Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/dabc599b-f02c-348a-9e29-c1aa2d26ba37.roa
File:                     dabc599b-f02c-348a-9e29-c1aa2d26ba37.roa (raw, json)
Hash identifier:          44viGCIIZo1aRxoEqCtipWx4zOzV6Xuq3QRsD8SDlkQ=
Subject key identifier:   A5:7C:74:79:13:68:21:6A:FA:55:33:8A:26:2F:D7:03:68:95:F1:F3
Certificate issuer:       /CN=221cdd91-10e9-41bb-8765-69edc6f1e631
Certificate serial:       010D0C9F4328584AB650E5026E4F207E3D534880
Authority key identifier: D4:0C:BD:52:74:20:06:4C:A1:FA:04:8B:7D:02:D2:8B:6E:9F:21:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/dabc599b-f02c-348a-9e29-c1aa2d26ba37.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     14618
IP address blocks:        130.50.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/221cdd91-10e9-41bb-8765-69edc6f1e631.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/221cdd91-10e9-41bb-8765-69edc6f1e631.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:e5:02:6e:4f:20:7e:3d:53:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=221cdd91-10e9-41bb-8765-69edc6f1e631
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=2c9880fe-1abe-46d0-97ac-7b3cca71c24c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:62:1d:ae:c9:d5:fa:ba:1c:49:32:d3:e5:f2:
                    56:7d:e7:13:93:4b:d9:37:4b:18:8c:0d:9a:55:1e:
                    aa:d2:ae:25:c6:b4:0d:2c:84:83:32:af:fc:7a:0a:
                    73:bd:76:b7:a7:c5:5c:f0:43:d6:63:3c:c7:90:51:
                    f7:51:42:65:38:78:25:ca:39:ef:0e:2e:a9:91:1d:
                    61:de:f1:15:98:82:78:1a:f8:1f:01:69:34:1f:5c:
                    cb:87:87:85:70:68:38:11:66:9c:6a:1e:49:01:f7:
                    3e:c4:c6:70:c8:b0:9d:29:6b:64:30:4f:dc:12:c4:
                    e3:e8:ab:bb:ac:14:a4:ad:8c:cd:23:c4:41:fd:82:
                    a7:ec:db:b5:be:94:34:ba:f3:9a:39:16:24:0c:37:
                    f5:fe:e3:ee:8a:98:56:ac:d0:dc:97:aa:05:51:a3:
                    18:a8:ee:98:25:9c:a6:3c:48:a0:dd:79:0c:fc:ef:
                    e0:f3:c7:19:54:d7:d6:b9:b8:44:2a:de:b8:5b:f5:
                    2c:52:12:be:1f:1e:3b:36:2b:1f:da:21:93:54:e6:
                    4d:20:c0:1e:53:cc:c4:56:a6:58:71:9e:55:79:e9:
                    de:c8:e7:8e:b5:e9:b9:31:c7:02:76:48:1e:17:b2:
                    b9:e0:e1:0d:3c:75:80:22:09:73:4e:cc:5d:12:43:
                    50:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7C:74:79:13:68:21:6A:FA:55:33:8A:26:2F:D7:03:68:95:F1:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/dabc599b-f02c-348a-9e29-c1aa2d26ba37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/221cdd91-10e9-41bb-8765-69edc6f1e631.crl

            X509v3 Authority Key Identifier:
                keyid:D4:0C:BD:52:74:20:06:4C:A1:FA:04:8B:7D:02:D2:8B:6E:9F:21:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.50.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:c9:09:24:8b:2f:cc:46:c1:4d:26:e5:22:c1:07:0c:37:3d:
         ca:cd:88:57:20:0d:f4:95:8b:9c:d6:e5:a0:de:9f:d7:de:99:
         d0:70:62:7f:1a:d6:6f:81:88:f9:b1:96:be:8c:d8:67:14:14:
         f9:51:b4:a0:2c:e6:a5:4b:3f:ab:ae:b7:05:7f:b8:78:e7:ab:
         1c:41:9b:a9:1c:3b:1a:ea:6a:cb:f7:1e:00:19:64:c5:cc:4c:
         a9:7e:22:b5:1b:9d:ce:06:ae:99:43:4c:66:6b:cd:5f:07:9f:
         62:e4:cf:2e:b3:7c:2a:be:92:bf:fc:80:5d:91:b3:af:34:ea:
         77:18:8d:1c:94:87:c5:ca:94:85:1d:df:2a:89:4b:ed:15:14:
         c1:e2:e5:58:a3:22:0e:83:27:2e:69:bd:f0:ff:df:9d:85:f4:
         a9:51:b8:80:8d:fa:78:55:92:20:42:bf:c5:70:bd:9e:04:90:
         d6:be:0b:95:04:ac:cd:e6:38:24:1f:2c:f2:31:40:3e:4b:72:
         71:7e:95:ab:ae:ec:3f:a5:ff:f2:37:b3:97:8b:97:0d:2c:c0:
         d5:60:27:b6:ec:5e:0b:d2:df:da:51:3e:29:88:a7:53:9a:c6:
         cd:b4:d9:5e:ff:63:05:52:16:cd:60:64:84:4a:f0:e5:56:c6:
         59:3b:aa:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UOUCbk8gfj1TSIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjIxY2RkOTEtMTBlOS00MWJiLTg3NjUtNjllZGM2ZjFl
NjMxMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk
MmM5ODgwZmUtMWFiZS00NmQwLTk3YWMtN2IzY2NhNzFjMjRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimIdrsnV+rocSTLT5fJWfecTk0vZN0sYjA2a
VR6q0q4lxrQNLISDMq/8egpzvXa3p8Vc8EPWYzzHkFH3UUJlOHglyjnvDi6pkR1h
3vEVmIJ4GvgfAWk0H1zLh4eFcGg4EWacah5JAfc+xMZwyLCdKWtkME/cEsTj6Ku7
rBSkrYzNI8RB/YKn7Nu1vpQ0uvOaORYkDDf1/uPuiphWrNDcl6oFUaMYqO6YJZym
PEig3XkM/O/g88cZVNfWubhEKt64W/UsUhK+Hx47Nisf2iGTVOZNIMAeU8zEVqZY
cZ5VeeneyOeOtem5MccCdkgeF7K54OENPHWAIglzTsxdEkNQnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKV8dHkTaCFq+lUziiYv1wNolfHzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMjFj
ZGQ5MS0xMGU5LTQxYmItODc2NS02OWVkYzZmMWU2MzEvZGFiYzU5OWItZjAyYy0z
NDhhLTllMjktYzFhYTJkMjZiYTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjIxY2RkOTEtMTBlOS00MWJiLTg3
NjUtNjllZGM2ZjFlNjMxLzIyMWNkZDkxLTEwZTktNDFiYi04NzY1LTY5ZWRjNmYx
ZTYzMS5jcmwwHwYDVR0jBBgwFoAU1Ay9UnQgBkyh+gSLfQLSi26fIUswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yMjFjZGQ5MS0xMGU5LTQxYmItODc2NS02OWVk
YzZmMWU2MzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgjIyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFXJCSSLL8xGwU0m5SLBBww3PcrNiFcgDfSVi5zW5aDen9femdBwYn8a
1m+BiPmxlr6M2GcUFPlRtKAs5qVLP6uutwV/uHjnqxxBm6kcOxrqasv3HgAZZMXM
TKl+IrUbnc4GrplDTGZrzV8Hn2Lkzy6zfCq+kr/8gF2Rs6806ncYjRyUh8XKlIUd
3yqJS+0VFMHi5VijIg6DJy5pvfD/352F9KlRuICN+nhVkiBCv8VwvZ4EkNa+C5UE
rM3mOCQfLPIxQD5LcnF+lauu7D+l//I3s5eLlw0swNVgJ7bsXgvS39pRPimIp1Oa
xs202V7/YwVSFs1gZIRK8OVWxlk7qnQ=
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:34:34 2025 by rpki-client