU2MzEvNmQxNDU3NGUtYjVkMi0z
YTA1LWIxMjEtNmFmYWZjYzcxMTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjIxY2RkOTEtMTBlOS00MWJiLTg3
NjUtNjllZGM2ZjFlNjMxLzIyMWNkZDkxLTEwZTktNDFiYi04NzY1LTY5ZWRjNmYx
ZTYzMS5jcmwwHwYDVR0jBBgwFoAU1Ay9UnQgBkyh+gSLfQLSi26fIUswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yMjFjZGQ5MS0xMGU5LTQxYmItODc2NS02OWVk
YzZmMWU2MzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgjIyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAByE6HmKNjgxKFqHMYrqtQFvaLqfKxpTcFT/8Fa2qQmn4EElGOiOcIFa
t+40TLj1zMLFpDft9BiFdtJHEWdLLe+W6lFWifjY7kfzAjIKsAGAEsDlEFpuj0th
FuzG+Cayy+qrcP/6HvToVHYPwY/kKy/WMWayLsJt25RaK+hWHcmpV/F38SYR/xMM
4As2PZlCSWXLWG8S3cpKmGn37jndiTR7lexA1HElSuPy8HRunU75jYmpl06iBKy1
SkywnT6hvhAriOTgtNCF980X7c9fZDoRKFcVtBIHtlI/5GMf9T0rhd8kR0A/lxKw
n1HMLr/ufQ2/0kbKT7zFd6vMspCEjqY=
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:14:12 2025 by rpki-client