Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/07da35a6-b517-3c9c-9003-d0435eef21c2.roa
File:                     07da35a6-b517-3c9c-9003-d0435eef21c2.roa (raw, json)
Hash identifier:          jt1NYeNnSCuMZD+qFnyhwOSPwwYMIUhJ6FkwYb8fKOc=
Subject key identifier:   28:5F:0C:D9:F8:33:BC:F3:2D:F3:11:A0:D4:74:92:E0:7C:1D:F8:2A
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584A6290A0CF1B5FF3A03C6A9D00
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/07da35a6-b517-3c9c-9003-d0435eef21c2.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     30058
IP address blocks:        50.7.230.0/23 maxlen: 23
                          66.90.101.0/24 maxlen: 24
                          2001:49f0:d0ab::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:a0:cf:1b:5f:f3:a0:3c:6a:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=1ffe4a97-8207-45bc-88ca-59d038ad8e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5e:29:36:13:9c:4c:81:cb:18:bc:81:ad:44:
                    6c:32:b6:73:20:f2:49:19:2b:62:48:f2:16:24:96:
                    07:75:65:ae:21:4f:ab:3b:e5:8a:8d:6f:16:9f:17:
                    fe:f2:fa:c7:25:63:6f:85:50:ec:1c:40:0b:6a:7a:
                    91:75:32:e7:b9:9d:c2:b8:41:59:45:09:f2:1f:a8:
                    56:56:e6:a7:91:59:ba:fe:81:f4:f8:e2:04:db:fa:
                    ac:ea:5e:97:3d:b7:c6:43:bd:af:fb:02:a6:9a:cb:
                    91:d4:a5:1b:e8:4a:cc:9e:5f:05:ca:1b:e6:44:4f:
                    ea:6b:dc:0f:99:b5:5e:b6:ad:73:12:97:52:cb:95:
                    e9:03:f0:73:d0:75:1d:73:bc:40:8b:4f:ca:85:6c:
                    b5:17:28:78:3a:78:ec:ba:b0:3a:79:eb:57:a3:85:
                    40:ea:bc:93:d0:83:e1:28:32:5d:1d:9e:23:82:a6:
                    11:03:56:f9:b4:3b:17:2c:f9:2b:b3:89:51:f8:24:
                    19:3a:3a:0c:bb:ce:84:64:4a:52:a4:ea:3e:cc:0a:
                    06:64:2d:9a:1b:a0:3a:64:a7:78:87:af:bc:6f:bb:
                    2f:2f:da:9c:b1:4f:1c:c3:39:d9:69:9d:38:b5:ba:
                    e3:99:39:6c:a9:94:46:e0:de:62:55:99:f1:bd:96:
                    c4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:5F:0C:D9:F8:33:BC:F3:2D:F3:11:A0:D4:74:92:E0:7C:1D:F8:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/07da35a6-b517-3c9c-9003-d0435eef21c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.230.0/23
                  66.90.101.0/24
                IPv6:
                  2001:49f0:d0ab::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:20:27:83:8e:78:3f:30:9a:53:40:7b:eb:5f:44:dc:a1:6a:
         bb:83:3e:ff:61:09:f0:44:74:d3:23:b0:f7:a4:5f:03:b8:63:
         fe:79:16:a4:ae:14:05:7d:0a:1c:89:19:33:ab:e2:8d:1c:07:
         6e:9c:bb:b3:3c:3c:da:5a:05:d8:9e:37:b5:20:fb:4b:b4:28:
         19:52:fc:45:f4:84:20:d8:13:b3:5a:a5:9c:b8:af:dc:10:e5:
         72:23:61:cf:6e:fb:c4:67:28:10:27:44:91:8b:d7:ac:e3:c6:
         45:2c:00:a2:81:85:e5:67:11:0a:2c:9a:17:18:59:79:37:8b:
         fa:62:19:ca:90:54:dd:11:41:9f:5e:4d:42:08:c9:6c:44:dd:
         4a:b5:82:f7:ea:3b:75:b7:56:23:4a:32:b7:06:55:b9:4d:63:
         f4:3d:bb:29:a0:2c:7a:f6:4d:7a:29:d1:41:a2:c4:8e:63:71:
         a6:31:98:f1:75:70:f9:1a:48:b3:eb:c8:51:57:ee:5b:24:fe:
         7c:d0:84:82:70:a9:b9:09:ec:2a:ac:df:4e:60:3b:de:b4:b9:
         77:88:0d:93:c9:fd:b6:59:43:db:65:67:d8:d9:f4:e4:bf:87:
         89:e1:88:d2:2e:1f:1b:a6:e1:88:c0:fe:94:40:70:35:f2:9d:
         74:f1:ed:7a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jul 20 21:56:28 2025 by rpki-client