Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1fb2c3a4-c514-3687-87fe-aa6517e5e3d5.roa
File:                     1fb2c3a4-c514-3687-87fe-aa6517e5e3d5.roa (raw, json)
Hash identifier:          40ZjlkyrShFi9vkrCHJute/pxygsCtQN4sJtqn5E7lg=
Subject key identifier:   AB:BF:4D:3A:56:C9:ED:22:D3:87:42:4C:8E:87:27:63:21:F0:DD:4A
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285848E2D102394D2A2DC13798C660
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1fb2c3a4-c514-3687-87fe-aa6517e5e3d5.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     30058
IP address blocks:        50.7.24.0/23 maxlen: 24
                          50.7.126.0/23 maxlen: 24
                          50.7.140.0/22 maxlen: 24
                          50.7.164.0/22 maxlen: 24
                          50.7.176.0/22 maxlen: 24
                          50.7.186.0/23 maxlen: 24
                          50.7.236.0/23 maxlen: 24
                          50.7.254.0/24 maxlen: 24
                          66.90.86.0/23 maxlen: 24
                          66.90.120.0/24 maxlen: 24
                          198.16.117.0/24 maxlen: 24
                          198.16.118.0/24 maxlen: 24
                          198.16.123.0/24 maxlen: 24
                          198.16.125.0/24 maxlen: 24
                          198.16.126.0/24 maxlen: 24
                          198.16.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:02:39:4d:2a:2d:c1:37:98:c6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=8bc67852-6cc0-459b-b7cf-7445f29aa463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f7:81:f3:c1:ef:3e:c1:ef:7f:50:62:a5:2a:
                    43:87:00:1a:f2:0e:ff:e5:58:68:46:09:9d:9c:8c:
                    2c:28:4a:62:e4:12:f7:49:d4:83:c3:a9:5a:f0:55:
                    ae:93:dd:f4:4d:19:32:d1:b0:fb:65:a0:be:70:ca:
                    f7:d0:60:5a:84:ba:a3:be:07:7e:cb:ea:0c:cb:ba:
                    0a:5c:95:c9:3f:8c:b9:59:76:b9:28:ff:42:16:97:
                    93:75:37:c0:21:d4:0b:cc:70:74:b9:eb:22:f8:2c:
                    75:d9:ac:8c:69:85:71:ed:d9:4e:67:91:27:f2:a4:
                    1d:91:5d:36:92:0c:cb:8b:d2:81:07:aa:60:82:c7:
                    89:f3:ca:6d:0b:6b:e9:ff:63:2b:07:cf:ee:6f:34:
                    2c:d9:6b:5b:12:7d:f7:ec:ca:4c:08:59:46:bb:be:
                    21:78:09:39:01:9d:78:2c:f3:bc:7e:ff:22:25:27:
                    a6:5a:4f:17:1a:a3:85:32:76:d5:5c:80:43:ea:9f:
                    f0:7a:3e:b5:ef:87:77:30:40:fd:69:a9:bc:6f:53:
                    e6:0d:24:36:02:62:5d:ea:b8:4f:94:99:64:ba:d5:
                    59:58:81:30:8f:21:b4:eb:0d:89:d1:e5:6d:28:13:
                    f2:e7:de:5f:0d:eb:d6:83:f3:28:b6:4c:f1:bf:93:
                    f1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:BF:4D:3A:56:C9:ED:22:D3:87:42:4C:8E:87:27:63:21:F0:DD:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1fb2c3a4-c514-3687-87fe-aa6517e5e3d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.24.0/23
                  50.7.126.0/23
                  50.7.140.0/22
                  50.7.164.0/22
                  50.7.176.0/22
                  50.7.186.0/23
                  50.7.236.0/23
                  50.7.254.0/24
                  66.90.86.0/23
                  66.90.120.0/24
                  198.16.117.0-198.16.118.255
                  198.16.123.0/24
                  198.16.125.0-198.16.127.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:7e:3d:33:d9:68:86:1d:cc:ee:79:e2:15:b2:7b:aa:f3:52:
         2d:60:8f:5a:2d:07:19:82:e9:60:3d:df:91:33:53:37:c3:8c:
         cf:a3:44:23:8d:d5:84:29:d1:b1:67:10:d2:3a:8f:60:15:34:
         a5:f6:6a:3a:0d:7c:c5:0e:cf:12:8b:d5:0e:71:3e:04:eb:bc:
         2a:a7:b5:52:34:5e:a3:65:63:8e:e0:a6:35:05:7b:b9:41:5e:
         60:7a:72:11:b5:ae:82:2c:72:bb:9b:1d:9e:20:2e:c9:64:da:
         3d:69:14:fe:2c:27:b3:aa:e2:8c:23:8b:b6:a7:31:e4:13:a7:
         92:64:4a:d5:20:74:c6:93:25:11:35:d6:fb:ff:52:09:d7:10:
         d1:cb:81:3d:b8:10:f3:63:ca:fc:88:6c:6d:49:b4:f4:73:8e:
         7d:5e:a8:a0:48:d6:b6:3e:4e:44:56:9a:75:37:58:38:e8:1e:
         30:ff:b2:73:cf:3a:b7:c3:e3:6a:39:6d:e7:4c:05:1b:29:7b:
         6b:cb:1c:f1:60:23:01:ff:87:1f:42:53:6c:79:5b:de:8b:2d:
         9b:90:9f:05:13:97:98:53:14:51:0a:8a:d9:50:e5:e2:19:b9:
         a4:0e:12:65:f7:65:f3:d9:93:93:43:2a:67:4e:4d:50:65:01:
         41:bf:cb:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 06:32:14 2025 by rpki-client