Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/6d520bfa-199d-38e1-bc54-542b592d261b.roa
File:                     6d520bfa-199d-38e1-bc54-542b592d261b.roa (raw, json)
Hash identifier:          E2I1986z9QH3pkFWT4Dt2xlURPqOwQaqueAxPyPEacQ=
Subject key identifier:   C3:FF:6F:88:8F:BA:D0:E3:88:A3:CA:2B:9B:09:0D:B0:EB:90:B6:48
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584AEE269828B4E39A44D603C440
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/6d520bfa-199d-38e1-bc54-542b592d261b.roa
Signing time:             Thu 21 Aug 2025 13:00:41 +0000
ROA not before:           Thu 21 Aug 2025 13:00:41 +0000
ROA not after:            Wed 19 Nov 2025 14:00:41 +0000
asID:                     30058
IP address blocks:        50.7.2.0/23 maxlen: 24
                          50.7.26.0/24 maxlen: 24
                          2001:49f0:d0f3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:26:98:28:b4:e3:9a:44:d6:03:c4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Aug 21 13:00:41 2025 GMT
            Not After : Nov 19 14:00:41 2025 GMT
        Subject: CN=ba4578ee-a96b-44ea-9dc5-a7554254fc66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e9:50:f8:77:b6:a3:20:0d:a0:b7:95:61:33:
                    c4:1c:d2:de:19:16:d2:d9:0b:2f:ec:ff:b0:a9:45:
                    09:5f:49:e5:57:f9:e5:8e:fc:83:8d:4b:f7:70:68:
                    aa:09:bd:ff:24:bf:65:4c:82:73:c6:dc:be:83:31:
                    3e:b6:50:ad:fe:a0:1d:be:24:41:a5:b3:95:29:93:
                    74:1d:76:f2:a0:c1:ed:44:61:40:59:44:a8:d5:47:
                    ff:9f:3d:d1:f8:e2:7e:d0:5e:b5:f0:37:33:fa:88:
                    3e:86:62:39:38:62:80:0e:f8:82:5b:70:56:d1:f0:
                    3f:bd:a4:8e:83:d4:80:2f:3c:cf:13:b7:a7:1c:08:
                    84:75:93:75:ea:d6:f7:a3:30:1f:a4:46:1e:5a:bf:
                    08:f3:ac:37:31:66:ae:26:08:ef:ed:ea:99:5b:48:
                    11:27:40:ed:91:ee:ff:1f:78:75:c2:fd:75:3b:ac:
                    15:ec:4d:78:44:bf:af:27:14:17:f5:20:b8:c1:d4:
                    f6:a9:4b:44:d8:5c:0f:18:a6:65:f7:dc:3b:ae:3d:
                    9c:a8:b7:aa:98:9f:2c:75:78:2c:4a:7e:29:77:13:
                    c0:d3:39:dd:6d:eb:ab:4c:26:eb:bc:fb:40:2a:e9:
                    91:14:7c:b2:17:a0:f4:a2:c7:36:5c:c7:0d:ca:6f:
                    ae:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FF:6F:88:8F:BA:D0:E3:88:A3:CA:2B:9B:09:0D:B0:EB:90:B6:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/6d520bfa-199d-38e1-bc54-542b592d261b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.2.0/23
                  50.7.26.0/24
                IPv6:
                  2001:49f0:d0f3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:47:db:3d:89:9f:d9:e1:40:df:de:5f:d2:27:0f:97:41:61:
         6c:78:70:1f:f9:b5:67:0e:48:f4:99:66:f9:e5:1c:72:5c:5e:
         21:76:5e:30:af:5d:6a:73:ca:79:e9:a6:74:e7:e1:ec:75:e8:
         af:82:13:d9:51:58:be:41:2e:7a:2b:8d:5a:6c:8a:77:47:d1:
         18:87:42:38:ad:17:92:51:28:35:02:2d:c6:b3:22:29:01:a9:
         9f:73:9d:3b:c5:32:1c:03:63:37:a8:9c:b9:7a:9c:b2:ff:d2:
         de:0b:2e:eb:0e:69:a3:1a:cb:bf:d8:4d:bb:7b:0e:3f:85:59:
         c2:d6:95:b0:3b:8b:87:10:8b:be:24:e0:15:0c:91:ab:28:be:
         92:5f:3c:1a:fb:c4:90:f3:4d:e0:a0:e9:96:a3:7b:0f:c4:20:
         b1:48:84:05:42:6a:50:8e:72:53:d0:63:2d:ee:c0:d2:5a:0f:
         4f:86:1f:9a:8d:66:d9:1e:bf:f9:20:79:42:ce:04:95:df:74:
         d4:d0:f9:ad:ec:fd:d1:0a:d4:db:d6:63:c8:05:37:57:66:21:
         cf:9c:c3:09:e0:b4:82:bd:a8:7a:93:42:63:39:eb:fc:31:01:
         57:7b:87:dc:e7:66:7e:1e:69:48:11:f7:08:26:72:f7:8c:8c:
         ad:8d:d5:17
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:56:54 2025 by rpki-client