Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/35a91ef9-1443-345d-b56b-64a39a83ea5e.roa
File:                     35a91ef9-1443-345d-b56b-64a39a83ea5e.roa (raw, json)
Hash identifier:          v9CqbIDpgTMMnUkjjrtRAjFwcUc2EQwpiUlMDH7pu6E=
Subject key identifier:   DB:89:94:03:7C:AC:8C:E1:A2:D8:78:14:CB:7E:EF:E0:75:54:26:95
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285848FBF12E8D030D7D8481F95780
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/35a91ef9-1443-345d-b56b-64a39a83ea5e.roa
Signing time:             Mon 24 Feb 2025 02:00:38 +0000
ROA not before:           Mon 24 Feb 2025 02:00:38 +0000
ROA not after:            Sun 25 May 2025 01:00:38 +0000
asID:                     174
IP address blocks:        50.7.46.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fb:f1:2e:8d:03:0d:7d:84:81:f9:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Feb 24 02:00:38 2025 GMT
            Not After : May 25 01:00:38 2025 GMT
        Subject: CN=f60d2da1-d9c9-4298-971d-9d36e703b33a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4e:fa:6e:aa:b7:7c:3f:08:c4:c7:75:a4:0a:
                    f1:44:f2:ea:8a:85:f3:e3:d4:6c:c7:a8:d8:8e:59:
                    83:21:9e:42:a1:1c:b3:d9:c9:8c:3c:8d:4c:16:e9:
                    e9:66:ca:8a:bc:01:75:83:1f:19:a2:05:2b:0b:fe:
                    f3:55:1e:a5:d6:4c:c6:81:3e:86:4c:0c:75:a7:ea:
                    f0:08:48:c8:8a:84:2c:c4:a4:78:61:a4:81:b4:3f:
                    84:ef:78:f2:84:91:de:07:5e:11:c1:c1:80:a9:6d:
                    ce:3a:79:d4:d8:ff:31:2e:af:17:8b:c6:8c:bc:3d:
                    5f:1a:a5:10:8e:5d:81:28:8c:a7:89:70:80:90:c3:
                    a2:56:e8:22:c3:f7:69:7c:bb:f2:1d:47:0b:c4:d6:
                    e6:68:02:78:09:34:48:73:f8:40:89:3a:3f:ca:0f:
                    dc:2a:e8:e6:68:18:ef:71:0c:2a:22:12:cd:89:34:
                    de:a8:f6:97:a2:49:b5:6f:95:e6:ba:7b:b8:9b:e2:
                    25:18:f7:33:15:0c:c1:27:c4:79:61:45:e7:44:a4:
                    80:f7:a0:b8:43:11:68:26:7b:42:eb:19:ee:35:3f:
                    27:00:39:d0:a4:93:59:01:70:83:6d:20:dc:a5:72:
                    c8:e8:7c:a5:1e:44:8d:a2:fa:c9:50:99:ca:8c:fb:
                    8f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:89:94:03:7C:AC:8C:E1:A2:D8:78:14:CB:7E:EF:E0:75:54:26:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/35a91ef9-1443-345d-b56b-64a39a83ea5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:b1:a9:58:e3:a7:44:e0:3b:46:97:09:d5:41:dc:a1:b8:2a:
         d5:c7:cc:75:f6:3a:0c:18:68:e2:18:cc:c6:9a:c0:3d:6d:65:
         55:84:5f:bc:d1:c4:13:54:a8:38:99:be:b3:61:ec:2b:4e:a5:
         fd:4f:9c:53:73:4e:6f:3b:54:30:74:c2:cf:21:25:a0:ab:46:
         17:15:d3:69:03:f3:41:09:4e:ba:9e:5b:45:61:ba:d2:43:1b:
         99:7f:0b:2b:ce:fe:40:cc:02:b6:5a:42:98:e2:2b:57:1c:22:
         c9:0a:c4:39:d3:b9:2d:1f:13:06:07:ee:ca:4b:b7:07:47:08:
         19:0b:36:3b:48:60:20:70:ee:89:76:2a:7a:7a:f9:ed:d6:2e:
         06:a9:b2:8b:86:b9:9d:2f:9c:19:78:84:fe:0f:6d:92:51:1a:
         2b:48:1d:c5:4a:1c:1d:48:62:83:7c:c1:30:05:3e:61:02:f2:
         1d:2f:35:fa:25:f8:7a:e6:e6:40:df:ea:72:7f:59:3c:88:c1:
         c3:a9:90:c0:17:6f:8d:1b:e1:93:94:71:c6:d9:50:99:e7:af:
         96:55:14:59:53:ea:2a:76:e5:54:06:a0:0f:94:78:31:69:00:
         31:54:4c:03:5d:19:5f:04:08:2f:4d:5c:a4:6a:87:92:c2:6e:
         0e:d8:e1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 06:44:37 2025 by rpki-client