Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3c2dcfe8-4bcd-3e42-9bce-07c9e2f7ab61.roa
File:                     3c2dcfe8-4bcd-3e42-9bce-07c9e2f7ab61.roa (raw, json)
Hash identifier:          L6gS+cY4ctXs0omeYGgyHUlmft/Nr/uA5Oruol9V5gE=
Subject key identifier:   7F:DB:26:7C:5D:F3:7E:63:82:6A:82:B8:AF:A3:36:BE:76:E7:63:5F
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584B477C7DBC2667008B2BB72600
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3c2dcfe8-4bcd-3e42-9bce-07c9e2f7ab61.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     30058
IP address blocks:        50.7.92.0/22 maxlen: 22
                          198.16.64.0/23 maxlen: 23
                          198.16.92.0/23 maxlen: 23
                          2001:49f0:d024::/48 maxlen: 48
                          2001:49f0:d028::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:7d:bc:26:67:00:8b:2b:b7:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=6a9d0cc9-a451-4a49-b298-4af3779f9489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4d:ed:fe:76:23:01:bf:b4:6a:11:e8:fe:1e:
                    6c:51:9f:21:bd:6b:69:de:5d:47:10:80:00:a5:0b:
                    52:98:6b:d9:38:86:b8:88:b3:31:37:45:10:6e:77:
                    49:66:01:c8:a9:4a:3e:f3:3f:eb:9f:47:1f:0c:df:
                    bf:a5:c6:3a:c0:3e:09:74:ce:1b:99:d1:bb:e1:00:
                    15:1a:37:74:cc:0d:f9:fc:40:b5:a0:eb:ae:15:56:
                    25:43:2a:0f:91:b2:70:5f:c5:55:cc:d4:8b:01:e2:
                    90:f2:42:48:dd:11:23:94:19:27:98:6c:da:eb:ca:
                    e4:0c:26:d8:c6:63:d1:99:51:0e:b2:a8:4a:6f:01:
                    2f:cb:09:20:69:5a:78:a4:cc:23:d3:f2:74:f2:bd:
                    e6:56:c4:ef:a5:26:92:42:e9:9c:a1:20:9c:b1:ab:
                    c3:8a:df:ab:6e:26:ed:29:46:f4:41:7e:56:6d:a9:
                    e5:bc:b6:04:8d:03:a1:d1:dc:18:f1:53:d3:cb:75:
                    7b:74:bb:93:f6:9e:26:d8:6c:7f:63:f4:f9:83:92:
                    03:d4:ca:8a:a6:30:cb:b3:4f:c5:c6:e2:42:20:a9:
                    03:02:8e:4a:1d:21:72:55:bc:92:54:fd:d2:17:db:
                    9e:4b:ae:60:1c:94:f6:ac:bc:52:08:5a:1d:30:e2:
                    3b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:DB:26:7C:5D:F3:7E:63:82:6A:82:B8:AF:A3:36:BE:76:E7:63:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3c2dcfe8-4bcd-3e42-9bce-07c9e2f7ab61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.92.0/22
                  198.16.64.0/23
                  198.16.92.0/23
                IPv6:
                  2001:49f0:d024::/48
                  2001:49f0:d028::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:58:b8:f3:cc:d7:ec:24:06:4b:8f:f5:bb:d7:c5:27:0e:7c:
         18:da:8e:f7:9d:8f:75:4d:52:68:5c:0c:d8:bd:be:1e:87:12:
         ff:92:76:8e:dd:5a:e6:d2:56:af:86:b3:15:90:e1:2a:13:0c:
         7f:d5:15:af:be:0c:80:25:a0:d0:a4:5a:96:63:48:09:b0:f3:
         6d:81:74:71:61:dc:59:02:2e:df:b4:3f:3d:c0:13:c1:19:20:
         e5:07:d1:59:68:6d:de:ff:d1:cb:a1:2c:3a:f9:4a:28:50:4b:
         eb:b3:a0:de:6b:81:7b:6f:72:70:2c:ab:df:c5:d2:b4:0a:77:
         9c:54:39:5f:86:01:23:b6:fc:99:41:8e:40:32:9e:20:c0:de:
         c5:72:06:33:61:d1:be:85:f1:4a:8d:1c:17:31:17:6a:bb:8e:
         06:ff:a2:f1:65:43:f6:ba:6e:c8:56:3d:af:f5:a4:5f:29:8e:
         4b:79:2c:77:33:97:f3:12:82:92:79:82:fc:95:3a:3c:33:5a:
         30:d6:ab:74:67:b3:41:2b:a1:64:cb:56:79:83:0c:08:fe:b2:
         92:74:16:29:72:0b:07:96:c4:c4:20:85:dc:5d:8d:84:11:91:
         6a:c0:cf:06:ae:7d:d6:03:25:54:b4:f5:55:6c:2f:fe:ac:25:
         04:ae:10:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:22:19 2025 by rpki-client