Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/152d5d6b-8e8d-3c06-a6fb-0d89b965015e.roa
File:                     152d5d6b-8e8d-3c06-a6fb-0d89b965015e.roa (raw, json)
Hash identifier:          U+SjQ5iaCmhjVe3GifdH4QiF4FtUXXp+Z16f925qs9Q=
Subject key identifier:   55:00:60:F9:CE:B4:7D:C3:62:61:C0:AC:FC:86:75:53:B4:BE:C2:92
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584E66DA02F9C5F67EEDE3A45000
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/152d5d6b-8e8d-3c06-a6fb-0d89b965015e.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     174
IP address blocks:        50.7.42.0/23 maxlen: 24
                          50.7.52.0/24 maxlen: 24
                          2001:49f0:d0ed::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:02:f9:c5:f6:7e:ed:e3:a4:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=5fb3afa8-d4eb-42c8-a4f0-7fe1da3b73ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ba:fd:fa:5a:bf:74:83:a5:df:fe:8f:9d:a7:
                    79:5b:1e:3a:ba:94:4b:b2:d2:9b:b9:06:52:27:e1:
                    1f:5d:41:73:41:84:ac:f9:7f:d7:b6:5d:5e:e4:81:
                    82:80:f4:ce:bd:1e:e7:59:84:9b:dc:01:1a:e6:30:
                    04:a9:ad:08:79:89:6a:73:80:ba:ff:d3:79:c1:ab:
                    b5:89:07:c9:c3:e4:ac:7f:41:c0:3a:8f:d0:3a:14:
                    28:2f:c6:78:ed:e6:51:f1:93:62:ee:09:16:e1:4f:
                    2f:49:0c:04:c8:80:b9:7a:f4:ca:72:d6:0a:65:76:
                    ee:b5:62:b3:7b:57:ca:a4:30:12:d7:08:2f:21:98:
                    7f:a1:52:c6:b8:cc:e0:da:3d:2a:83:9c:f4:24:31:
                    0a:b0:f0:68:3d:d4:eb:72:c0:12:85:11:cd:42:38:
                    89:d1:ae:56:1f:d3:42:80:8c:ae:4e:86:47:63:a2:
                    86:57:b1:94:91:ad:ef:0d:70:85:89:08:f6:84:65:
                    8b:62:a0:ec:6a:b8:be:82:7b:81:b1:40:4c:6b:d4:
                    84:16:c9:a2:14:1e:75:98:00:ec:c8:2a:9c:24:54:
                    0c:07:53:be:ee:0f:f0:51:2a:b7:b0:1d:cc:ff:66:
                    c2:bb:94:5e:d1:73:80:3a:23:b4:ca:a5:b5:c8:f2:
                    1e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:00:60:F9:CE:B4:7D:C3:62:61:C0:AC:FC:86:75:53:B4:BE:C2:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/152d5d6b-8e8d-3c06-a6fb-0d89b965015e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.42.0/23
                  50.7.52.0/24
                IPv6:
                  2001:49f0:d0ed::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:dd:50:4c:d0:86:14:e3:c7:e7:da:b9:67:90:01:8b:a0:4f:
         7d:db:d7:93:c9:68:d6:6d:51:25:fa:3c:41:3e:5f:63:90:75:
         6c:76:1f:3d:70:98:e2:dd:3a:f7:cf:90:cf:37:7f:3d:e8:df:
         2f:19:c2:ad:1a:69:c9:11:8f:18:aa:e0:44:31:1d:50:9c:32:
         85:29:3d:bf:62:f3:ec:fd:5e:d5:84:89:8a:08:fd:5a:63:e8:
         dc:29:7c:38:ae:e0:8f:a6:d4:03:04:44:da:f5:12:84:07:e3:
         11:d9:95:6f:0b:48:6d:e2:8c:16:af:94:3a:8a:ff:a1:50:c0:
         88:28:c7:04:48:2a:41:b3:47:a6:f1:c4:90:ee:d8:76:5b:91:
         53:67:40:d0:0f:55:02:b5:6b:19:4f:eb:53:7e:92:7c:55:33:
         69:56:8e:ea:0c:85:d0:44:42:76:f2:ca:e7:1a:e7:bf:fd:c6:
         45:50:44:23:65:bb:a9:7e:5a:63:98:b5:25:e4:4c:f6:f0:f6:
         e0:6c:8d:1d:6b:27:22:67:8f:c3:05:f8:b4:06:bb:36:ae:ca:
         7d:f5:8c:b3:f4:7e:7c:cc:c2:8d:67:32:db:ec:81:03:6f:0b:
         66:e5:74:ce:41:6c:04:f0:23:07:3b:3f:3c:3d:15:7d:81:61:
         07:2a:c9:d7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:20:30 2026 by rpki-client