Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/6bca49ea-741e-346e-a986-0186728872d5.roa
File:                     6bca49ea-741e-346e-a986-0186728872d5.roa (raw, json)
Hash identifier:          1QtE0oRHV+LlTSi4ssrX9tCBUBbk5K5qqkeA7PBdn8o=
Subject key identifier:   D9:58:85:79:44:03:C5:71:B8:DA:32:F6:A5:2B:87:56:F0:5C:43:AC
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584AECC152A84F52EF0B5B6D5480
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/6bca49ea-741e-346e-a986-0186728872d5.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     30058
IP address blocks:        50.7.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:52:a8:4f:52:ef:0b:5b:6d:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=ef6975aa-6849-4e39-a20a-a9ce389a49e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:48:80:e7:a2:84:41:c6:64:8d:fe:01:8e:23:
                    4d:50:16:2b:64:64:cd:5f:33:bf:43:ff:d2:b7:94:
                    9e:59:16:25:38:c4:ca:86:13:74:c3:3a:3e:7a:4f:
                    2a:6c:d8:f5:2d:ee:6a:30:43:61:ce:47:b7:39:65:
                    9d:57:7c:e6:a7:99:ca:7b:7f:4b:ff:2d:dc:00:9e:
                    83:48:90:cb:32:05:8c:25:43:1e:8e:70:dd:dd:20:
                    e2:a5:30:a1:0e:a2:8d:e4:cc:a1:a3:d6:e3:1f:eb:
                    75:04:8c:82:f9:80:7f:0d:e2:5b:34:b7:01:f1:7d:
                    e8:c7:7a:b3:8e:c4:62:aa:43:5a:1f:1b:83:1e:c3:
                    80:f1:7a:75:60:c8:fd:5e:49:1d:4f:20:61:80:3b:
                    7f:ee:c0:31:d4:cd:f7:e6:bc:78:0e:f2:b3:f2:91:
                    e8:69:41:f4:a6:89:14:5b:84:6b:eb:6a:2d:d4:63:
                    5a:af:24:0f:57:0b:31:53:75:6d:d3:f3:aa:28:fe:
                    72:cf:a5:54:52:41:75:3c:89:00:42:64:77:cf:98:
                    e4:66:85:2e:73:5b:de:7e:72:10:f5:44:71:91:e2:
                    b9:28:b1:f3:36:d9:2e:c3:3a:a0:4c:49:f1:f9:2e:
                    b7:f1:cd:76:ea:23:73:13:46:e7:44:25:af:ae:3a:
                    a0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:58:85:79:44:03:C5:71:B8:DA:32:F6:A5:2B:87:56:F0:5C:43:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/6bca49ea-741e-346e-a986-0186728872d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:62:59:7c:e5:e5:c7:1b:a9:37:d9:81:57:54:2f:2c:02:53:
         10:f6:b4:a2:44:64:14:1d:92:36:0e:21:24:e0:07:9a:b7:78:
         13:5e:7e:e2:54:76:9c:f6:08:c0:71:0a:f9:49:96:74:08:74:
         56:f5:35:e1:f5:64:e3:28:f1:84:72:df:c4:df:14:d7:c3:3c:
         ec:e3:57:f8:44:c7:b3:c8:a2:08:c8:d9:a6:d3:47:57:29:33:
         f8:1f:33:29:43:94:1d:f5:f9:b9:7d:b1:c8:a8:1a:b0:67:7e:
         64:e9:b1:b1:84:bc:42:cc:0a:56:0f:5a:dc:97:df:68:3e:2c:
         e4:cc:fa:e0:b1:04:5b:f2:c6:c3:8f:df:89:f9:86:b2:38:65:
         f3:d1:0a:b1:95:55:aa:2d:fd:8e:16:ad:b0:5b:0c:99:5e:71:
         f9:d1:7f:f6:23:c5:fd:da:88:a7:4b:37:f8:35:be:9f:01:4f:
         68:21:91:26:53:1c:76:03:0e:ec:10:7a:4a:1f:9d:6e:32:fb:
         ee:60:84:db:fe:42:4b:1c:ef:eb:a3:2e:5c:94:dd:3c:07:65:
         ba:64:91:1f:09:e5:68:20:b2:5a:67:f0:fb:85:8b:30:6f:4f:
         25:90:0b:50:ea:50:7f:e1:18:aa:2f:6d:28:3f:e7:9c:ed:04:
         8a:83:97:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:55:37 2025 by rpki-client