Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/53f0c950-2235-3b19-b157-97c396c412bb.roa
File:                     53f0c950-2235-3b19-b157-97c396c412bb.roa (raw, json)
Hash identifier:          PzeCFFJuAXplENoXMzw/xyimbZEN1o9uxDphP5kkuuw=
Subject key identifier:   51:B1:D3:DB:FF:88:2C:5B:F0:09:A4:D0:2D:73:A8:9E:E4:DB:61:20
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584A58CB097907A6599D4C715440
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/53f0c950-2235-3b19-b157-97c396c412bb.roa
Signing time:             Sun 29 Jun 2025 01:00:50 +0000
ROA not before:           Sun 29 Jun 2025 01:00:50 +0000
ROA not after:            Sat 27 Sep 2025 01:00:50 +0000
asID:                     174
IP address blocks:        50.7.172.0/22 maxlen: 22
                          50.7.180.0/22 maxlen: 22
                          2001:49f0:d018::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:58:cb:09:79:07:a6:59:9d:4c:71:54:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jun 29 01:00:50 2025 GMT
            Not After : Sep 27 01:00:50 2025 GMT
        Subject: CN=48bde2dd-06ed-4363-bbb1-16e05b7ab178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:72:db:88:46:03:52:80:12:0f:15:4a:99:64:
                    f2:17:bc:98:6b:69:9c:7e:f6:af:b9:75:1f:ed:05:
                    a7:2c:8b:62:95:ac:63:11:eb:d5:62:96:b2:d0:5c:
                    6e:e3:47:ba:54:1f:84:6f:b5:33:61:c5:93:ee:b0:
                    7c:d1:4a:06:5d:69:5c:5d:48:b0:9b:c9:56:a4:21:
                    1e:bf:6b:e3:2f:72:e8:27:c3:53:f4:9a:d5:c9:f1:
                    8f:0d:9f:90:49:70:c2:05:21:37:36:a8:e5:06:c1:
                    3a:f4:1a:95:dc:ed:e0:9a:68:2d:94:b9:09:3d:73:
                    2b:14:90:89:1c:92:28:e7:c0:c3:82:df:3a:38:82:
                    c4:49:11:58:46:77:25:36:93:90:8c:9b:49:37:ce:
                    e3:6f:6f:9a:69:2e:a8:1f:eb:7d:ec:01:ab:22:05:
                    be:08:19:9e:fc:b3:12:4d:6e:f2:0c:0c:26:10:a4:
                    4b:71:a9:4b:ff:8a:07:1c:b2:4c:ff:60:74:d3:a4:
                    b1:84:a3:d0:07:1e:89:40:1d:c4:87:b6:7e:c0:8b:
                    55:7c:47:25:7d:e5:a3:c3:6f:b0:85:85:72:ca:93:
                    19:2a:68:46:f1:3a:11:b7:da:a7:03:e3:c7:d3:94:
                    5f:38:74:f9:55:7a:78:54:8d:05:4f:f8:ea:84:eb:
                    00:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B1:D3:DB:FF:88:2C:5B:F0:09:A4:D0:2D:73:A8:9E:E4:DB:61:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/53f0c950-2235-3b19-b157-97c396c412bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.172.0/22
                  50.7.180.0/22
                IPv6:
                  2001:49f0:d018::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:67:53:50:12:c5:d0:56:d9:06:23:18:e3:22:c6:eb:1d:7e:
         50:a0:81:30:17:91:20:d3:12:bb:9e:14:a9:b7:04:84:ab:fc:
         88:be:cd:e3:d5:96:b0:e7:37:da:4c:5f:00:bf:78:52:2b:0c:
         9d:74:3e:56:7c:ed:25:ac:87:dc:9b:a6:e9:ef:9d:9c:e3:e2:
         b0:2d:fd:a7:38:8f:1f:28:98:4b:1c:a0:35:a2:70:3e:63:da:
         a1:eb:bb:26:55:e7:45:55:b5:0c:1e:31:32:0b:5e:ff:1d:87:
         02:9d:ca:92:52:5a:d1:56:ab:54:8d:de:37:a1:12:64:a5:56:
         54:20:93:a8:54:ac:25:1f:83:b3:48:93:d9:43:c4:58:a0:97:
         c3:c2:0c:84:b9:af:70:bd:4a:86:c5:e3:25:ff:0d:1d:f0:99:
         80:23:8b:37:7e:6d:32:44:67:ef:b0:35:3d:dd:20:b1:db:3a:
         0d:e0:f0:05:ae:63:00:3e:1f:b5:e4:6d:e1:d4:ac:0e:a3:4b:
         f2:c0:18:22:65:ac:19:4d:25:c4:6a:0a:12:44:8c:14:70:78:
         3c:61:3d:dc:74:19:ff:b3:e5:19:23:3b:b5:8a:ab:8c:a8:c0:
         90:f9:b6:33:8f:1c:d1:bd:39:76:ee:02:0f:8e:1b:21:42:86:
         d2:ef:5e:70
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 29 09:17:51 2025 by rpki-client