Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/979ec555-2039-3d3b-8b94-c081decece9d.roa
File:                     979ec555-2039-3d3b-8b94-c081decece9d.roa (raw, json)
Hash identifier:          ij975Y5y0oLkfaP1lKwHeJotRHQU5+G/RWUps4Nx9nw=
Subject key identifier:   59:BE:E6:B3:2A:DD:4D:0F:B7:11:A9:9A:E0:E6:32:B1:D9:77:7B:05
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584B540C6A70BE94DDCE5942BC80
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/979ec555-2039-3d3b-8b94-c081decece9d.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     30058
IP address blocks:        50.7.22.0/23 maxlen: 23
                          50.7.240.0/23 maxlen: 23
                          66.90.102.0/24 maxlen: 24
                          67.159.8.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:6a:70:be:94:dd:ce:59:42:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=d7f9045f-6471-4729-8812-907f5c29b85a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8a:96:0f:c7:da:9b:bd:95:c7:6c:0d:35:3b:
                    21:a7:28:4b:da:8c:da:fd:50:19:5e:f4:f1:46:c6:
                    87:57:81:e9:b5:16:1e:f8:68:3e:0c:85:ce:d6:f4:
                    15:27:35:e5:a1:dd:ae:63:6b:b9:6e:73:93:32:b8:
                    70:a9:26:96:61:06:91:ad:80:ac:77:c4:45:83:3e:
                    64:c6:e3:ae:21:b7:3d:f2:33:cc:8e:fa:47:c2:4c:
                    ce:ec:cf:38:9b:49:04:39:45:d4:b1:f0:e6:7b:71:
                    2d:a5:7b:98:e3:41:2e:fb:6e:be:f2:e4:76:a9:5a:
                    db:f0:22:a6:69:35:1b:ac:a6:02:e1:04:93:54:66:
                    f0:4f:b8:fe:77:84:a3:3b:5a:d2:c6:93:9b:af:b7:
                    9d:71:6f:1b:fd:ca:30:fb:eb:a9:d8:a8:89:ce:27:
                    0d:4a:fe:cc:3a:1a:ca:b9:a5:74:77:4b:70:fe:f5:
                    48:3d:75:45:1c:e9:77:98:c3:01:72:f1:f3:76:8c:
                    54:02:08:24:c0:9b:8e:6f:9c:ab:b1:17:ba:cf:49:
                    d9:56:aa:48:ca:92:0f:6d:55:80:8a:a7:09:ef:e5:
                    4a:11:72:0b:47:03:0a:8d:5d:68:7b:ec:3d:59:47:
                    cf:c1:a0:b5:1e:50:47:16:c5:0a:55:d3:42:11:16:
                    54:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BE:E6:B3:2A:DD:4D:0F:B7:11:A9:9A:E0:E6:32:B1:D9:77:7B:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/979ec555-2039-3d3b-8b94-c081decece9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.22.0/23
                  50.7.240.0/23
                  66.90.102.0/24
                  67.159.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:04:2c:65:ce:dd:33:79:13:28:f3:0e:47:b0:71:41:ff:a2:
         e5:3a:62:03:97:35:de:83:98:7a:ca:2c:67:20:c6:6d:3a:9e:
         71:c1:37:94:90:0a:be:b5:33:00:0e:06:cb:3d:cc:29:d6:6e:
         af:e6:5e:b8:a4:35:41:94:28:62:21:9e:39:e9:ab:e2:fd:32:
         b3:f4:49:a3:60:32:bd:b5:10:46:8d:7c:de:e5:29:a1:11:67:
         cb:d5:45:8a:3b:de:aa:bb:66:72:d9:8a:f8:be:89:2d:68:c9:
         57:f0:6d:8f:f9:6d:40:31:07:97:d2:7c:5d:2a:db:03:d1:ed:
         4f:e9:8c:2f:79:89:c6:92:d3:0e:8e:24:6b:67:fd:ca:e2:ac:
         ae:9a:7d:3f:0e:a2:21:7d:01:fd:2e:6c:cf:23:f7:67:12:93:
         f7:cd:02:d2:42:77:0d:fb:b4:85:ef:2e:ad:a1:a5:83:db:21:
         98:21:17:86:da:ed:be:6f:6c:fa:44:4e:26:90:cf:81:54:46:
         1f:db:29:44:a3:09:36:c7:9d:44:32:0c:eb:9d:8f:22:69:cc:
         48:ee:22:51:0a:bb:68:95:e9:e5:69:9f:12:92:c7:47:6b:6d:
         5b:8e:d4:75:03:fa:a8:fa:d4:c4:22:5a:80:91:01:85:67:20:
         42:9d:69:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:27:51 2025 by rpki-client