Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/6bca49ea-741e-346e-a986-0186728872d5.roa
File:                     6bca49ea-741e-346e-a986-0186728872d5.roa (raw, json)
Hash identifier:          /sXBtsuyX3aO/1uaukOZzhlIn3U/Gy3WRnb9USFlmuc=
Subject key identifier:   CA:41:A8:2D:1B:52:B3:E3:D8:B0:D0:E8:9E:A1:19:93:83:3C:3D:7B
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584E6F3A4C02FE114380AD5B2400
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/6bca49ea-741e-346e-a986-0186728872d5.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     30058
IP address blocks:        50.7.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:4c:02:fe:11:43:80:ad:5b:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=dd574892-7eb5-495f-a894-25b357e85a4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:38:cf:4b:33:44:de:79:cb:49:62:db:2a:65:
                    1f:17:96:64:48:9a:be:a2:09:5f:e5:3c:e8:2c:5c:
                    c8:36:86:d0:71:2d:1b:20:4c:4e:96:b5:96:32:c6:
                    88:37:07:6b:3c:2c:d1:e4:b8:d5:42:de:c8:96:f1:
                    fb:5e:da:ed:e2:5f:56:c0:50:0a:53:a1:d1:b2:45:
                    12:2b:fa:d8:19:6e:6d:97:3b:86:3c:df:46:e8:7b:
                    bf:20:29:e3:f8:dd:73:07:d1:79:b7:34:97:c5:bd:
                    b3:6a:99:75:f9:9c:e8:1e:46:00:bf:ad:8b:1e:dc:
                    d6:4f:80:0b:54:f0:23:52:31:fa:e9:44:4b:ed:f8:
                    2a:0e:99:c5:64:ae:c1:3c:64:b9:ac:08:e8:37:1c:
                    30:58:a5:8b:45:89:47:f4:f8:27:fa:24:39:72:a4:
                    fe:3e:c5:b8:22:39:6b:7e:6e:ca:cd:a5:1c:8f:2c:
                    89:b7:80:f0:6e:98:19:54:d3:85:4b:b3:ca:31:18:
                    60:2f:01:d1:5e:73:9d:e1:a0:ab:f3:e4:c4:1e:99:
                    84:bc:c6:f4:40:03:55:bf:9a:ca:53:7a:cd:0b:9f:
                    63:e2:6f:3c:f3:9b:2d:b9:56:b3:02:c3:1c:08:d1:
                    ad:93:cd:3b:ea:e0:87:e7:19:28:25:43:4f:98:16:
                    9e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:41:A8:2D:1B:52:B3:E3:D8:B0:D0:E8:9E:A1:19:93:83:3C:3D:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/6bca49ea-741e-346e-a986-0186728872d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:55:e4:3c:02:3d:8c:2a:d2:4d:e0:6c:7f:4e:92:ac:71:80:
         37:9a:85:20:46:3c:9e:d6:67:a4:e2:4b:54:d3:a3:c9:0c:1a:
         7d:b2:35:d2:b6:ff:89:3b:d6:24:d9:bb:a6:32:1b:39:3a:19:
         31:69:ed:bf:c8:e7:2b:9f:4b:02:6c:f4:ed:a4:a5:8d:1a:7e:
         40:95:de:76:ac:a2:86:21:e7:cf:cd:9e:5e:5a:49:18:9c:46:
         c4:16:89:bb:87:62:2a:c2:28:60:2f:af:2e:71:86:11:5a:8e:
         fb:e2:ba:9c:c6:3a:90:32:77:31:cb:b0:0d:30:fc:aa:0b:32:
         f2:6e:8d:f8:2d:46:5d:4a:fc:50:0b:92:15:76:3f:86:bc:ec:
         b1:f0:b1:f0:15:da:38:ac:ef:6b:94:31:e0:45:3d:bc:8d:9f:
         84:9f:c9:b0:4d:18:d1:5a:f4:79:b5:be:f0:21:72:79:c5:71:
         95:23:63:7a:ff:67:b3:03:86:18:07:11:4d:b1:bc:75:7b:c1:
         ae:be:b7:e7:9b:54:c9:25:24:a2:92:d0:b2:c2:66:86:7d:10:
         6e:1c:ac:68:c4:75:b5:f0:65:6b:62:69:15:c6:0f:0e:e9:b2:
         55:c7:33:b7:af:23:4b:fa:14:13:ee:5e:ae:6c:4a:a9:cd:c4:
         aa:aa:1f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:54:35 2026 by rpki-client