Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/bc5380a6-4b46-3432-97d0-2f9c7d7c9110.roa
File:                     bc5380a6-4b46-3432-97d0-2f9c7d7c9110.roa (raw, json)
Hash identifier:          DWBMD9fg9PVqDQ3IUJIurPKopx1Cnk25s7kDO8xiYZc=
Subject key identifier:   E7:AC:BA:34:49:EC:CF:88:6B:18:88:69:F1:8D:1F:93:63:85:53:2C
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584F58CD568AA0925D92A3589280
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/bc5380a6-4b46-3432-97d0-2f9c7d7c9110.roa
Signing time:             Wed 30 Sep 2026 13:00:13 +0000
ROA not before:           Wed 30 Sep 2026 13:00:13 +0000
ROA not after:            Tue 29 Dec 2026 14:00:13 +0000
asID:                     30058
IP address blocks:        50.7.117.0/24 maxlen: 24
                          50.7.148.0/22 maxlen: 22
                          50.7.200.0/23 maxlen: 23
                          50.7.228.0/24 maxlen: 24
                          50.7.242.0/23 maxlen: 23
                          50.7.244.0/23 maxlen: 23
                          198.16.112.0/23 maxlen: 23
                          198.16.124.0/24 maxlen: 24
                          2001:49f0:d006::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:58:cd:56:8a:a0:92:5d:92:a3:58:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Sep 30 13:00:13 2026 GMT
            Not After : Dec 29 14:00:13 2026 GMT
        Subject: CN=2271366f-6062-4dce-b154-02954d8ddc6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9f:bf:51:41:06:05:57:94:aa:bf:94:2a:02:
                    05:ea:67:78:8d:29:9a:3f:2d:d8:aa:5e:2f:04:8f:
                    6f:21:29:e3:cd:aa:da:1c:08:4d:f1:ed:6c:d4:d8:
                    36:f0:7b:1d:ff:62:cc:de:a1:68:b8:5c:0e:b6:d8:
                    7e:62:44:77:57:3e:a5:85:98:49:c7:3c:7c:64:3f:
                    bb:44:fc:80:2a:c2:6e:80:55:3d:ed:55:77:54:88:
                    78:fb:94:ed:b9:71:dc:8d:71:d5:7a:47:30:42:bb:
                    7d:27:55:ba:3f:5f:02:86:99:dd:40:eb:af:fb:ec:
                    c2:da:0c:93:ec:52:e8:94:0e:38:7d:ea:73:72:69:
                    57:1c:31:5f:f5:c0:49:15:3d:98:b5:f5:50:42:ab:
                    a5:71:d9:62:b6:13:0d:78:ed:18:ce:04:3c:0b:32:
                    b4:80:2e:4f:c1:d6:3f:72:ef:da:73:fc:bb:5a:2d:
                    c0:3d:59:a1:5e:dd:86:41:b5:b8:36:fb:0f:5b:8b:
                    6a:2e:ad:46:0c:32:fe:37:ce:7a:92:8f:b2:43:f8:
                    13:69:4c:c6:e0:be:eb:b1:fa:24:f0:1a:18:46:39:
                    fb:7f:bf:d9:87:0e:20:3d:e2:fb:44:75:5e:a1:4b:
                    3e:2e:bc:4b:b6:7c:93:c2:16:b4:cc:9a:44:8f:0e:
                    54:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:AC:BA:34:49:EC:CF:88:6B:18:88:69:F1:8D:1F:93:63:85:53:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/bc5380a6-4b46-3432-97d0-2f9c7d7c9110.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.117.0/24
                  50.7.148.0/22
                  50.7.200.0/23
                  50.7.228.0/24
                  50.7.242.0-50.7.245.255
                  198.16.112.0/23
                  198.16.124.0/24
                IPv6:
                  2001:49f0:d006::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:6e:b2:e6:30:45:4d:83:7e:d4:b0:ba:48:45:64:be:06:2f:
         93:a4:26:fc:ff:90:a5:60:26:ad:19:ca:fe:8c:fa:9c:ba:3c:
         89:5d:fa:ec:fc:99:e6:6b:7e:ad:96:82:ad:1f:bd:09:e3:37:
         5c:89:2c:63:db:f9:5c:4f:a4:05:5f:d5:3a:b9:f1:df:2f:af:
         43:5a:8f:11:eb:91:6b:18:81:44:56:15:1b:95:df:95:87:af:
         ad:82:b4:12:50:d0:aa:20:d5:bc:79:3e:91:6f:3d:b3:ac:df:
         03:9e:1f:69:63:a6:ad:ac:8d:bc:0f:f5:f6:c7:8a:38:c0:52:
         61:4c:49:0e:72:19:a1:cf:a0:14:08:67:bf:f3:5a:8c:c6:c7:
         37:24:45:94:ef:ec:81:11:1b:30:0b:d7:86:c6:9a:f3:5d:ef:
         cc:e2:98:f6:62:8e:20:a2:0a:8d:0d:80:83:0f:a3:d1:70:cf:
         67:d2:b6:9a:8f:14:a4:52:4d:e4:aa:7b:c5:e5:13:8f:a2:31:
         19:69:05:e6:1c:aa:3d:b9:51:0f:ce:83:67:27:a3:79:92:23:
         55:27:03:1c:d9:2e:d1:63:c4:12:f7:37:0a:55:ea:8a:53:92:
         bf:84:0a:26:64:63:8f:6d:a1:c9:e5:58:3e:73:11:f7:ea:6f:
         1e:0d:74:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:14:43 2026 by rpki-client