Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/80f9c3fe-32d8-3d4d-b7b1-efc46c212cb4.roa
File:                     80f9c3fe-32d8-3d4d-b7b1-efc46c212cb4.roa (raw, json)
Hash identifier:          26uT6i5LOiZDp3pBudBJHPdXKXOJdx/QNnjkbQBLCuQ=
Subject key identifier:   AE:D3:84:17:03:51:B0:DF:8D:17:03:A9:C6:DC:6B:2F:A0:C4:F2:97
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584B4BAC5CDB0414C0CAFB4F3C80
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/80f9c3fe-32d8-3d4d-b7b1-efc46c212cb4.roa
Signing time:             Wed 24 Sep 2025 01:00:31 +0000
ROA not before:           Wed 24 Sep 2025 01:00:31 +0000
ROA not after:            Tue 23 Dec 2025 02:00:31 +0000
asID:                     30058
IP address blocks:        50.7.232.0/23 maxlen: 23
                          2001:49f0:d0ac::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4b:ac:5c:db:04:14:c0:ca:fb:4f:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Sep 24 01:00:31 2025 GMT
            Not After : Dec 23 02:00:31 2025 GMT
        Subject: CN=959f84a7-6908-44dd-ad50-c1548d2951d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b3:5a:8b:5e:92:0d:88:fa:13:c5:cd:a3:79:
                    35:0c:44:73:94:05:9d:f4:77:b2:3f:6f:73:01:0e:
                    71:f5:66:43:7f:55:d9:a4:00:5e:96:5a:ce:d1:b2:
                    5a:19:e6:cf:05:63:1d:17:a7:41:cf:7d:80:23:9f:
                    9f:87:87:87:15:fc:cd:e2:bb:bb:31:e1:da:90:6b:
                    57:a5:a0:f5:39:43:7d:45:00:64:00:ab:3f:33:82:
                    ac:d9:16:15:53:68:cb:f2:b1:2a:9d:00:31:da:9c:
                    f0:22:1f:2c:99:aa:46:5a:25:31:cb:11:f2:63:6a:
                    6a:2b:4f:a0:71:06:c0:a1:14:d0:52:44:e9:87:59:
                    51:18:55:9a:df:6d:76:2c:55:41:d2:8d:75:63:ea:
                    d9:35:b8:ff:8e:f6:ea:8e:c1:42:4a:fe:35:13:57:
                    12:ef:8b:b8:5b:26:4e:7a:45:39:e1:82:7e:64:9c:
                    a9:e2:61:79:71:f1:d3:33:e4:25:3a:06:ab:b1:be:
                    62:cd:29:0a:b8:88:63:a0:c0:a4:dd:9d:bc:54:32:
                    89:9d:39:9b:94:44:15:89:1b:ab:85:be:a9:e1:4f:
                    82:7a:f9:83:dd:df:6c:4d:43:b0:5d:12:f9:32:41:
                    e9:a7:29:e5:58:d3:df:ef:98:88:d2:a2:95:82:f5:
                    1e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D3:84:17:03:51:B0:DF:8D:17:03:A9:C6:DC:6B:2F:A0:C4:F2:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/80f9c3fe-32d8-3d4d-b7b1-efc46c212cb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.232.0/23
                IPv6:
                  2001:49f0:d0ac::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:32:78:11:fe:f8:9d:3c:61:98:4d:15:90:c4:00:42:8f:a0:
         8d:e9:f6:da:3b:30:bd:c5:08:64:12:d7:11:ff:71:b8:42:82:
         93:94:cf:d1:63:39:b4:f9:a8:60:5a:ca:cf:c0:c5:19:c8:50:
         08:79:37:e5:62:26:15:44:07:04:5d:ad:f9:26:a1:cb:31:23:
         75:87:f2:c1:54:da:44:0c:e3:3f:5e:25:1b:19:d1:d4:87:95:
         22:9b:3d:97:9e:72:87:ea:3f:fc:e5:73:88:17:e4:78:67:79:
         74:0b:d4:08:b9:10:d7:18:bd:f9:41:93:b9:ef:7b:fe:fe:94:
         c5:2d:06:d7:eb:8b:19:b2:4e:05:41:2a:82:d7:77:e6:d6:f0:
         3b:14:45:97:6e:eb:8f:ab:39:a5:b8:85:56:94:84:25:66:48:
         83:74:67:c9:cc:48:83:b1:e9:41:a7:50:c8:48:a0:2d:7a:84:
         03:50:cd:ed:15:da:54:d6:54:5b:a3:35:66:50:0f:87:9c:e4:
         1a:a9:1b:a8:8d:a7:c3:93:4c:d7:2e:92:54:73:5f:9d:ad:5d:
         13:f1:3e:3d:05:2a:08:4b:b5:c0:8d:c5:55:27:b2:aa:cf:9d:
         96:38:ff:42:39:d0:1c:47:29:c6:4e:d3:e4:e3:10:9d:c7:5e:
         a3:c3:4e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:23:16 2025 by rpki-client