Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/311fa59d-ae91-32d8-8072-25dd815d4d32.roa
File:                     311fa59d-ae91-32d8-8072-25dd815d4d32.roa (raw, json)
Hash identifier:          wLpXNPmoEss50h01ey3vceHoHuCGKXrzoZFwqP9FYJQ=
Subject key identifier:   FD:42:97:29:2C:69:CE:68:E3:D8:2B:AD:93:68:7B:BE:52:89:F2:5E
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584E815F8D1DBE120E6DCAD3BF40
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/311fa59d-ae91-32d8-8072-25dd815d4d32.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     30058
IP address blocks:        50.7.1.0/24 maxlen: 24
                          50.7.34.0/23 maxlen: 23
                          50.7.57.0/24 maxlen: 24
                          66.90.68.0/23 maxlen: 23
                          66.90.70.0/24 maxlen: 24
                          66.90.84.0/23 maxlen: 23
                          2001:49f0:d0e6::/48 maxlen: 48
                          2001:49f0:d100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:8d:1d:be:12:0e:6d:ca:d3:bf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=b549cad5-5c05-4ce8-916a-5d09c95b4a24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:17:b8:07:5a:fb:b1:db:74:6e:94:a0:a0:85:
                    c8:76:e0:58:ad:1c:72:b0:d0:63:00:ca:dc:7b:0f:
                    52:01:a1:38:7c:47:42:7e:11:fc:05:57:71:b4:86:
                    e8:0d:28:e3:05:97:c8:45:e1:00:5a:b3:6c:3a:7e:
                    45:fd:e0:5e:31:29:95:45:1b:c7:08:74:47:71:2d:
                    8b:9f:c7:b3:bb:fb:28:02:32:04:ef:98:c1:6e:c4:
                    46:c8:1a:97:a7:30:77:05:5e:66:19:9c:6b:21:e2:
                    41:17:d0:2a:11:38:30:7a:36:37:1f:0e:dc:40:1a:
                    80:12:88:58:15:ff:ab:0a:cf:39:00:ea:27:aa:41:
                    26:2f:c2:23:d2:7e:9b:01:2e:56:3c:8a:7a:fd:b5:
                    dc:19:34:0b:47:a2:22:e2:8b:e0:35:0a:5f:a7:d0:
                    9b:5a:93:32:79:7f:9a:68:9c:34:33:c6:d7:3c:9e:
                    e7:31:80:5e:cb:f6:3a:b9:af:da:e3:68:38:28:2b:
                    e3:c9:f0:65:ae:2c:0d:c1:db:dd:b2:11:b8:21:df:
                    ff:e0:01:a9:18:df:98:5f:32:f8:3a:2d:2e:6d:2e:
                    a9:30:c3:41:50:5a:d1:6f:c7:50:61:c9:fc:f2:e2:
                    eb:4e:44:da:17:04:e4:18:36:d5:21:f0:7f:1d:16:
                    75:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:42:97:29:2C:69:CE:68:E3:D8:2B:AD:93:68:7B:BE:52:89:F2:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/311fa59d-ae91-32d8-8072-25dd815d4d32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.1.0/24
                  50.7.34.0/23
                  50.7.57.0/24
                  66.90.68.0-66.90.70.255
                  66.90.84.0/23
                IPv6:
                  2001:49f0:d0e6::/48
                  2001:49f0:d100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:dc:52:2f:38:04:95:a9:62:e7:46:17:0d:43:fa:8e:a5:37:
         5d:da:ce:62:3f:0a:2e:3e:39:a8:a8:68:62:0e:04:f3:47:99:
         bd:12:28:c3:71:ea:22:43:eb:be:89:4e:48:66:e4:d4:f0:81:
         7a:f8:01:1b:22:3c:d9:1e:33:5f:32:fc:ae:87:e6:ab:b8:31:
         17:a8:b0:aa:00:b0:1c:ff:ba:05:95:8c:25:2d:07:00:df:41:
         c9:ef:64:b9:c1:df:29:43:50:98:60:c9:5d:ff:4c:da:e5:80:
         05:a7:a3:86:72:fb:8e:cd:84:b0:ca:ba:0f:73:5b:fb:b9:17:
         72:90:f5:37:c2:df:9c:19:18:ac:d0:94:cd:b6:d2:71:84:17:
         e3:d9:8b:cc:d9:eb:3f:df:8b:4c:17:99:73:d2:7c:95:b1:18:
         78:95:b3:30:f2:0c:83:3a:2c:f9:c0:16:35:8d:86:44:f6:5d:
         4f:43:24:2c:e1:08:03:d4:f9:ea:74:39:34:b8:0c:fe:3a:28:
         11:07:ba:45:74:72:da:14:5f:3e:3a:e8:a8:d0:1c:5c:34:10:
         9d:6c:67:ed:78:65:54:b4:83:78:2e:23:98:77:66:f8:3d:20:
         2f:c5:1c:c5:ec:89:24:88:cc:6b:11:f9:54:cb:0f:c0:08:62:
         09:99:16:23
-----BEGIN CERTIFICATE-----
MIIGfTCCBWWgAwIBAgIUAQ0Mn0MoWE6BX40dvhIObcrTv0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI2MDcxNTA5MDAxM1oXDTI2MTAxMzA5MDAxM1owLzEtMCsGA1UEAxMk
YjU0OWNhZDUtNWMwNS00Y2U4LTkxNmEtNWQwOWM5NWI0YTI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixe4B1r7sdt0bpSgoIXIduBYrRxysNBjAMrc
ew9SAaE4fEdCfhH8BVdxtIboDSjjBZfIReEAWrNsOn5F/eBeMSmVRRvHCHRHcS2L
n8ezu/soAjIE75jBbsRGyBqXpzB3BV5mGZxrIeJBF9AqETgwejY3Hw7cQBqAEohY
Ff+rCs85AOonqkEmL8Ij0n6bAS5WPIp6/bXcGTQLR6Ii4ovgNQpfp9CbWpMyeX+a
aJw0M8bXPJ7nMYBey/Y6ua/a42g4KCvjyfBlriwNwdvdshG4Id//4AGpGN+YXzL4
Oi0ubS6pMMNBUFrRb8dQYcn88uLrTkTaFwTkGDbVIfB/HRZ1oQIDAQABo4IDjzCC
A4swHQYDVR0OBBYEFP1Clyksac5o49grrZNoe75SifJeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMzExZmE1OWQtYWU5MS0z
MmQ4LTgwNzItMjVkZDgxNWQ0ZDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMFkGCCsGAQUFBwEHAQH/BEowSDAsBAIAATAmAwQAMgcBAwQB
MgciAwQAMgc5MAwDBAJCWkQDBABCWkYDBAFCWlQwGAQCAAIwEgMHACABSfDQ5gMH
ACABSfDRADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW
LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G
CSqGSIb3DQEBCwUAA4IBAQBn3FIvOASVqWLnRhcNQ/qOpTdd2s5iPwouPjmoqGhi
DgTzR5m9EijDceoiQ+u+iU5IZuTU8IF6+AEbIjzZHjNfMvyuh+aruDEXqLCqALAc
/7oFlYwlLQcA30HJ72S5wd8pQ1CYYMld/0za5YAFp6OGcvuOzYSwyroPc1v7uRdy
kPU3wt+cGRis0JTNttJxhBfj2YvM2es/34tMF5lz0nyVsRh4lbMw8gyDOiz5wBY1
jYZE9l1PQyQs4QgD1PnqdDk0uAz+OigRB7pFdHLaFF8+Ouio0BxcNBCdbGfteGVU
tIN4LiOYd2b4PSAvxRzF7IkkiMxrEflUyw/ACGIJmRYj
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:56:11 2026 by rpki-client