Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/53f0c950-2235-3b19-b157-97c396c412bb.roa
File:                     53f0c950-2235-3b19-b157-97c396c412bb.roa (raw, json)
Hash identifier:          79g2sp0tLwFE0y22QfIRObebNEjv2kINFa6FUFIEZtA=
Subject key identifier:   F6:60:B2:6B:BB:0F:02:D1:C0:79:44:9B:35:65:8E:19:35:F4:F5:A9
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285849797445442B86EA647AE5F800
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/53f0c950-2235-3b19-b157-97c396c412bb.roa
Signing time:             Thu 10 Apr 2025 01:00:46 +0000
ROA not before:           Thu 10 Apr 2025 01:00:46 +0000
ROA not after:            Wed 09 Jul 2025 01:00:46 +0000
asID:                     174
IP address blocks:        50.7.172.0/22 maxlen: 22
                          50.7.180.0/22 maxlen: 22
                          2001:49f0:d018::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:79:74:45:44:2b:86:ea:64:7a:e5:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Apr 10 01:00:46 2025 GMT
            Not After : Jul  9 01:00:46 2025 GMT
        Subject: CN=377911ab-3d5e-40d7-9fc9-fc723fe8e7ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2a:ba:93:63:bf:9f:f1:2a:03:2e:e1:6b:9b:
                    7d:a7:8d:9d:bd:87:6b:11:e0:83:67:27:7f:c8:26:
                    dc:3d:d7:9a:8b:29:cd:5a:e4:89:9c:b4:7f:b9:ae:
                    58:6c:d8:e9:83:52:c2:4a:9a:59:6f:99:75:1a:1c:
                    9a:b3:02:f8:4d:b6:52:7f:4a:8a:0c:10:2d:9f:df:
                    8b:0e:37:2c:ff:c4:99:f3:25:7d:b9:9c:9e:1d:ba:
                    7a:e3:04:8c:de:1d:74:1f:91:81:81:44:f6:9c:49:
                    ad:e9:ba:f4:51:e1:ce:22:1b:df:39:48:5a:de:24:
                    51:e8:f5:33:58:5b:e9:c2:39:77:57:c4:ed:a2:62:
                    89:a9:4b:f1:df:ab:63:cd:d8:54:07:bb:59:2a:b0:
                    41:71:c5:1a:e8:54:26:69:46:de:6d:2f:ec:f0:af:
                    4b:2c:2f:fe:6b:d4:8f:c8:13:f8:f3:68:e4:57:4d:
                    31:d4:4d:93:9d:1a:5e:57:e6:a1:8b:4d:3e:db:7a:
                    9e:9c:1c:46:f2:4d:98:03:b6:7f:d1:da:a0:60:b9:
                    1f:a8:9b:3a:94:ae:c2:51:f4:44:ee:dc:b9:6d:5c:
                    ea:99:6e:7b:9e:db:bd:42:15:b4:17:1d:39:8a:89:
                    1e:c1:56:d0:02:1a:82:90:eb:ed:00:f2:07:f3:67:
                    ec:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:60:B2:6B:BB:0F:02:D1:C0:79:44:9B:35:65:8E:19:35:F4:F5:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/53f0c950-2235-3b19-b157-97c396c412bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.172.0/22
                  50.7.180.0/22
                IPv6:
                  2001:49f0:d018::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:95:ae:de:1a:a7:0e:73:fe:a1:14:94:d9:64:d4:29:0c:f6:
         57:bc:cd:d9:27:af:f1:91:d3:5a:33:82:1d:3b:42:18:13:fd:
         5d:13:ae:9d:47:b8:bb:d2:dd:69:0f:c9:15:29:38:9f:aa:3b:
         05:ac:8f:f8:08:46:a2:8d:7c:43:6e:a7:60:c3:6c:da:c2:a3:
         22:15:fc:ac:23:27:fb:18:e9:28:23:83:05:f8:e1:f1:b4:e3:
         0d:38:bf:79:cc:23:cc:01:7e:10:86:a3:5d:22:39:66:83:b0:
         be:83:26:97:00:b4:c3:68:33:8f:69:57:c4:bb:1a:74:5d:3c:
         f0:0e:2d:4c:d4:af:a2:3e:98:7c:b8:8c:03:53:a8:d5:2c:e1:
         4c:d3:6a:d9:75:51:8d:e8:a6:ad:34:06:7d:3e:bf:be:19:c3:
         68:ed:3b:75:dd:03:cb:f7:14:15:45:23:d7:43:a0:81:31:40:
         33:d1:d0:f2:fa:f3:d7:50:6a:29:91:f6:d7:d9:5e:3b:74:66:
         da:6c:43:35:ba:16:5b:d1:b9:c3:1e:3c:7e:ef:a2:6c:11:0d:
         21:07:70:26:98:43:24:26:d1:69:07:fe:d5:ff:bb:24:bc:87:
         7d:76:b7:f0:d8:49:f4:02:24:28:14:55:eb:1f:5d:e1:32:65:
         4a:d9:13:29
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 13 01:03:25 2025 by rpki-client