Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/175b44dd-3faf-3494-80ee-53ab27e063f5.roa
File:                     175b44dd-3faf-3494-80ee-53ab27e063f5.roa (raw, json)
Hash identifier:          XB12D+XKQ9noC4gCmdaHgdADvsTb0s2v5cD3uiBz0Ck=
Subject key identifier:   10:E1:C7:D8:20:37:53:BB:36:F9:39:45:DF:75:9A:75:7B:1E:CF:DE
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F432858475B50D353AE62C545CE548F00
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/175b44dd-3faf-3494-80ee-53ab27e063f5.roa
Signing time:             Fri 27 Sep 2024 20:21:22 +0000
ROA not before:           Fri 27 Sep 2024 20:21:22 +0000
ROA not after:            Thu 26 Dec 2024 21:21:22 +0000
asID:                     30058
IP address blocks:        50.7.112.0/24 maxlen: 24
                          50.7.114.0/24 maxlen: 24
                          50.7.152.0/22 maxlen: 22
                          50.7.198.0/23 maxlen: 23
                          50.7.202.0/23 maxlen: 23
                          50.7.212.0/23 maxlen: 24
                          50.7.224.0/23 maxlen: 23
                          50.7.226.0/23 maxlen: 23
                          66.90.119.0/24 maxlen: 24
                          198.16.98.0/24 maxlen: 24
                          198.16.102.0/23 maxlen: 23
                          198.16.104.0/23 maxlen: 23
                          198.16.122.0/24 maxlen: 24
                          2001:49f0:d007::/48 maxlen: 48
                          2001:49f0:d0a3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5b:50:d3:53:ae:62:c5:45:ce:54:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Sep 27 20:21:22 2024 GMT
            Not After : Dec 26 21:21:22 2024 GMT
        Subject: CN=9384b1c0-252c-4511-a739-db880cc38a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b1:ba:dd:f5:9a:79:6c:9a:ae:fc:06:d8:26:
                    2c:2e:b7:3e:57:33:09:c7:1a:0b:1e:26:36:5b:15:
                    97:0f:65:d1:6a:4f:4e:b2:22:c7:44:c4:eb:0a:bb:
                    5e:46:f3:56:5c:35:1d:6d:37:d8:9a:a6:3a:5d:e7:
                    a5:b9:a1:17:f0:c8:2a:91:99:7a:11:21:41:3d:cb:
                    dc:b2:28:86:a2:c2:1e:33:3f:4c:7b:43:d9:3c:38:
                    d0:00:ea:35:3f:e6:19:34:96:d1:1e:d2:f6:16:76:
                    94:7a:ba:d4:06:42:8a:b3:45:12:ac:c6:34:0e:e3:
                    e8:10:5a:a5:61:17:a1:46:20:4a:3d:00:c6:9c:bc:
                    79:9c:cb:65:e2:1f:bb:b6:73:c9:ef:6b:a4:4f:be:
                    eb:aa:b5:a8:85:92:79:d7:37:ab:a1:89:7b:82:c7:
                    04:7c:39:80:1f:88:45:e0:be:cc:d5:ec:68:13:99:
                    90:c9:c2:06:34:88:bf:86:43:f1:7c:61:cf:b5:20:
                    c5:2a:0e:e5:a3:59:04:ba:fc:8f:72:9b:d2:28:7a:
                    5d:54:63:00:92:bd:2f:0b:fe:a5:74:25:8f:0b:6a:
                    e8:9a:9a:f0:68:1a:01:33:e9:e3:64:f6:ca:24:6f:
                    e6:75:fa:1e:f2:16:9c:e8:73:07:b2:ec:d8:08:1a:
                    f4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E1:C7:D8:20:37:53:BB:36:F9:39:45:DF:75:9A:75:7B:1E:CF:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/175b44dd-3faf-3494-80ee-53ab27e063f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.112.0/24
                  50.7.114.0/24
                  50.7.152.0/22
                  50.7.198.0/23
                  50.7.202.0/23
                  50.7.212.0/23
                  50.7.224.0/22
                  66.90.119.0/24
                  198.16.98.0/24
                  198.16.102.0-198.16.105.255
                  198.16.122.0/24
                IPv6:
                  2001:49f0:d007::/48
                  2001:49f0:d0a3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:3d:86:4b:cb:2a:7c:4a:92:a9:bf:82:93:64:7a:35:fd:1d:
         dd:09:2c:bb:ae:15:60:74:25:97:7e:d9:80:fa:09:e0:0b:3e:
         a5:2a:a6:73:43:ad:d8:bd:3c:de:41:9b:39:70:18:8a:94:c4:
         62:f1:a6:a7:06:6b:66:eb:bc:72:2b:c1:ed:b2:cc:df:ec:69:
         12:7a:80:e7:af:81:26:93:8c:1a:24:c9:fb:ff:e7:50:a5:c9:
         e5:88:49:c5:21:ed:59:77:57:af:c3:d0:7a:44:bb:5c:cd:5b:
         95:d4:f8:64:f1:d8:05:20:35:2d:d4:e5:68:51:e1:cf:ed:90:
         c7:57:b5:f3:1c:5e:20:e5:34:99:ba:c3:c7:c3:cd:76:e0:21:
         bc:2b:1e:0b:f0:d3:f4:c4:81:1b:ae:5a:66:8b:4b:a2:7c:a9:
         9b:f5:f1:c0:02:ba:e9:c9:d2:b0:89:ab:63:51:3a:06:bd:3a:
         9e:a4:f4:a8:36:fe:f7:a9:36:c1:eb:0b:e0:3f:b0:ec:85:d2:
         ec:71:73:69:70:bf:b1:2f:0b:42:a6:64:17:10:d4:eb:1f:88:
         5b:22:5d:74:97:6d:b4:33:c0:17:18:52:91:27:6c:1f:a3:34:
         10:ac:a6:8a:35:06:8e:d7:b4:da:07:fc:2c:99:17:e9:b4:4b:
         13:d8:86:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:30 2024 by rpki-client on console-fra.rpki-client.org