Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8fdaee05-a06e-30f6-bbe2-7f87653d360f.roa
File:                     8fdaee05-a06e-30f6-bbe2-7f87653d360f.roa (raw, json)
Hash identifier:          TUdzHxvjcZHb9IyGpRJ7U/qKlbbJN8vU6P5db/qu+ag=
Subject key identifier:   85:BC:47:C9:5F:19:12:11:AF:EB:38:47:F6:13:C8:67:AB:DB:FF:5C
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584B3AEC4678ADFFCC429B5F6A60
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8fdaee05-a06e-30f6-bbe2-7f87653d360f.roa
Signing time:             Thu 18 Sep 2025 01:00:32 +0000
ROA not before:           Thu 18 Sep 2025 01:00:32 +0000
ROA not after:            Wed 17 Dec 2025 02:00:32 +0000
asID:                     1239
IP address blocks:        50.7.160.0/22 maxlen: 22
                          50.7.188.0/22 maxlen: 22
                          50.7.194.0/23 maxlen: 23
                          50.7.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3a:ec:46:78:ad:ff:cc:42:9b:5f:6a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Sep 18 01:00:32 2025 GMT
            Not After : Dec 17 02:00:32 2025 GMT
        Subject: CN=60cc2c6a-4273-4e83-872c-ec702a6e7e54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bb:27:ca:8c:2c:a5:d0:82:db:d5:4b:7b:1f:
                    ef:0d:88:73:9c:d6:be:05:0c:2e:5d:0f:bb:36:f2:
                    4d:a7:f3:b4:0d:f7:22:7a:e1:2c:72:d2:9c:66:9a:
                    42:9f:96:f7:72:c9:35:d4:51:66:8e:a8:e2:1e:5f:
                    26:4f:19:23:49:4f:78:08:cd:7f:d8:8b:f2:42:9f:
                    0c:01:0d:8c:3c:7b:03:66:26:bb:0c:48:02:a8:cd:
                    51:1f:7c:91:11:e8:d1:d7:6e:83:f9:49:1f:19:7b:
                    32:1f:1a:62:53:18:98:ab:84:04:49:37:24:1e:54:
                    90:a2:46:a8:7f:dc:90:61:01:ce:73:0c:ce:de:0c:
                    44:77:dd:04:2f:bf:37:2a:ea:1c:a8:e4:20:4b:33:
                    4c:33:c4:94:1d:3e:df:0d:6d:ac:d2:6d:18:64:81:
                    05:38:44:ba:56:a9:9f:16:30:59:54:68:4c:f3:7b:
                    46:54:2b:36:29:87:27:99:47:12:f3:35:5f:47:de:
                    5a:f3:a0:12:20:aa:83:2a:43:0c:d2:20:2f:dd:3c:
                    11:e8:2f:5b:2e:59:23:cb:ee:fe:ef:72:5d:36:d2:
                    e1:98:a6:d3:1b:9b:9a:b8:23:ae:0a:91:9b:bb:ac:
                    ac:7b:9b:42:15:6b:c8:46:80:47:62:8f:d3:72:d2:
                    69:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:BC:47:C9:5F:19:12:11:AF:EB:38:47:F6:13:C8:67:AB:DB:FF:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8fdaee05-a06e-30f6-bbe2-7f87653d360f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.160.0/22
                  50.7.188.0/22
                  50.7.194.0/23
                  50.7.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dd:ae:88:ed:1a:e2:22:b4:af:3f:94:90:c6:92:6b:c4:9b:b9:
         f0:9b:69:b9:d9:53:da:94:0a:21:7d:85:24:1c:b9:36:2f:64:
         30:83:cd:31:bb:6c:c9:90:c4:21:81:88:dd:26:d1:08:ce:bd:
         5d:b9:02:d8:21:cf:1c:0f:b4:6f:a6:ec:2e:9d:6f:44:23:e4:
         1e:5c:b1:83:26:65:15:a8:bb:fc:0a:fb:3a:3f:be:08:6f:5f:
         fd:93:ad:d9:5c:ca:96:58:f6:1c:bb:0f:de:af:b7:77:f8:45:
         b2:18:7b:1d:42:7e:ca:74:4b:e0:5e:ac:26:1b:73:b8:87:18:
         70:fb:bc:49:37:3c:5a:b8:1a:fb:78:4e:2b:4c:53:9d:27:4a:
         0d:3b:6c:72:06:88:16:63:01:65:66:fa:19:88:0d:f6:4e:5f:
         68:4f:97:3f:04:36:82:16:2a:95:bd:cc:e2:49:bf:3c:95:b8:
         41:43:27:f2:08:9f:08:b2:f4:60:c3:86:18:ce:33:92:6b:9b:
         5a:88:7d:37:b8:f8:a9:1e:57:b9:16:ed:d3:bc:42:17:af:27:
         21:f5:c9:8a:56:e2:ba:01:cc:0a:fc:4b:8c:40:30:dd:3d:4d:
         6c:fa:aa:f3:eb:06:74:6d:a1:fb:d8:56:9f:5f:5a:95:51:76:
         c6:6d:37:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:23:47 2025 by rpki-client