Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/09ae8ad8-4b5e-36bc-9565-378c2f643913.roa
File:                     09ae8ad8-4b5e-36bc-9565-378c2f643913.roa (raw, json)
Hash identifier:          3w5Z/qQ1GFC6tqbozgJCLsIi2Hb8VSymzWynDmy1Qkc=
Subject key identifier:   FD:CA:6F:48:CB:1F:00:2E:A1:94:36:CC:33:6A:DF:89:11:DD:63:D2
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584A46A5AF231985891ED79CA480
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/09ae8ad8-4b5e-36bc-9565-378c2f643913.roa
Signing time:             Sun 22 Jun 2025 13:01:03 +0000
ROA not before:           Sun 22 Jun 2025 13:01:03 +0000
ROA not after:            Sat 20 Sep 2025 13:01:03 +0000
asID:                     174
IP address blocks:        50.7.30.0/23 maxlen: 24
                          50.7.80.0/22 maxlen: 24
                          50.7.206.0/23 maxlen: 24
                          50.7.208.0/23 maxlen: 24
                          50.7.246.0/23 maxlen: 24
                          198.16.99.0/24 maxlen: 24
                          198.16.120.0/24 maxlen: 24
                          2001:49f0:d01e::/48 maxlen: 48
                          2001:49f0:d095::/48 maxlen: 48
                          2001:49f0:d0e0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:46:a5:af:23:19:85:89:1e:d7:9c:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jun 22 13:01:03 2025 GMT
            Not After : Sep 20 13:01:03 2025 GMT
        Subject: CN=e7e38ffc-583b-4e2b-88fd-b3c542458406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:67:ab:5f:ab:16:35:46:41:7b:96:2a:71:e2:
                    20:66:ee:98:34:19:5e:d6:f1:22:6a:75:ff:41:a5:
                    9b:69:83:63:61:77:aa:32:d4:ca:e6:db:9e:55:14:
                    c1:86:18:1b:82:46:fb:b6:52:c1:c2:b7:2f:83:5b:
                    41:fc:fc:4b:b9:03:48:ef:71:de:69:07:46:52:1f:
                    0a:1b:57:c6:e5:25:38:6d:36:a7:e7:c6:84:5b:0b:
                    d5:1c:26:01:63:55:f6:cf:43:d7:68:fb:8d:72:df:
                    72:41:25:4b:03:56:c9:b2:7d:8e:d2:5d:cd:7b:2a:
                    ca:78:d8:6f:73:3c:bc:ff:a7:e5:6c:02:2a:c2:dc:
                    e3:94:91:f9:08:0c:3a:d5:ad:ae:0e:aa:90:fc:5a:
                    d8:1b:2a:4c:12:28:34:0a:78:8a:54:52:0a:41:62:
                    2a:b4:13:a6:c2:d7:6f:28:74:c4:51:2f:f5:22:03:
                    1b:9b:c6:40:31:9b:d8:e7:35:90:13:b8:8a:36:95:
                    1f:8c:bb:b5:7b:13:bf:8f:fa:91:9f:a2:66:83:92:
                    30:32:a3:ea:e4:6b:48:43:ea:ca:b5:79:03:2e:d9:
                    9d:47:c9:43:dd:02:3b:12:02:47:56:4e:a6:8a:02:
                    91:df:04:9e:5a:1e:d1:fd:be:84:1f:43:1d:8f:1f:
                    e6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:CA:6F:48:CB:1F:00:2E:A1:94:36:CC:33:6A:DF:89:11:DD:63:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/09ae8ad8-4b5e-36bc-9565-378c2f643913.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.30.0/23
                  50.7.80.0/22
                  50.7.206.0-50.7.209.255
                  50.7.246.0/23
                  198.16.99.0/24
                  198.16.120.0/24
                IPv6:
                  2001:49f0:d01e::/48
                  2001:49f0:d095::/48
                  2001:49f0:d0e0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:45:30:de:9b:cb:a2:80:b6:03:8e:32:72:08:3a:49:da:1b:
         3e:78:8e:24:a7:57:7a:ec:23:db:a6:6c:23:cf:60:a6:35:63:
         4f:92:89:f7:5d:d3:4e:59:ea:7f:d1:76:07:a4:92:4d:3f:8f:
         a3:25:ab:28:22:f5:d6:3a:46:74:3b:dc:a6:59:87:c4:d3:fe:
         2c:38:25:0a:81:a3:44:a4:01:88:87:e6:f5:5d:fb:06:0a:df:
         f3:96:7a:c2:4c:52:72:b1:be:9d:c6:e7:82:ae:26:aa:53:a5:
         6c:f3:e2:2c:08:80:d0:07:c4:68:0f:af:e7:5e:cd:79:ea:4e:
         5c:3f:83:22:48:9a:1b:55:23:89:d0:34:5a:a3:70:49:ac:75:
         de:a8:d2:12:25:16:2a:7f:e8:ee:e6:eb:08:4d:f8:0d:c2:e4:
         2a:c3:b6:f6:3c:7d:5d:23:df:dd:3f:86:f7:8a:78:13:40:11:
         4c:be:bb:3f:66:1d:76:f4:fd:a2:55:74:9e:76:63:21:02:38:
         0f:3e:73:db:12:f8:74:4c:65:c0:8a:89:3a:b2:05:14:0a:78:
         8e:da:a2:bc:90:94:ce:33:6d:6a:13:84:8d:7b:54:a2:2a:3d:
         c3:94:05:b9:c9:22:74:d3:8f:94:a6:16:3f:86:0f:74:00:e8:
         4f:6a:e9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:47:15 2025 by rpki-client