Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/311fa59d-ae91-32d8-8072-25dd815d4d32.roa
File:                     311fa59d-ae91-32d8-8072-25dd815d4d32.roa (raw, json)
Hash identifier:          A8UP4M9bdCKD/QPJ2Pkgg2HWBj56GUq/t/GP9g8qL5w=
Subject key identifier:   52:70:86:01:5D:7D:2A:F7:DB:3A:80:6E:7B:EB:10:B2:65:F0:85:D0
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F432858494039451FFA8CA22843A425C0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/311fa59d-ae91-32d8-8072-25dd815d4d32.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     30058
IP address blocks:        50.7.1.0/24 maxlen: 24
                          50.7.34.0/23 maxlen: 23
                          50.7.57.0/24 maxlen: 24
                          66.90.68.0/23 maxlen: 23
                          66.90.70.0/24 maxlen: 24
                          66.90.84.0/23 maxlen: 23
                          2001:49f0:d0e6::/48 maxlen: 48
                          2001:49f0:d100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:45:1f:fa:8c:a2:28:43:a4:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=31c76ff8-235d-4c64-a4cd-4363205902b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:78:45:23:eb:a9:39:93:9d:97:7c:d6:c7:0d:
                    23:c7:30:22:44:11:5c:8d:fd:de:e2:99:15:a9:51:
                    56:41:25:41:81:09:77:31:44:b6:bf:41:f7:92:6d:
                    fe:71:3d:00:07:14:70:1c:1f:e0:b7:eb:29:ca:84:
                    39:de:a3:bb:f2:a3:2f:84:c5:a3:ba:30:53:f9:44:
                    de:36:f9:0a:dc:7d:a5:dc:28:33:c3:6a:ca:0d:b2:
                    7b:ed:41:85:51:bf:d9:51:1d:e1:81:13:a0:be:7c:
                    7b:a7:ad:33:d2:4e:3a:17:73:e3:a6:e6:27:7b:fc:
                    35:e8:93:1f:bb:11:16:ab:54:08:87:47:e5:9b:8c:
                    64:92:63:71:a7:ab:ed:d5:c2:6b:c0:1f:24:54:e0:
                    4f:a2:f3:57:34:38:60:88:f5:85:b8:77:b3:d9:6d:
                    b4:50:3c:1d:4a:f7:55:01:6b:3c:a1:f4:05:d5:b3:
                    a0:02:15:de:11:23:f3:bc:e3:7d:db:ec:53:17:1d:
                    b8:39:9d:f5:5b:b0:1e:4c:9c:a4:d5:8e:e6:2a:7c:
                    11:f9:80:27:01:ec:5e:a8:a5:38:41:c1:8e:00:98:
                    9c:c4:ef:76:9c:d0:d8:9b:e7:6e:cf:07:5a:1a:fb:
                    fa:2e:79:16:fe:4f:8d:19:47:70:b3:be:6b:53:48:
                    dc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:70:86:01:5D:7D:2A:F7:DB:3A:80:6E:7B:EB:10:B2:65:F0:85:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/311fa59d-ae91-32d8-8072-25dd815d4d32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.1.0/24
                  50.7.34.0/23
                  50.7.57.0/24
                  66.90.68.0-66.90.70.255
                  66.90.84.0/23
                IPv6:
                  2001:49f0:d0e6::/48
                  2001:49f0:d100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:7e:1b:bb:f3:a1:e3:7f:3c:4f:8c:ea:ff:ae:eb:15:09:4f:
         94:3e:a0:fc:34:ce:4b:58:08:84:73:57:4d:90:e9:d3:94:b9:
         25:8b:0e:69:4b:86:bf:09:4e:9a:62:08:35:97:38:4d:f2:ac:
         74:e1:5e:e8:e6:d5:4d:7d:6f:85:82:87:82:fc:cf:5b:a1:f1:
         19:65:de:b8:2b:d9:be:ef:b9:b5:62:b3:e7:d1:66:14:00:74:
         26:1f:1d:28:95:51:e8:bb:c7:01:37:3c:30:78:4e:1d:dd:3b:
         00:50:ab:8b:3a:12:77:8c:36:06:d6:c5:54:e4:50:77:2d:76:
         fa:eb:8b:94:20:1d:b1:2f:ae:31:ae:8d:4c:df:11:9e:1b:87:
         ae:5f:ba:d2:96:67:da:af:de:9d:64:81:fc:f2:83:00:b2:9d:
         f6:98:17:c1:3d:5d:cf:56:81:6d:d6:f7:0e:ab:23:9f:19:20:
         39:c5:39:92:b5:64:8e:8e:32:c4:50:25:8c:f3:fc:91:ec:08:
         4e:ca:59:61:40:9e:b5:08:fc:8b:81:05:bf:3a:af:b4:56:e2:
         bd:af:7c:d1:2e:8f:5d:3c:b8:77:2a:ab:46:a5:8f:fb:1f:a0:
         f4:c7:2f:35:1d:f9:b4:a3:b5:ff:f9:76:0d:22:29:1c:b9:0a:
         d5:04:61:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:28:09 2025 by rpki-client