Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1dc621d0-3343-338f-856d-4aaa970c38d1.roa
File:                     1dc621d0-3343-338f-856d-4aaa970c38d1.roa (raw, json)
Hash identifier:          u8nGewjZEB0w2ghSIuZ5ksNIqfpxmY3s5EabAFr7Bn4=
Subject key identifier:   E2:31:D0:AC:09:4A:0F:07:DF:17:C6:6F:C0:3B:B0:EB:42:65:B5:28
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584ADA9BCE0B4D6472A7E728F7E8
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1dc621d0-3343-338f-856d-4aaa970c38d1.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     1239
IP address blocks:        50.7.112.0/24 maxlen: 24
                          50.7.114.0/24 maxlen: 24
                          50.7.152.0/22 maxlen: 22
                          50.7.198.0/23 maxlen: 23
                          50.7.202.0/23 maxlen: 23
                          50.7.212.0/23 maxlen: 24
                          50.7.224.0/23 maxlen: 23
                          50.7.226.0/23 maxlen: 23
                          66.90.119.0/24 maxlen: 24
                          198.16.98.0/24 maxlen: 24
                          198.16.102.0/23 maxlen: 23
                          198.16.104.0/23 maxlen: 23
                          198.16.122.0/24 maxlen: 24
                          2001:49f0:d007::/48 maxlen: 48
                          2001:49f0:d0a3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:ce:0b:4d:64:72:a7:e7:28:f7:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=b0b7ff60-4a41-4c7b-8ef3-baeaa4b015b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:08:a3:96:c2:7d:4d:d5:67:d0:22:d6:9c:e4:
                    41:a7:c0:0e:7a:56:04:7b:80:0d:43:4a:7d:a1:b2:
                    7c:e6:45:c2:9b:42:6d:c4:2e:30:f7:98:5a:f7:66:
                    f3:fe:e4:2d:18:61:ef:ad:56:aa:24:fc:7c:1a:62:
                    36:40:f4:b3:26:03:96:7c:75:34:bc:97:f1:a3:ce:
                    83:7d:74:0d:7e:bc:a0:98:33:7d:e5:8f:97:de:55:
                    63:0a:f7:d4:b2:1b:5d:50:47:3d:b3:bd:eb:b6:14:
                    0b:66:d5:00:8b:4f:3b:c1:90:ad:a8:db:8c:00:15:
                    c3:29:bc:dc:aa:bb:1c:9c:d7:56:1e:74:fa:f7:73:
                    0d:2f:35:8e:7b:f1:a8:f9:06:82:9c:52:99:f8:1d:
                    9f:62:60:b7:ca:cd:98:65:d9:c6:88:b6:57:7d:30:
                    53:fc:37:1c:f4:2f:ec:db:3a:1f:59:1c:56:11:73:
                    dc:61:7a:b7:ae:ce:32:49:1b:f7:c6:8c:6c:db:0a:
                    b7:5b:01:f3:53:23:33:af:7e:cc:9f:92:a4:4e:88:
                    2a:04:69:92:54:27:75:a3:78:e6:e8:69:c9:81:79:
                    c2:07:ad:29:00:94:52:eb:db:31:f8:05:7c:a7:cb:
                    8e:78:f6:fd:f3:1d:2d:25:2b:35:6f:f6:9d:2a:e3:
                    19:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:31:D0:AC:09:4A:0F:07:DF:17:C6:6F:C0:3B:B0:EB:42:65:B5:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1dc621d0-3343-338f-856d-4aaa970c38d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.112.0/24
                  50.7.114.0/24
                  50.7.152.0/22
                  50.7.198.0/23
                  50.7.202.0/23
                  50.7.212.0/23
                  50.7.224.0/22
                  66.90.119.0/24
                  198.16.98.0/24
                  198.16.102.0-198.16.105.255
                  198.16.122.0/24
                IPv6:
                  2001:49f0:d007::/48
                  2001:49f0:d0a3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:25:30:7e:e8:9f:33:99:eb:bc:63:2c:95:95:d9:38:b2:e6:
         53:23:5f:22:b9:0f:16:6e:46:98:1e:35:80:61:a8:52:15:c5:
         69:e1:cf:8b:a9:11:4f:12:27:31:6f:09:fb:2d:ca:02:38:a0:
         38:ed:b5:1e:62:f0:11:05:8f:f0:bb:60:d4:b3:a8:0c:1c:f5:
         55:90:f7:f3:d5:82:ae:61:80:a7:37:72:bd:6d:82:57:23:c2:
         78:1c:a8:73:8d:f8:1c:16:c8:8f:08:56:32:43:90:2c:fd:ad:
         e0:62:16:04:87:3d:b9:7b:41:2e:1b:97:98:13:e1:34:90:c9:
         aa:c0:50:ac:2f:38:fc:32:48:bf:cd:54:59:31:66:19:e3:5a:
         7a:22:00:22:4d:8d:2c:76:ca:f5:9b:4a:90:8f:27:1d:c4:4b:
         04:f7:ab:70:70:b6:d3:6f:f4:9f:f3:66:75:5b:7b:ce:2d:e0:
         fa:90:97:69:d9:e0:16:56:75:49:c5:23:cb:12:6c:03:6e:96:
         91:9a:db:24:a9:d1:4f:ce:78:15:9c:9d:8b:8e:96:64:d9:ce:
         19:ef:a0:89:a2:02:c9:af:60:0e:63:54:cc:1c:e0:f2:bb:60:
         61:51:40:34:85:76:95:df:05:34:a5:2c:4d:0b:92:ec:5c:35:
         27:63:20:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:05 2025 by rpki-client