Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/ed45778c-e235-313e-8396-ca48cd4b5f7e.roa
File:                     ed45778c-e235-313e-8396-ca48cd4b5f7e.roa (raw, json)
Hash identifier:          hpJ2kqO1EbaRJ7bRhfRfdaeHRayXPvmSe34loP+qk/U=
Subject key identifier:   B4:96:5D:E4:41:5B:A7:F1:F9:39:01:83:C3:D8:87:70:74:95:4C:FB
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584A77808DF2F7BC420116D8A9E0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/ed45778c-e235-313e-8396-ca48cd4b5f7e.roa
Signing time:             Thu 10 Jul 2025 01:00:51 +0000
ROA not before:           Thu 10 Jul 2025 01:00:51 +0000
ROA not after:            Wed 08 Oct 2025 01:00:51 +0000
asID:                     30058
IP address blocks:        50.7.120.0/22 maxlen: 22
                          67.159.6.0/23 maxlen: 23
                          2001:49f0:d01b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:77:80:8d:f2:f7:bc:42:01:16:d8:a9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jul 10 01:00:51 2025 GMT
            Not After : Oct  8 01:00:51 2025 GMT
        Subject: CN=676ff113-336c-4ce1-aec2-4d3da726854a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c8:9b:c9:7c:0a:f2:32:8e:6a:82:00:f2:b4:
                    76:86:53:a3:32:b4:f8:0f:dd:44:d5:da:69:f5:a0:
                    d5:b6:58:ff:73:ff:48:39:39:2f:c8:b0:0c:28:2f:
                    e1:24:a0:39:d4:a2:06:63:b7:8a:00:e6:5e:42:f5:
                    0c:9e:d5:42:0b:14:0c:ea:bf:d3:7f:25:d8:4c:63:
                    a1:93:80:e5:76:b2:18:16:9c:47:6a:3f:d1:92:91:
                    c8:f7:e8:4d:a8:3f:5c:1a:00:9c:94:e4:ce:96:72:
                    0f:69:32:8c:6f:2b:27:54:34:34:d2:cb:57:ff:73:
                    b7:78:13:1f:72:64:4e:73:ac:b5:6d:73:bd:18:93:
                    b4:ef:0a:e7:db:f6:2d:66:6a:e6:a6:5d:1c:70:6d:
                    92:88:d6:8f:31:12:c9:f4:16:13:3b:16:6f:bc:49:
                    bd:4d:99:d1:6c:69:ab:69:b0:8f:73:7d:a3:f2:5c:
                    2f:82:f1:10:77:55:2a:fb:34:ed:0f:fe:11:99:b1:
                    a3:6a:24:0a:b6:e5:2a:37:c8:e9:7b:27:62:2d:32:
                    d2:47:32:b9:be:16:2f:9d:18:3f:40:63:85:3d:c9:
                    86:8f:a7:91:42:81:a8:cf:ef:ab:b1:ff:99:58:71:
                    44:59:80:61:3e:ca:1b:f7:2b:8e:14:ec:1e:22:52:
                    03:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:96:5D:E4:41:5B:A7:F1:F9:39:01:83:C3:D8:87:70:74:95:4C:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/ed45778c-e235-313e-8396-ca48cd4b5f7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.120.0/22
                  67.159.6.0/23
                IPv6:
                  2001:49f0:d01b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:80:03:20:a4:a8:10:88:92:fb:1e:95:71:02:7f:bf:6d:d0:
         84:af:0b:8c:34:ac:4e:a5:6b:13:f9:78:4a:09:0d:92:36:c6:
         51:86:e0:a6:66:cb:a6:be:72:9f:4d:7b:3a:13:e8:f5:4f:6e:
         e6:fb:75:fe:a7:b1:1d:6a:ff:b6:27:16:3b:20:d9:33:24:30:
         28:33:c3:73:ad:af:16:e4:af:9c:c5:9a:1c:be:bc:69:0e:3e:
         b4:cd:d7:27:c8:1e:c1:78:f5:f6:6c:ff:b7:86:e9:85:8f:9a:
         cc:ff:4e:44:b7:b5:6f:f2:90:82:fa:c4:e3:82:42:9a:33:43:
         d7:99:f8:51:82:31:15:dd:84:0c:14:1d:3f:fc:e7:10:cf:df:
         87:9d:9e:10:25:6a:fa:91:5a:f8:78:8f:80:a0:f3:d5:b7:e4:
         56:ea:ce:96:7d:ff:c4:8d:f7:80:83:f2:20:26:63:c2:f6:ab:
         17:e5:bc:bf:54:8f:d0:94:ed:f8:a4:9e:97:d6:a1:ee:88:b0:
         17:5c:11:64:36:76:4f:24:65:b4:75:8a:be:57:9c:55:45:05:
         46:21:b8:73:58:28:c7:40:e4:4e:5e:bc:be:b7:bf:10:6a:02:
         f1:a1:a3:36:58:63:07:39:f2:69:3a:6f:7c:e6:fd:bd:34:7b:
         4a:10:42:52
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jul 21 02:08:12 2025 by rpki-client