Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/30144a6a-33a0-3d30-b241-6d3a8c4e5edc.roa
File:                     30144a6a-33a0-3d30-b241-6d3a8c4e5edc.roa (raw, json)
Hash identifier:          xX6OgbH4LG7PIzlFNme8lYhkkiEkQ5zypVSs/d/Zdxc=
Subject key identifier:   E6:93:13:5B:FE:D4:8A:B3:3F:11:C6:E1:BA:F5:49:FF:E4:88:05:9C
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584A612B1DE6D085D0F46439AD20
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/30144a6a-33a0-3d30-b241-6d3a8c4e5edc.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     174
IP address blocks:        50.7.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:1d:e6:d0:85:d0:f4:64:39:ad:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=24ded6c3-a31e-4734-bd5e-d92d07dbcb14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8e:d5:6a:75:3b:0b:05:35:40:1c:30:8b:45:
                    bf:61:a2:35:54:0f:71:17:00:3a:0f:68:32:83:d1:
                    e1:a2:c9:04:27:a1:71:3e:9e:82:81:6b:59:9f:d4:
                    37:bc:d0:9e:f2:fc:84:e7:5d:07:e3:46:8d:eb:1c:
                    b5:eb:cb:42:2c:8a:51:4f:fa:aa:1f:64:91:20:3e:
                    4c:6d:14:c3:e1:44:67:42:12:8c:2f:7c:61:2d:24:
                    4c:8e:f8:4d:84:02:bb:8a:99:b6:18:f2:46:c8:a6:
                    1c:14:4c:97:b2:e0:43:a4:b7:5d:b3:fe:d6:72:34:
                    74:13:6e:9b:42:e8:f8:a8:eb:bb:8a:52:db:a5:fa:
                    8c:9e:71:8e:07:de:b1:e3:f5:8f:e9:11:29:aa:cd:
                    55:58:56:1f:44:4d:eb:f8:85:0a:a7:3a:94:59:17:
                    af:09:2c:72:be:0d:2f:95:35:cb:08:e8:22:e6:f2:
                    51:7c:ab:8c:19:1e:d6:58:0d:68:c9:10:79:97:1b:
                    31:71:2e:28:cb:5a:69:31:8b:9d:d7:6d:d7:5a:2d:
                    bf:b3:d6:c1:cb:57:5b:b8:c7:60:d6:3a:e1:cb:75:
                    a2:f9:80:14:67:7f:27:d5:af:74:d6:61:b0:7b:32:
                    67:0a:54:e7:34:4d:a1:55:23:77:0f:af:80:ae:11:
                    e3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:93:13:5B:FE:D4:8A:B3:3F:11:C6:E1:BA:F5:49:FF:E4:88:05:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/30144a6a-33a0-3d30-b241-6d3a8c4e5edc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:06:37:57:11:86:71:b7:c7:11:12:27:c6:01:9d:5d:98:5d:
         6c:d9:9a:4e:68:54:d6:f9:55:7d:66:2a:c2:22:e3:d1:5f:52:
         ae:f0:e7:8f:02:3a:1a:a9:b8:03:f6:56:c1:24:fd:3f:44:9a:
         c0:20:bb:d5:b4:cf:4b:75:c1:c7:38:17:d8:db:f9:47:7d:ca:
         07:85:15:bf:3f:2c:82:97:c6:40:1f:66:f2:b3:54:cc:8a:39:
         20:1a:80:9a:3f:1c:08:ec:da:0c:d2:5d:bd:dd:c0:22:e2:6f:
         b4:8b:c7:38:64:32:14:9f:55:f3:34:81:bd:33:86:51:a8:1d:
         bf:ea:f2:32:91:1b:79:37:36:1b:41:05:9f:f4:2e:88:88:0d:
         21:ea:e5:f2:cc:22:5d:26:bd:34:58:38:c6:55:7f:f3:51:8c:
         da:60:54:93:a8:dd:cc:9b:1e:c1:f0:77:3c:83:1f:43:39:f1:
         27:69:a9:a6:c6:a0:aa:55:f7:e7:93:94:b1:e4:44:4f:19:dc:
         1e:b4:94:df:73:d6:87:68:ae:91:da:87:a6:c9:1a:5c:b1:81:
         d1:83:1f:ec:a8:4f:da:2f:c7:b6:3b:9d:ee:d7:67:1b:1a:62:
         49:af:e1:ff:0d:66:1b:bb:38:b9:62:3f:e2:7a:aa:e2:13:36:
         26:27:c9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 06:48:58 2025 by rpki-client