Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/35a91ef9-1443-345d-b56b-64a39a83ea5e.roa
File:                     35a91ef9-1443-345d-b56b-64a39a83ea5e.roa (raw, json)
Hash identifier:          xFn2We1H6M7PGi7gyIiS6f/7YqFO1ehn1rYfAM6Cz1Q=
Subject key identifier:   34:E9:AD:56:C1:04:C9:95:19:0A:A2:21:3D:B9:D4:86:88:CE:05:7D
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285849DB2A2BC5B3152ABD6FB35180
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/35a91ef9-1443-345d-b56b-64a39a83ea5e.roa
Signing time:             Thu 15 May 2025 01:00:47 +0000
ROA not before:           Thu 15 May 2025 01:00:47 +0000
ROA not after:            Wed 13 Aug 2025 01:00:47 +0000
asID:                     174
IP address blocks:        50.7.46.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:db:2a:2b:c5:b3:15:2a:bd:6f:b3:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: May 15 01:00:47 2025 GMT
            Not After : Aug 13 01:00:47 2025 GMT
        Subject: CN=5a4f50c3-f200-4fe5-a665-a8967d46baa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e6:29:0a:cf:41:ff:06:fd:e4:07:c7:78:0a:
                    af:c4:e9:37:6a:d8:69:44:e1:7a:dc:9f:6f:59:bd:
                    9c:36:f2:80:ae:ed:eb:b8:0a:90:24:61:ea:48:b5:
                    e7:d3:02:7b:28:b8:4d:31:ee:d1:8c:79:5b:86:da:
                    05:ea:a7:6c:48:e0:4d:67:a8:31:87:d8:75:6a:ed:
                    9e:72:28:6e:1b:69:7e:ae:16:f7:73:d1:c1:1b:46:
                    ab:e6:94:6a:4d:33:e6:12:c6:29:60:3c:76:8d:12:
                    ae:f6:a3:06:b0:4a:5e:fb:3e:d3:1e:c4:9c:6c:47:
                    af:5d:9f:df:5f:3b:fa:37:be:25:33:38:d7:0a:4a:
                    5a:65:2a:1c:92:19:80:80:78:39:8d:cc:55:37:bb:
                    76:78:37:85:0d:67:1a:1a:59:53:d6:b3:50:77:75:
                    77:2d:80:cd:ef:38:5b:52:f6:9f:38:9f:08:c2:26:
                    6a:0e:05:b7:53:34:8f:98:d1:36:de:74:65:ae:9e:
                    71:5d:8d:7b:e6:94:5a:35:80:ee:c0:de:b0:5a:ce:
                    eb:4f:50:6c:45:80:bd:33:23:fa:7c:7c:d6:c4:9c:
                    25:0e:de:83:e4:cf:15:e7:8e:be:be:41:67:55:88:
                    f6:01:d4:2b:bc:31:9b:8c:bb:18:4d:e6:2f:99:a4:
                    99:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E9:AD:56:C1:04:C9:95:19:0A:A2:21:3D:B9:D4:86:88:CE:05:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/35a91ef9-1443-345d-b56b-64a39a83ea5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:4e:a5:32:0c:55:d3:30:88:75:8d:a8:dc:d9:eb:9a:ef:78:
         ac:f4:c4:8d:f6:f0:70:e7:54:34:df:8a:3c:f4:9b:fa:11:ce:
         1d:51:88:93:22:75:85:32:4b:9e:1b:91:57:6f:c2:43:b5:a2:
         b6:89:a4:61:83:b6:00:58:97:58:35:88:a7:95:d8:c1:1b:d2:
         da:96:fc:d1:a1:75:4a:f1:49:3f:20:97:62:be:b5:cd:68:a6:
         26:b1:3f:80:35:80:c9:b2:2f:7e:18:3e:69:68:be:99:4a:fc:
         5c:b5:ac:c5:cf:3d:e2:a9:4b:c4:09:e5:11:1c:7b:63:7a:1f:
         4c:0f:b3:f9:ce:1f:08:03:53:68:68:6c:d9:82:25:96:48:a5:
         88:86:c2:e6:29:be:2f:24:cd:16:3f:4f:e1:c1:12:0e:59:98:
         19:a2:ef:51:97:cd:40:56:69:32:09:43:9e:b1:4d:08:71:a4:
         19:e0:d1:59:ce:6f:55:e6:00:22:3d:4b:39:b8:5f:36:9b:aa:
         ed:c7:76:96:91:dd:99:4d:53:9c:ed:75:bb:63:92:7f:48:c3:
         ba:f8:15:c4:bf:a4:7d:4d:9f:ce:e0:f3:20:18:eb:ab:51:77:
         3f:7b:c2:81:9d:11:98:d1:6e:e9:67:ba:4e:f6:fd:e6:64:ba:
         df:69:66:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 11:22:51 2025 by rpki-client