Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/856098a1-a5d0-362c-9856-a951aa023795.roa
File:                     856098a1-a5d0-362c-9856-a951aa023795.roa (raw, json)
Hash identifier:          9qWbmT4hh4k+elyH964687iFGWrkGYiFTdnl2MgpAzo=
Subject key identifier:   B9:40:6D:9F:89:5E:69:D7:E1:62:52:1D:EE:70:26:F8:52:47:DD:A3
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584B3AEC4660D92D0824C5391C40
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/856098a1-a5d0-362c-9856-a951aa023795.roa
Signing time:             Thu 18 Sep 2025 01:00:32 +0000
ROA not before:           Thu 18 Sep 2025 01:00:32 +0000
ROA not after:            Wed 17 Dec 2025 02:00:32 +0000
asID:                     174
IP address blocks:        50.7.160.0/22 maxlen: 22
                          50.7.188.0/22 maxlen: 22
                          50.7.194.0/23 maxlen: 23
                          50.7.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3a:ec:46:60:d9:2d:08:24:c5:39:1c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Sep 18 01:00:32 2025 GMT
            Not After : Dec 17 02:00:32 2025 GMT
        Subject: CN=79e7fceb-609c-49dc-88d3-8532cbc0b126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:29:cf:cb:44:06:77:3e:e1:a4:62:90:36:67:
                    be:fa:90:9b:b7:a5:32:b7:e5:f5:27:7a:bc:0e:e1:
                    25:31:c4:57:fd:c9:38:23:89:dc:d3:47:c7:d8:31:
                    92:a8:cb:30:c6:23:a6:e8:c0:9f:a4:42:9c:e2:56:
                    34:0c:4a:cc:33:74:a4:d4:0a:2e:5c:7c:1c:e7:83:
                    24:dd:44:d4:19:e1:3b:d8:0b:93:8f:8c:7b:43:72:
                    6a:8e:06:9e:00:85:e7:51:61:c5:66:b9:03:61:ef:
                    34:7b:57:7c:50:4c:10:67:4b:11:e4:34:e4:a9:eb:
                    6b:a3:5b:61:7a:13:51:21:59:8d:54:52:63:45:ec:
                    45:6c:8c:6f:77:93:84:e9:28:54:58:20:a1:a5:50:
                    33:9d:51:41:6a:23:a2:ea:ab:91:c5:da:3e:0a:04:
                    2d:83:b4:98:8b:31:66:e7:32:00:10:d0:71:46:a0:
                    80:23:a7:c6:8c:4d:3c:fd:ca:2d:02:6d:8d:cd:d9:
                    75:0e:03:cb:6c:11:ca:69:0f:6e:24:67:48:9e:23:
                    9c:e9:42:8e:b6:b1:3c:76:25:0c:b2:83:1c:0c:96:
                    6c:1e:f1:85:9a:e8:fe:3f:d9:52:83:ee:5f:75:5c:
                    c6:b2:42:7a:22:d1:84:80:00:b4:46:9b:c3:f7:62:
                    33:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:40:6D:9F:89:5E:69:D7:E1:62:52:1D:EE:70:26:F8:52:47:DD:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/856098a1-a5d0-362c-9856-a951aa023795.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.160.0/22
                  50.7.188.0/22
                  50.7.194.0/23
                  50.7.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:ff:50:3f:26:6a:12:db:3b:d2:cd:fc:8f:4b:2e:71:20:29:
         55:e1:82:e7:97:3e:06:bf:e7:ab:6f:24:f4:ec:9e:bb:4b:be:
         6b:91:c8:4b:ad:5a:0d:0e:f8:b8:c2:35:fe:08:cb:d6:cd:f6:
         08:e3:a4:ab:fd:4d:cc:f7:3e:52:b3:5d:4f:03:c0:dc:2b:84:
         8c:df:23:80:0a:69:b4:e7:e1:c8:67:e3:b5:a2:0b:2c:3e:44:
         ff:76:ca:5f:8b:fb:af:3e:14:cc:cb:d0:3b:a9:cc:4f:8e:93:
         ed:40:27:0a:31:9f:fe:c1:f3:cf:5e:a3:36:a3:27:43:86:1b:
         26:51:e7:ad:e3:75:10:52:f1:1f:ee:25:f7:c6:ed:e8:04:fb:
         4e:f3:ac:d8:1b:05:2e:81:77:1c:0a:4c:11:14:15:ac:12:73:
         75:29:97:be:5e:1a:9a:a6:93:fb:17:84:3e:e8:58:11:2c:76:
         24:43:49:0f:86:d1:cb:0e:43:95:a0:2d:e4:de:44:eb:e5:71:
         a6:f8:b9:4a:4e:ea:c6:c3:0c:78:4f:ff:16:1d:3f:5c:d2:e6:
         55:bf:87:95:5e:ba:5c:99:e2:c4:b7:53:ad:82:bc:2d:e8:19:
         d8:9c:9a:2a:f4:99:1d:ee:79:f3:90:76:98:d1:b5:49:80:f0:
         ff:56:d9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 08:20:04 2025 by rpki-client