Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/64213b8b-3827-318e-83d4-1fcc7639d06e.roa
File:                     64213b8b-3827-318e-83d4-1fcc7639d06e.roa (raw, json)
Hash identifier:          hzLcoQoni1/gMFcwwn9w/1H9gfwcOHQYKvPR3pabDy0=
Subject key identifier:   EC:71:A3:23:E7:6A:6D:1D:10:FA:5F:A1:3D:12:55:8A:D2:B9:7F:FA
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285847BAC6A1D275CFDCF4BDCD03C0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/64213b8b-3827-318e-83d4-1fcc7639d06e.roa
Signing time:             Fri 01 Nov 2024 01:00:30 +0000
ROA not before:           Fri 01 Nov 2024 01:00:30 +0000
ROA not after:            Thu 30 Jan 2025 02:00:30 +0000
asID:                     30058
IP address blocks:        50.7.172.0/22 maxlen: 22
                          50.7.180.0/22 maxlen: 22
                          2001:49f0:d018::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ba:c6:a1:d2:75:cf:dc:f4:bd:cd:03:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Nov  1 01:00:30 2024 GMT
            Not After : Jan 30 02:00:30 2025 GMT
        Subject: CN=b7799460-9771-406e-a03c-095cf81da3a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:0f:1a:95:65:08:65:91:6e:7f:25:4c:6b:66:
                    2e:bf:f0:75:f9:e2:b0:5e:e0:b6:5c:03:26:10:e0:
                    da:94:ea:d3:9f:f7:39:46:6a:41:0a:95:ed:c6:35:
                    04:ca:b0:1f:ee:2d:8e:4a:b8:98:8d:81:ac:45:6e:
                    72:eb:4b:a1:65:5b:1a:45:82:e7:8d:d6:0a:dc:44:
                    5b:6c:50:94:75:ab:08:9a:7c:09:b1:0e:24:9c:82:
                    e5:df:c1:d4:68:f8:b9:e3:c9:aa:de:38:aa:43:dc:
                    4d:fd:41:18:16:30:2f:9f:42:d9:08:52:60:c2:4a:
                    2f:e6:63:f9:c1:dd:b0:1a:c0:fd:01:aa:93:d2:ed:
                    af:bd:24:4a:5d:22:ae:b5:d8:45:7a:79:5d:23:3b:
                    f8:39:13:a7:d4:52:30:96:9f:89:42:77:2e:e5:47:
                    f6:35:ab:1a:cf:26:70:dd:33:2c:6e:56:90:4c:67:
                    9e:5e:f7:76:d1:3f:0e:a0:85:66:c3:e0:8c:5c:db:
                    47:b9:11:b2:32:47:ce:94:81:19:13:fa:07:8c:1a:
                    c5:d1:88:00:ce:bf:93:17:e4:5b:4b:0e:39:df:22:
                    a6:f9:b4:9a:e5:7e:6a:ad:c7:4b:56:86:53:84:14:
                    e8:13:ec:6f:41:b3:7d:76:52:de:b6:ea:aa:9b:40:
                    c5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:71:A3:23:E7:6A:6D:1D:10:FA:5F:A1:3D:12:55:8A:D2:B9:7F:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/64213b8b-3827-318e-83d4-1fcc7639d06e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.172.0/22
                  50.7.180.0/22
                IPv6:
                  2001:49f0:d018::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:81:09:af:02:c6:c0:7f:b1:07:b6:ef:9c:f3:8c:e3:66:cd:
         46:6a:0c:7e:f1:6f:fb:87:e7:8f:92:0f:a9:ce:a3:ae:19:80:
         b3:93:ec:34:0b:47:f9:ee:34:2e:5e:e3:d0:1f:07:0a:f2:6a:
         5a:2a:0e:0e:54:32:64:ed:2d:ce:54:64:07:41:79:aa:b0:f4:
         1c:e7:6b:be:30:46:55:dd:52:cd:be:f4:43:5e:1d:f5:d9:92:
         ed:e5:d8:17:2f:68:14:91:e4:42:3b:ad:20:eb:61:af:de:87:
         0c:b1:5a:64:2b:d3:db:a8:d2:c8:fc:22:00:14:82:d7:72:36:
         42:48:b4:02:f8:e4:28:db:37:ee:aa:18:d3:91:a5:15:8c:a2:
         57:fc:00:e6:f4:02:0e:c0:ef:63:a9:51:e7:98:31:37:d1:7c:
         fc:60:e9:8e:89:34:7d:b1:f6:0b:57:f5:4e:99:99:72:23:2f:
         ae:6a:99:bc:d8:3c:26:5d:5f:bf:ef:2d:51:76:28:80:05:5a:
         25:b6:dc:48:e4:9c:23:47:5d:ed:be:44:fd:ad:86:32:24:1d:
         07:23:16:e1:2a:eb:74:36:cb:b4:b2:f7:fb:0c:62:79:1a:e3:
         69:ef:66:87:b5:33:a8:45:1a:d1:37:ff:2d:70:31:db:f6:59:
         76:d9:f6:50
-----BEGIN CERTIFICATE-----
MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEe6xqHSdc/c9L3NA8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI0MTEwMTAxMDAzMFoXDTI1MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk
Yjc3OTk0NjAtOTc3MS00MDZlLWEwM2MtMDk1Y2Y4MWRhM2E4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhA8alWUIZZFufyVMa2Yuv/B1+eKwXuC2XAMm
EODalOrTn/c5RmpBCpXtxjUEyrAf7i2OSriYjYGsRW5y60uhZVsaRYLnjdYK3ERb
bFCUdasImnwJsQ4knILl38HUaPi548mq3jiqQ9xN/UEYFjAvn0LZCFJgwkov5mP5
wd2wGsD9AaqT0u2vvSRKXSKutdhFenldIzv4OROn1FIwlp+JQncu5Uf2NasazyZw
3TMsblaQTGeeXvd20T8OoIVmw+CMXNtHuRGyMkfOlIEZE/oHjBrF0YgAzr+TF+Rb
Sw453yKm+bSa5X5qrcdLVoZThBToE+xvQbN9dlLetuqqm0DFzwIDAQABo4IDbDCC
A2gwHQYDVR0OBBYEFOxxoyPnam0dEPpfoT0SVYrSuX/6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvNjQyMTNiOGItMzgyNy0z
MThlLTgzZDQtMWZjYzc2MzlkMDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCMgesAwQC
Mge0MA8EAgACMAkDBwAgAUnw0BgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6
MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr
aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAc4EJrwLGwH+xB7bvnPOM42bN
RmoMfvFv+4fnj5IPqc6jrhmAs5PsNAtH+e40Ll7j0B8HCvJqWioODlQyZO0tzlRk
B0F5qrD0HOdrvjBGVd1Szb70Q14d9dmS7eXYFy9oFJHkQjutIOthr96HDLFaZCvT
26jSyPwiABSC13I2Qki0AvjkKNs37qoY05GlFYyiV/wA5vQCDsDvY6lR55gxN9F8
/GDpjok0fbH2C1f1TpmZciMvrmqZvNg8Jl1fv+8tUXYogAVaJbbcSOScI0dd7b5E
/a2GMiQdByMW4SrrdDbLtLL3+wxieRrjae9mh7UzqEUa0Tf/LXAx2/ZZdtn2UA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:17 2024 by rpki-client on console-ams.rpki-client.org