Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/cf44e059-655f-3c16-a09c-5bf8ea8fe3d9.roa
File:                     cf44e059-655f-3c16-a09c-5bf8ea8fe3d9.roa (raw, json)
Hash identifier:          hAfCggoe2SsMa1Zy2DsDwn+c0aQ83vJX4bNvyDrcB3g=
Subject key identifier:   59:B8:93:91:E9:19:A6:00:A0:C1:B3:DD:66:23:DB:28:57:0F:1D:DE
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584B3821A1DEF3181A517BA54600
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/cf44e059-655f-3c16-a09c-5bf8ea8fe3d9.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     30058
IP address blocks:        50.7.128.0/22 maxlen: 22
                          50.7.132.0/22 maxlen: 22
                          50.7.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:a1:de:f3:18:1a:51:7b:a5:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=64679f44-f91b-4675-b494-5b6800e40bf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:52:11:bb:a9:ec:45:e3:4c:10:b3:b1:a0:89:
                    b9:93:e8:8f:fc:89:ed:d8:96:fc:cc:d7:00:51:fe:
                    66:da:ee:16:e8:19:b9:f5:c4:a5:74:fd:6a:6b:08:
                    15:6f:32:34:bf:fc:27:76:fc:ae:47:9a:a5:44:3a:
                    52:f8:0f:f1:fc:27:ad:96:f7:84:ec:3e:2c:72:05:
                    d8:97:fc:3a:d5:35:cc:6a:dc:6d:f4:89:c5:56:53:
                    35:e8:6b:98:89:fa:12:f5:b0:45:e4:1a:37:aa:88:
                    e4:80:aa:49:a5:e2:dd:85:29:7e:c8:62:b5:bc:d4:
                    93:08:b2:ce:88:da:b1:de:6f:c3:4c:7a:f7:92:f7:
                    df:11:46:4d:38:1d:f7:a8:3b:4f:c0:9b:5c:ea:dd:
                    cd:c5:09:89:08:d3:71:1d:a6:dd:b9:62:8d:26:31:
                    c4:df:56:9b:94:21:e0:f6:ba:b8:10:6e:c4:a8:6c:
                    ec:39:03:b2:c4:18:ee:ed:32:5b:f5:9e:23:5f:30:
                    13:55:3d:b4:07:70:7e:a1:10:3e:92:40:a8:cc:ec:
                    b9:b3:68:b0:99:1c:a2:98:56:19:0b:c5:64:4a:c3:
                    b2:79:e2:12:8a:0a:d6:41:78:28:62:cf:e5:9f:d4:
                    78:47:b1:4a:78:75:eb:9b:34:f0:5a:78:21:9f:1c:
                    59:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B8:93:91:E9:19:A6:00:A0:C1:B3:DD:66:23:DB:28:57:0F:1D:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/cf44e059-655f-3c16-a09c-5bf8ea8fe3d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.128.0-50.7.139.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:e8:c7:2b:90:5e:b4:36:29:2f:2f:65:9e:2c:78:f8:73:a1:
         6d:a2:f7:62:5d:90:1e:27:c7:46:32:fd:c1:4f:4f:f5:19:44:
         1f:67:da:f1:e9:57:f9:d9:01:65:07:b6:50:57:84:5a:21:a0:
         19:c9:69:c1:bc:45:f3:4c:50:0f:d0:9e:4f:d3:1e:2a:0f:cc:
         09:40:07:02:dc:28:81:8d:15:71:22:e8:71:a9:da:17:1a:c4:
         8a:2c:a7:c6:c0:ed:30:75:db:34:9c:21:31:de:2d:8e:96:9b:
         91:02:96:b9:d8:c8:81:6a:e7:68:9e:7c:92:2f:64:b6:bf:0c:
         69:9b:37:08:0c:54:5d:87:5f:58:e5:72:83:87:d7:d7:b3:04:
         b6:7a:30:9b:42:60:c2:bb:68:10:0e:4a:63:51:9e:ab:c4:ac:
         01:bf:02:a7:74:4a:9b:7f:9d:05:86:ec:5b:2b:c0:d5:f3:a6:
         1c:e6:1d:22:4d:ac:8e:f8:c9:13:56:e7:2c:da:53:ef:7d:5b:
         2e:70:08:ff:07:e6:1f:73:25:3c:48:2f:71:38:22:ec:06:10:
         de:34:d5:3f:4a:b2:c7:60:fa:52:71:26:65:fe:e2:31:2a:37:
         c7:4a:43:a2:66:1f:06:0e:a2:90:32:ff:86:81:e0:df:a7:e6:
         9f:6b:24:51
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEs4IaHe8xgaUXulRgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk
NjQ2NzlmNDQtZjkxYi00Njc1LWI0OTQtNWI2ODAwZTQwYmY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVIRu6nsReNMELOxoIm5k+iP/Int2Jb8zNcA
Uf5m2u4W6Bm59cSldP1qawgVbzI0v/wndvyuR5qlRDpS+A/x/CetlveE7D4scgXY
l/w61TXMatxt9InFVlM16GuYifoS9bBF5Bo3qojkgKpJpeLdhSl+yGK1vNSTCLLO
iNqx3m/DTHr3kvffEUZNOB33qDtPwJtc6t3NxQmJCNNxHabduWKNJjHE31ablCHg
9rq4EG7EqGzsOQOyxBju7TJb9Z4jXzATVT20B3B+oRA+kkCozOy5s2iwmRyimFYZ
C8VkSsOyeeISigrWQXgoYs/ln9R4R7FKeHXrmzTwWnghnxxZfwIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFFm4k5HpGaYAoMGz3WYj2yhXDx3eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvY2Y0NGUwNTktNjU1Zi0z
YzE2LWEwOWMtNWJmOGVhOGZlM2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAcyB4AD
BAIyB4gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAFOjHK5BetDYpLy9lnix4+HOhbaL3Yl2QHifHRjL9wU9P
9RlEH2fa8elX+dkBZQe2UFeEWiGgGclpwbxF80xQD9CeT9MeKg/MCUAHAtwogY0V
cSLocanaFxrEiiynxsDtMHXbNJwhMd4tjpabkQKWudjIgWrnaJ58ki9ktr8MaZs3
CAxUXYdfWOVyg4fX17MEtnowm0JgwrtoEA5KY1Geq8SsAb8Cp3RKm3+dBYbsWyvA
1fOmHOYdIk2sjvjJE1bnLNpT731bLnAI/wfmH3MlPEgvcTgi7AYQ3jTVP0qyx2D6
UnEmZf7iMSo3x0pDomYfBg6ikDL/hoHg36fmn2skUQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:38:04 2025 by rpki-client