Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/a068ddaa-17ad-3912-a398-57aca79f12a1.roa
File:                     a068ddaa-17ad-3912-a398-57aca79f12a1.roa (raw, json)
Hash identifier:          JT5BCLxEEODPDhcUu8KxENqvxbdiCrmDEmZVbWUF/fo=
Subject key identifier:   E2:B3:49:80:DF:64:03:91:D3:AA:E0:4C:E5:49:C4:BA:88:0E:FF:19
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584F4975E2B21AA359213C42CF00
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/a068ddaa-17ad-3912-a398-57aca79f12a1.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     1239
IP address blocks:        50.7.30.0/23 maxlen: 24
                          50.7.80.0/22 maxlen: 24
                          50.7.206.0/23 maxlen: 24
                          50.7.208.0/23 maxlen: 24
                          50.7.246.0/23 maxlen: 24
                          198.16.99.0/24 maxlen: 24
                          198.16.120.0/24 maxlen: 24
                          2001:49f0:d01e::/48 maxlen: 48
                          2001:49f0:d095::/48 maxlen: 48
                          2001:49f0:d0e0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:e2:b2:1a:a3:59:21:3c:42:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9aa85aa1-dff4-4a09-8b30-bbe985c8c6e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:21:0d:99:10:74:97:3c:d7:86:c0:0c:ca:9c:
                    7c:44:af:51:bd:e4:9b:e4:8c:f3:db:19:0c:34:35:
                    77:76:e8:da:44:f7:0e:c8:bb:ce:6a:16:2c:ef:7f:
                    95:59:9d:cf:10:e3:fb:fd:0f:70:67:f0:35:ff:e3:
                    c0:42:42:24:4d:40:9a:1c:63:ec:85:57:fc:0e:31:
                    df:33:af:08:15:d8:02:63:ba:dd:d4:eb:ef:82:00:
                    92:f7:ab:8a:ef:cd:36:3b:7a:70:cc:28:f9:d1:86:
                    60:f2:2d:8f:ae:8a:b7:5d:ed:45:b6:c8:df:e4:d6:
                    a0:2d:db:72:10:27:04:00:78:9d:ff:8b:99:e4:ec:
                    7a:24:23:b5:3b:1a:a2:cc:78:83:d2:49:c9:15:1c:
                    67:56:b1:03:37:c7:bd:dc:3f:3f:b0:bf:d9:1e:2f:
                    52:60:ed:5c:60:f7:29:31:df:a6:01:3d:3e:7b:36:
                    9e:fd:a8:c0:ba:bb:15:92:13:28:9b:c6:a1:2f:5f:
                    74:fa:73:e3:20:5a:ee:02:12:88:c7:71:a8:0a:64:
                    fa:fa:47:7a:1b:49:59:2a:cf:1e:6b:12:05:ee:28:
                    1d:87:84:96:78:d3:e0:9c:f9:d4:fb:e8:4e:49:c0:
                    36:16:91:99:d3:1c:1b:a0:2a:a8:ec:63:c4:82:6a:
                    9f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B3:49:80:DF:64:03:91:D3:AA:E0:4C:E5:49:C4:BA:88:0E:FF:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/a068ddaa-17ad-3912-a398-57aca79f12a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.30.0/23
                  50.7.80.0/22
                  50.7.206.0-50.7.209.255
                  50.7.246.0/23
                  198.16.99.0/24
                  198.16.120.0/24
                IPv6:
                  2001:49f0:d01e::/48
                  2001:49f0:d095::/48
                  2001:49f0:d0e0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:09:a3:28:22:90:60:c3:59:14:9b:ac:3e:85:df:02:76:54:
         9c:bf:82:9c:49:51:f0:a5:9e:35:fb:38:0a:43:3a:33:6b:22:
         e7:1a:a7:37:f8:75:dd:5f:1a:2d:54:12:af:2f:1d:57:c6:b6:
         65:97:b2:ee:62:b1:df:55:b3:04:a6:7b:ae:4f:02:7c:10:9e:
         ae:92:eb:fb:ed:ce:c2:07:02:3e:26:03:3a:6a:99:e6:f5:f2:
         c5:cc:eb:73:2c:45:f5:42:66:08:77:ed:a7:00:4d:97:20:01:
         42:aa:24:58:d9:cf:ff:20:66:12:33:12:0c:31:84:e0:fc:d0:
         07:df:57:cc:bd:e1:85:e0:17:32:4c:99:40:50:4b:ef:89:e4:
         e1:d7:65:98:39:24:5c:61:44:12:7d:56:fb:c6:94:72:f1:5f:
         c8:c6:08:e8:07:85:23:6b:0c:50:e6:68:e7:c9:69:0d:14:ee:
         32:56:5d:54:f4:4a:69:1f:8d:6c:c8:ed:d6:36:eb:e9:12:e2:
         e5:f8:32:7a:1d:b5:bb:98:fd:c6:ef:d1:fa:68:5f:e7:ef:f7:
         73:0f:1b:b5:e2:c0:0f:1c:54:31:1d:ac:a8:0b:f5:bf:b1:dc:
         d9:68:6d:5d:46:5d:85:73:d6:ed:22:a3:1b:ea:f7:ed:b4:4a:
         b0:24:40:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:46:28 2026 by rpki-client