Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/dfce8ae6-a933-3a62-b381-f20fc57d87ff.roa
File:                     dfce8ae6-a933-3a62-b381-f20fc57d87ff.roa (raw, json)
Hash identifier:          NA8xJi88SjNTGRF3M7p5o4b8838ZzEXwF/WaQJi5WN4=
Subject key identifier:   06:48:21:8C:21:08:61:E6:B5:6F:90:8F:5C:27:03:A5:C1:54:0B:31
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F4328584A6C55CE368FA01D1FDBD280C0
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/dfce8ae6-a933-3a62-b381-f20fc57d87ff.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     396982
IP address blocks:        50.87.16.0/21 maxlen: 21
                          50.87.136.0/21 maxlen: 21
                          50.87.144.0/21 maxlen: 21
                          50.87.168.0/21 maxlen: 21
                          50.87.176.0/21 maxlen: 21
                          50.87.184.0/21 maxlen: 21
                          50.87.192.0/21 maxlen: 21
                          50.87.216.0/21 maxlen: 21
                          50.87.224.0/21 maxlen: 21
                          50.87.232.0/21 maxlen: 21
                          50.87.248.0/24 maxlen: 24
                          50.87.249.0/24 maxlen: 24
                          50.87.253.0/24 maxlen: 24
                          66.147.242.0/24 maxlen: 24
                          66.147.244.0/22 maxlen: 22
                          66.147.248.0/22 maxlen: 22
                          67.20.64.0/22 maxlen: 22
                          67.20.68.0/22 maxlen: 22
                          67.20.72.0/22 maxlen: 22
                          67.20.80.0/22 maxlen: 22
                          67.20.88.0/22 maxlen: 22
                          67.20.92.0/22 maxlen: 22
                          67.20.104.0/21 maxlen: 21
                          67.20.120.0/22 maxlen: 22
                          67.20.124.0/23 maxlen: 23
                          67.222.36.0/22 maxlen: 22
                          67.222.40.0/22 maxlen: 22
                          67.222.44.0/22 maxlen: 22
                          67.222.52.0/22 maxlen: 22
                          67.222.60.0/23 maxlen: 23
                          69.89.16.0/20 maxlen: 20
                          69.195.68.0/22 maxlen: 22
                          69.195.72.0/21 maxlen: 21
                          69.195.88.0/21 maxlen: 21
                          69.195.104.0/21 maxlen: 21
                          69.195.120.0/22 maxlen: 22
                          69.195.124.0/24 maxlen: 24
                          70.40.194.0/23 maxlen: 23
                          70.40.196.0/22 maxlen: 22
                          70.40.200.0/21 maxlen: 21
                          70.40.216.0/21 maxlen: 21
                          74.220.192.0/23 maxlen: 23
                          74.220.194.0/24 maxlen: 24
                          74.220.208.0/22 maxlen: 22
                          74.220.212.0/23 maxlen: 23
                          74.220.216.0/22 maxlen: 22
                          162.144.0.0/22 maxlen: 22
                          162.144.4.0/22 maxlen: 22
                          162.144.12.0/22 maxlen: 22
                          162.144.184.0/22 maxlen: 22
                          162.241.195.0/24 maxlen: 24
                          173.254.0.0/22 maxlen: 22
                          173.254.8.0/21 maxlen: 21
                          173.254.16.0/21 maxlen: 21
                          173.254.32.0/21 maxlen: 21
                          173.254.64.0/21 maxlen: 21
                          173.254.88.0/21 maxlen: 21
                          173.254.104.0/21 maxlen: 21
                          198.57.148.0/22 maxlen: 22
                          198.57.240.0/22 maxlen: 22
                          198.57.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:ce:36:8f:a0:1d:1f:db:d2:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=0c430818-1b37-4b81-9155-37b082a3b2b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7f:0e:58:55:19:87:d1:2a:c9:20:c0:36:50:
                    d4:58:f7:cd:e3:4a:d8:16:d0:fb:af:45:8f:ad:15:
                    b4:7a:fd:d5:28:99:16:a9:b5:22:59:ea:39:6e:55:
                    b2:36:21:c9:ed:2b:92:dc:e1:83:de:51:11:fb:d2:
                    c5:a7:87:e2:9a:e7:50:62:32:27:02:1d:a0:57:61:
                    4b:b2:5f:a2:60:13:8d:46:3d:58:19:82:c7:79:78:
                    8a:57:b4:29:6a:ce:ac:8e:2e:33:b9:60:f6:79:14:
                    27:fc:eb:e2:fa:1f:60:e9:40:3c:9c:a7:4c:65:8b:
                    0a:fd:9b:7f:02:63:19:c4:72:0d:c1:ee:05:44:d2:
                    df:bd:c6:db:65:5a:f1:6c:65:54:e6:78:aa:6f:26:
                    ff:18:84:b2:e8:4a:72:a6:d5:24:c8:10:8f:b2:2a:
                    19:9e:9b:b6:ce:0e:1a:35:74:36:c7:31:a7:8b:5f:
                    3c:93:40:f3:f3:28:33:2c:3f:dc:10:fd:42:c5:0d:
                    78:cf:49:5d:12:d8:f0:71:39:91:c5:c3:57:51:05:
                    bf:af:5b:ce:63:62:46:9b:8f:9b:45:16:bb:60:73:
                    e1:33:98:0a:f9:dd:15:96:25:81:fb:6a:2f:4f:b8:
                    57:a9:c3:17:ec:0d:4f:7d:9f:f8:29:8c:1f:2b:4b:
                    e0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:48:21:8C:21:08:61:E6:B5:6F:90:8F:5C:27:03:A5:C1:54:0B:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/dfce8ae6-a933-3a62-b381-f20fc57d87ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.87.16.0/21
                  50.87.136.0-50.87.151.255
                  50.87.168.0-50.87.199.255
                  50.87.216.0-50.87.239.255
                  50.87.248.0/23
                  50.87.253.0/24
                  66.147.242.0/24
                  66.147.244.0-66.147.251.255
                  67.20.64.0-67.20.75.255
                  67.20.80.0/22
                  67.20.88.0/21
                  67.20.104.0/21
                  67.20.120.0-67.20.125.255
                  67.222.36.0-67.222.47.255
                  67.222.52.0/22
                  67.222.60.0/23
                  69.89.16.0/20
                  69.195.68.0-69.195.79.255
                  69.195.88.0/21
                  69.195.104.0/21
                  69.195.120.0-69.195.124.255
                  70.40.194.0-70.40.207.255
                  70.40.216.0/21
                  74.220.192.0-74.220.194.255
                  74.220.208.0-74.220.213.255
                  74.220.216.0/22
                  162.144.0.0/21
                  162.144.12.0/22
                  162.144.184.0/22
                  162.241.195.0/24
                  173.254.0.0/22
                  173.254.8.0-173.254.23.255
                  173.254.32.0/21
                  173.254.64.0/21
                  173.254.88.0/21
                  173.254.104.0/21
                  198.57.148.0/22
                  198.57.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:58:9a:ee:a3:a7:df:09:f2:35:3e:72:36:d7:00:1f:4c:af:
         c3:1e:aa:9e:4a:fb:3e:a7:0e:4c:07:c1:e3:07:d0:f1:32:0d:
         d4:a0:5a:cc:44:d2:79:d3:87:df:bd:97:7d:24:4a:70:8b:5f:
         6f:ca:de:6c:00:53:c9:b9:26:05:c2:30:87:ed:36:cc:79:38:
         aa:15:c3:15:28:64:cb:4e:92:a3:26:3d:6c:96:36:c5:29:29:
         a4:cb:ba:b2:53:4e:74:0a:f5:79:95:dc:4c:db:89:2e:60:9f:
         64:62:13:03:20:42:cf:4f:23:f5:1f:9a:0c:74:b3:52:6a:07:
         8b:54:9b:dd:a1:b1:bb:44:57:b0:de:53:a9:a0:ed:88:33:17:
         13:f9:ab:2c:6c:28:7a:ae:66:76:3e:25:e4:b8:a1:71:06:76:
         e5:56:f7:7f:fa:bd:eb:91:75:27:05:44:4a:6a:e6:3b:b2:e2:
         e7:ce:14:9c:02:56:3d:21:ef:87:bc:14:ea:f0:ed:76:37:ad:
         dd:49:cb:7f:7c:82:98:7c:30:5b:97:a9:27:2d:a9:eb:bf:f2:
         e9:66:95:23:33:82:6e:81:f5:49:ac:2d:ed:fb:75:e6:4c:d0:
         bd:eb:b4:fa:5e:72:1d:7b:78:86:35:b9:5c:cc:ac:2d:c3:fa:
         27:46:b3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 10:00:22 2025 by rpki-client