Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/fd9d9818-f112-377a-b752-7264309faaad.roa
File:                     fd9d9818-f112-377a-b752-7264309faaad.roa (raw, json)
Hash identifier:          62Rr8ebyxNSKMzT1Yvbnu801IuNgw8hMNHixbUwr/qY=
Subject key identifier:   66:1F:5B:2E:65:70:4C:82:30:32:75:A8:E0:B5:0B:61:F1:A1:0B:9E
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584A42758425D1F93B614B7E69D0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/fd9d9818-f112-377a-b752-7264309faaad.roa
Signing time:             Sat 21 Jun 2025 01:00:48 +0000
ROA not before:           Sat 21 Jun 2025 01:00:48 +0000
ROA not after:            Fri 19 Sep 2025 01:00:48 +0000
asID:                     1239
IP address blocks:        50.7.48.0/24 maxlen: 24
                          2001:49f0:d13b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:42:75:84:25:d1:f9:3b:61:4b:7e:69:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jun 21 01:00:48 2025 GMT
            Not After : Sep 19 01:00:48 2025 GMT
        Subject: CN=e57e7d80-7eea-4a9e-a05c-92cd05b4bfe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:83:43:84:5c:7c:91:d1:5d:2d:e3:7b:8b:aa:
                    2c:44:17:ed:55:4b:08:c4:f6:f5:52:98:4b:43:35:
                    90:3d:48:ac:1b:3a:f8:1a:35:1d:67:60:7d:14:fb:
                    d4:22:2b:17:3e:58:58:75:85:0f:bb:2d:60:60:e9:
                    71:bd:bb:42:b6:2f:3a:db:ff:81:77:0b:12:34:5c:
                    03:cf:f2:7f:3e:95:58:c4:17:c0:7c:fe:93:9c:d9:
                    c5:67:ed:60:0e:dc:26:00:6d:8d:16:db:7a:9c:a1:
                    b8:8a:93:0a:37:ea:de:a7:68:42:4d:08:45:01:98:
                    49:74:1d:2c:8d:8d:2e:69:b3:2c:94:a6:c1:48:0d:
                    a6:3d:97:3d:99:44:fb:ef:99:e7:a5:89:11:1f:ea:
                    23:8b:80:70:89:49:81:4e:45:a8:75:4f:3a:57:0f:
                    a2:f6:70:98:57:f6:72:f5:f9:2c:3f:18:08:e4:1a:
                    71:7b:0f:12:7d:4d:dc:92:af:84:2a:ee:3a:51:40:
                    1a:14:8a:a9:b3:93:98:46:fd:20:8a:e4:37:dd:a3:
                    00:4e:99:a7:a0:07:03:f6:4c:20:c7:d5:b1:87:fa:
                    d3:ca:f6:5b:ca:52:79:17:00:17:d1:d4:59:5e:5a:
                    24:5c:75:66:1c:cc:cd:d1:87:b0:39:8c:99:b6:bd:
                    1d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:1F:5B:2E:65:70:4C:82:30:32:75:A8:E0:B5:0B:61:F1:A1:0B:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/fd9d9818-f112-377a-b752-7264309faaad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.48.0/24
                IPv6:
                  2001:49f0:d13b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:57:75:fd:25:54:04:94:84:6b:c6:26:14:f7:60:29:48:b2:
         7e:ab:3d:91:4a:54:68:24:3b:bc:53:de:91:71:2d:ad:27:9f:
         46:7a:bd:f3:91:58:dc:78:8d:84:a7:13:f4:a3:0c:fa:a6:a2:
         a3:29:11:0c:b8:00:96:18:f3:98:3b:11:91:fc:7a:19:31:9b:
         02:52:49:44:f6:9f:55:82:d2:fb:d0:b1:fe:83:da:f5:e8:00:
         e5:ad:c8:f0:98:3a:59:57:87:03:d4:68:39:5e:f9:8e:3e:09:
         8a:c2:58:14:a8:04:4c:8e:26:17:09:1b:6d:00:0e:dd:f5:4a:
         94:3b:d4:b8:bf:7d:e9:4e:de:2f:9c:4b:01:f5:4d:58:01:1f:
         44:03:80:13:18:5d:b0:2a:a3:ed:37:06:64:15:22:2a:55:5f:
         9b:84:61:db:e7:3e:c3:d9:8e:84:3d:ee:13:6e:78:cf:7e:2e:
         45:b7:b7:42:d8:9b:2c:b1:4c:73:30:13:91:72:23:84:43:6b:
         56:7d:23:31:49:a8:ee:24:b0:53:12:9b:08:cb:de:b6:7b:44:
         e5:97:c0:25:0f:1b:de:0e:9d:ad:06:4a:54:14:40:a8:00:f0:
         49:ea:9c:98:c0:4d:c4:a3:6c:11:2e:c9:32:b2:2c:a5:94:f4:
         4c:2e:ae:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 09:48:22 2025 by rpki-client