Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/64213b8b-3827-318e-83d4-1fcc7639d06e.roa
File:                     64213b8b-3827-318e-83d4-1fcc7639d06e.roa (raw, json)
Hash identifier:          VkCYO+hZtC09c36LygG+H/HK/Rq7WCbrlDzpbpiHeP8=
Subject key identifier:   F3:47:04:31:88:85:51:52:CF:FF:FA:48:EA:18:A6:1F:D8:2D:A0:6C
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F432858489A3B4E73DC5E236185C523B0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/64213b8b-3827-318e-83d4-1fcc7639d06e.roa
Signing time:             Mon 20 Jan 2025 02:00:40 +0000
ROA not before:           Mon 20 Jan 2025 02:00:40 +0000
ROA not after:            Sun 20 Apr 2025 01:00:40 +0000
asID:                     30058
IP address blocks:        50.7.172.0/22 maxlen: 22
                          50.7.180.0/22 maxlen: 22
                          2001:49f0:d018::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9a:3b:4e:73:dc:5e:23:61:85:c5:23:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jan 20 02:00:40 2025 GMT
            Not After : Apr 20 01:00:40 2025 GMT
        Subject: CN=e04ac9ee-4a1b-4872-bbbc-26766b1c0486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:48:10:c4:42:92:09:cd:17:aa:ca:95:a9:
                    9e:54:bc:5a:b7:5b:82:fb:0e:d3:7c:55:37:76:c5:
                    a2:d6:1f:7b:cd:f3:ed:b7:d0:22:af:38:ed:9f:1b:
                    d5:02:22:2c:ae:c4:dd:99:47:23:96:7b:fc:a1:4d:
                    bc:72:5b:0a:c3:9a:d4:8e:c8:d6:21:01:8e:b5:90:
                    34:bc:2c:40:ae:26:84:ac:8a:e7:30:de:0e:07:18:
                    7d:7e:2e:94:61:43:d2:36:62:2a:19:02:56:af:1c:
                    e4:90:6c:d7:c4:56:cd:bd:8b:91:c6:61:a1:ea:da:
                    22:bc:fa:2b:75:a1:8b:98:cf:ce:70:cf:01:fe:5b:
                    a9:d1:82:8d:d7:65:3d:11:81:6b:02:3d:1f:fc:c5:
                    f2:de:7e:57:42:2f:6e:1c:06:71:93:0e:c5:05:31:
                    7b:88:8d:0c:3c:e1:f2:26:dc:00:4d:d9:83:e8:b7:
                    d1:92:3b:50:eb:53:51:3e:ff:f2:12:8c:0d:ef:b8:
                    83:46:ff:04:b9:b6:39:8c:3c:0c:2c:74:47:ba:74:
                    ca:8c:09:5c:ae:76:c7:92:22:8b:97:7e:0e:a3:26:
                    99:eb:99:38:fc:1d:b2:8e:e8:fd:4e:6e:17:20:9f:
                    5f:02:65:ac:fe:e1:19:f5:5c:0c:b5:72:aa:1e:bd:
                    9e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:47:04:31:88:85:51:52:CF:FF:FA:48:EA:18:A6:1F:D8:2D:A0:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/64213b8b-3827-318e-83d4-1fcc7639d06e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.172.0/22
                  50.7.180.0/22
                IPv6:
                  2001:49f0:d018::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e0:c8:60:fa:70:1b:9b:59:60:86:12:a8:36:5b:eb:06:75:48:
         60:9e:4f:d6:76:1a:42:8e:79:88:30:ec:93:f5:16:53:d7:f2:
         79:ec:96:4a:2c:65:d6:c9:77:5d:22:af:1f:42:55:a2:83:85:
         9e:b3:a8:d0:81:7c:4e:9d:ad:ba:bf:77:07:6b:7b:d3:49:12:
         22:f4:63:53:f3:c2:66:5e:6a:7c:0b:bf:15:43:04:e7:c1:fc:
         37:b3:ea:d7:38:ff:ab:a1:3a:6a:a2:12:87:e4:72:38:74:0b:
         ab:67:cd:8b:ea:0b:8b:9c:59:9a:93:b6:0d:04:ac:b2:d4:09:
         4c:2e:51:28:6d:5f:94:89:5d:53:61:d8:0b:cf:b6:90:b1:40:
         2e:1b:d5:c8:3b:9d:94:5a:85:95:62:ec:bf:6a:01:1e:31:98:
         10:66:06:47:88:13:bd:79:60:fd:54:e4:f6:9d:b9:ae:72:5e:
         67:11:1f:16:dd:5e:00:ef:a8:72:ba:ac:1a:35:70:dd:05:90:
         98:d6:0f:33:b4:90:d3:ed:16:0c:8d:c0:ba:28:6e:c4:4f:de:
         5a:34:ac:af:83:0a:6c:d7:36:0d:6e:00:e1:9b:dc:0c:ae:a0:
         a1:e6:19:f7:d3:93:10:e8:98:b8:a2:14:37:f3:78:d3:13:01:
         85:d3:28:1f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:29 2025 by rpki-client