Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/30144a6a-33a0-3d30-b241-6d3a8c4e5edc.roa
File:                     30144a6a-33a0-3d30-b241-6d3a8c4e5edc.roa (raw, json)
Hash identifier:          LbzyS6igJL8ImfZ1RRKk9/0cgj7R2biw/gfptWYn7eY=
Subject key identifier:   F0:3C:52:46:00:99:E7:F5:8C:79:2C:EC:E4:45:90:5A:D7:F0:13:67
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584981D44B6492EA394F3510C440
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/30144a6a-33a0-3d30-b241-6d3a8c4e5edc.roa
Signing time:             Sun 13 Apr 2025 01:00:44 +0000
ROA not before:           Sun 13 Apr 2025 01:00:44 +0000
ROA not after:            Sat 12 Jul 2025 01:00:44 +0000
asID:                     174
IP address blocks:        50.7.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:d4:4b:64:92:ea:39:4f:35:10:c4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Apr 13 01:00:44 2025 GMT
            Not After : Jul 12 01:00:44 2025 GMT
        Subject: CN=bd645add-8e94-42e6-9056-c984e828486d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:df:0f:08:e0:3b:a8:08:f8:b8:cd:f4:8d:6f:
                    6a:71:4c:15:ed:6b:87:53:cf:40:19:52:de:14:34:
                    3b:af:cb:49:a2:44:95:82:da:36:18:a6:79:ef:a0:
                    10:42:79:e0:4c:f1:30:25:32:86:68:d1:1e:27:5a:
                    f1:a7:db:b5:0e:53:0a:ab:88:66:6b:b4:63:09:5e:
                    8e:22:26:74:a8:19:de:e7:99:88:95:5b:27:2b:3d:
                    b7:53:a6:73:d3:ca:72:35:6f:c4:b6:bc:cf:b4:ef:
                    1e:5b:79:50:f0:97:66:4c:a4:93:77:3d:bf:a0:eb:
                    31:d4:95:7f:b4:64:c1:a3:88:c9:af:7a:9b:42:3d:
                    fc:a1:57:47:e9:92:ea:01:fa:42:d5:c0:b3:60:8b:
                    78:37:d0:fa:58:18:c0:62:58:68:37:50:e9:0f:61:
                    3a:81:4f:02:de:08:9a:dc:ad:1f:06:47:5b:d5:d6:
                    dc:a5:4b:dd:2d:2f:61:3d:de:52:3d:6c:f1:a1:dc:
                    b8:4e:05:24:ab:6d:ea:af:18:fe:d1:7f:5e:72:02:
                    2c:9d:74:2c:23:92:2a:58:85:9c:0f:52:fb:bd:45:
                    4b:7d:48:6e:8a:09:75:1d:c2:cf:de:fa:f7:7f:57:
                    cc:98:4e:eb:09:4f:a2:f9:18:df:df:3e:01:05:db:
                    c4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:3C:52:46:00:99:E7:F5:8C:79:2C:EC:E4:45:90:5A:D7:F0:13:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/30144a6a-33a0-3d30-b241-6d3a8c4e5edc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:4d:6a:3b:c8:6d:7e:59:33:b5:f5:52:05:e1:a0:b4:42:1c:
         cf:65:dc:34:4e:97:93:63:47:16:cd:a5:fe:99:f4:3d:e3:6a:
         ca:cd:02:46:99:7b:80:14:2d:88:79:35:41:d2:c3:13:67:a6:
         d9:b6:52:ff:08:fa:3c:96:3a:21:1b:1d:ce:62:5f:dc:84:4f:
         86:41:f1:44:1a:45:9e:52:48:8e:0c:d3:e3:ea:95:28:2b:86:
         00:8b:fc:bb:97:ba:15:f1:a2:9c:9c:03:74:5d:d6:58:d7:5a:
         ee:66:3b:21:43:51:f5:96:20:40:8a:32:7b:44:5e:6a:68:cf:
         4a:85:fd:55:bb:b9:75:64:98:da:2c:42:bf:6c:93:4d:28:fc:
         82:ab:98:d3:6a:af:8d:64:a5:b7:4f:8a:f9:69:2f:4a:ec:6c:
         23:84:51:1a:77:4a:60:fa:ea:45:47:67:65:02:c6:41:ad:df:
         03:87:b4:08:91:cf:47:7e:22:42:c9:2f:8d:1a:ed:b9:12:10:
         76:0e:62:13:15:86:07:f8:ad:bf:b2:28:7b:76:8a:09:e7:31:
         49:48:79:5c:ac:b0:bd:c8:7c:a0:4d:93:6e:31:aa:61:f5:5a:
         ef:e9:a4:02:e6:f6:62:70:69:67:6b:79:a6:e5:49:a9:91:a9:
         bb:e6:bc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 06:30:09 2025 by rpki-client