Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/64213b8b-3827-318e-83d4-1fcc7639d06e.roa
File:                     64213b8b-3827-318e-83d4-1fcc7639d06e.roa (raw, json)
Hash identifier:          i7lW1UhLj1p9D03XzlibC3nq1cGa/mrnLS+S0l/nmg0=
Subject key identifier:   C3:A9:D5:A6:75:62:0C:28:75:8C:B4:87:76:17:1E:E3:5B:DB:74:3C
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584A58CB099E686DB6650909ECE4
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/64213b8b-3827-318e-83d4-1fcc7639d06e.roa
Signing time:             Sun 29 Jun 2025 01:00:50 +0000
ROA not before:           Sun 29 Jun 2025 01:00:50 +0000
ROA not after:            Sat 27 Sep 2025 01:00:50 +0000
asID:                     30058
IP address blocks:        50.7.172.0/22 maxlen: 22
                          50.7.180.0/22 maxlen: 22
                          2001:49f0:d018::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:58:cb:09:9e:68:6d:b6:65:09:09:ec:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jun 29 01:00:50 2025 GMT
            Not After : Sep 27 01:00:50 2025 GMT
        Subject: CN=ee2c199c-cbe1-4cff-a3b4-576d01ee6b41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2a:57:d3:ba:3b:eb:12:1f:c7:54:eb:59:5b:
                    c9:6c:23:7a:8b:15:d2:b7:ef:d7:1e:dc:65:94:54:
                    12:02:37:95:d2:58:d1:be:a0:92:d3:11:86:87:4f:
                    53:0c:fd:7e:d8:45:85:b9:bd:b3:59:b5:d3:de:86:
                    83:65:a3:8e:b3:6a:c8:20:da:55:46:5c:9b:14:d5:
                    03:f7:2e:6c:66:50:7b:ad:20:c1:9b:bb:b9:87:75:
                    6e:1a:bf:85:51:b6:1b:7a:ed:8f:78:22:90:41:73:
                    33:93:6c:79:31:43:43:f7:50:c7:a6:71:34:5e:92:
                    21:77:e1:85:cf:99:9b:a6:b1:d0:3c:43:6f:b0:8a:
                    05:75:c5:49:b4:75:33:9d:8f:5b:21:4f:46:dd:34:
                    e5:96:74:e7:83:cd:f0:5c:e1:b0:47:eb:a7:40:a8:
                    b3:6d:c6:b8:e7:5b:a7:0e:3b:c1:8d:91:88:d0:f3:
                    81:a6:d4:5c:32:64:ab:4d:06:bb:8f:1a:06:81:52:
                    7b:3f:56:40:d4:f3:88:09:2c:dd:83:46:22:4b:8b:
                    24:c0:95:59:5e:89:0d:6f:08:01:ac:d9:60:b6:60:
                    f7:4b:10:ca:34:1a:cb:e8:15:75:04:b3:c7:3d:e8:
                    7b:16:cc:8b:2e:c3:6c:ea:0f:7a:2a:96:1e:ca:62:
                    54:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A9:D5:A6:75:62:0C:28:75:8C:B4:87:76:17:1E:E3:5B:DB:74:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/64213b8b-3827-318e-83d4-1fcc7639d06e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.172.0/22
                  50.7.180.0/22
                IPv6:
                  2001:49f0:d018::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:39:b4:48:ce:4f:2e:e2:38:83:93:bb:05:fe:2a:2a:d2:1d:
         af:12:2c:91:b8:c6:7c:6a:b2:09:bd:e0:11:65:f8:99:55:b4:
         4e:af:26:cf:3e:45:36:0a:77:b0:ed:2c:1d:59:9e:91:8d:18:
         fa:59:d9:c2:50:54:e5:2d:21:cb:1b:c7:b7:69:27:59:1c:0c:
         3d:c8:d6:15:04:b3:ba:b3:59:b3:c5:c2:64:fd:e2:84:b4:11:
         14:5f:6d:95:e1:53:b9:45:eb:f3:74:28:b2:b2:fc:e3:e1:76:
         d9:48:f7:ad:3f:4c:9d:a6:8f:44:16:9a:37:07:47:34:a6:61:
         0a:64:9c:86:8d:2a:cd:2f:ab:f7:1e:8b:ad:82:45:7b:dd:a9:
         56:c9:1e:a7:09:ab:8d:90:4f:93:8d:7b:95:ef:bd:87:34:d4:
         3a:d5:69:9f:6a:00:2f:a7:02:44:ff:e0:5d:8a:81:e2:c8:3d:
         c6:d6:d2:41:c2:dd:00:2a:4a:6f:51:4a:75:6c:91:69:9f:7d:
         6d:a3:e8:12:15:4c:c7:3d:f4:1a:bb:af:2c:fd:e6:aa:aa:25:
         06:b8:29:4a:e5:0a:01:08:cf:1d:88:27:ae:7d:54:42:77:36:
         3f:73:ba:0a:1e:22:3a:1b:04:c0:e0:c1:86:07:fd:e8:cb:1b:
         56:0c:72:a2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 29 14:43:40 2025 by rpki-client