Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/311fa59d-ae91-32d8-8072-25dd815d4d32.roa
File:                     311fa59d-ae91-32d8-8072-25dd815d4d32.roa (raw, json)
Hash identifier:          qq+0627FHATs2Pe2ABKRIX+yEttcZwUSrZCKX8LASUI=
Subject key identifier:   B1:90:3A:E4:05:EB:63:8F:24:1D:18:11:23:6D:1A:92:C7:C1:AC:7B
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584A1F9018C6FDFEF38A5D85C180
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/311fa59d-ae91-32d8-8072-25dd815d4d32.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     30058
IP address blocks:        50.7.1.0/24 maxlen: 24
                          50.7.34.0/23 maxlen: 23
                          50.7.57.0/24 maxlen: 24
                          66.90.68.0/23 maxlen: 23
                          66.90.70.0/24 maxlen: 24
                          66.90.84.0/23 maxlen: 23
                          2001:49f0:d0e6::/48 maxlen: 48
                          2001:49f0:d100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:18:c6:fd:fe:f3:8a:5d:85:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=8deac9e2-cc25-4766-bed7-782967bd4342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:73:b9:47:ef:a4:9e:70:1c:79:b1:73:f1:71:
                    9e:41:c7:02:aa:4b:38:ab:32:74:9e:14:60:9f:3f:
                    dc:c6:db:80:c0:9c:ac:d2:4e:1f:0e:3b:8a:c3:64:
                    eb:e2:f6:03:e3:09:ce:26:7e:b6:8e:56:0a:cc:ad:
                    30:50:26:d6:a1:a9:e8:96:d6:1a:23:78:e8:c0:00:
                    ed:ad:70:40:03:fa:b8:fb:83:ee:af:a8:4b:8a:be:
                    eb:47:ff:af:e4:57:de:20:02:8d:e1:61:1a:74:f9:
                    81:e5:00:d5:5f:22:27:77:94:18:97:36:c9:fd:05:
                    8a:1a:01:3c:47:1d:53:a1:62:6c:46:ea:54:0c:84:
                    96:2e:6a:fa:ff:3c:51:13:79:f5:e5:27:57:8a:1f:
                    ad:8b:04:ce:04:b4:b0:a4:f1:45:04:20:ca:c3:bc:
                    15:f1:c2:e4:03:37:57:61:fd:64:db:0b:4f:d0:49:
                    27:65:77:2c:98:d4:f3:be:ff:bb:b5:2d:ba:88:5b:
                    b5:c9:38:4b:6e:71:19:a6:5a:76:dc:34:9c:50:fd:
                    3d:4a:14:9f:f0:e5:a5:00:f4:ad:03:e6:bd:0a:e8:
                    61:e8:35:18:ef:01:df:1e:ed:2c:37:98:c3:67:10:
                    6e:ac:d5:f0:03:fb:44:e8:a0:86:32:6e:83:2e:db:
                    7f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:90:3A:E4:05:EB:63:8F:24:1D:18:11:23:6D:1A:92:C7:C1:AC:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/311fa59d-ae91-32d8-8072-25dd815d4d32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.1.0/24
                  50.7.34.0/23
                  50.7.57.0/24
                  66.90.68.0-66.90.70.255
                  66.90.84.0/23
                IPv6:
                  2001:49f0:d0e6::/48
                  2001:49f0:d100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:9e:fb:13:2c:03:23:0a:f9:17:3b:ed:69:a3:be:60:30:9a:
         99:1c:e4:a5:b3:9f:d7:74:d0:f3:30:01:e0:e5:76:29:5f:f6:
         75:d2:92:e6:f2:8d:1a:a6:eb:ac:57:e8:4b:0e:e3:58:a3:79:
         f9:ff:56:f6:09:09:ad:20:7b:fe:41:a1:05:2e:17:29:a3:75:
         75:3f:87:74:30:08:41:da:2d:f4:56:58:4c:cd:ed:bd:fc:ff:
         4c:7e:f6:30:63:ad:4c:be:43:fa:3a:e7:f5:05:9f:a6:ac:e2:
         76:89:0a:10:0e:d4:c8:2b:57:0b:9b:70:ed:30:9e:3c:47:e0:
         c3:5f:42:7e:bb:e5:68:b7:a9:d2:60:10:7e:1d:9c:35:51:ca:
         48:09:96:a5:8b:e5:6c:d8:00:34:2c:e0:5d:c3:72:ed:03:c0:
         c7:52:c2:02:b8:de:32:fc:13:ab:06:6f:7f:14:2d:30:ff:d3:
         b8:4c:84:24:24:79:9b:22:2b:d1:93:4c:74:20:34:84:2c:1f:
         3b:aa:ba:94:4f:43:03:a6:a0:2d:f8:97:c0:40:6e:48:b9:95:
         87:d3:d0:97:f1:10:db:38:99:ab:77:cc:9e:ec:c4:fd:be:b8:
         31:59:d5:96:fc:15:cc:7a:12:03:61:ed:3a:17:bc:b8:d0:4d:
         d9:7d:9f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 19:50:27 2025 by rpki-client