Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/bd00868e-852a-35c6-b559-7748035e2dd8.roa
File:                     bd00868e-852a-35c6-b559-7748035e2dd8.roa (raw, json)
Hash identifier:          mEbR92mXpVN/vAc/3kgDgzojH4KUQaTdbOnqPa8fYF0=
Subject key identifier:   7C:22:3E:7F:0F:8B:66:C9:6F:21:5B:0B:ED:D6:C6:4D:0A:96:B4:3C
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584F093D0C9EA9A9A784F6D5DB00
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/bd00868e-852a-35c6-b559-7748035e2dd8.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     30058
IP address blocks:        50.7.4.0/23 maxlen: 24
                          50.7.55.0/24 maxlen: 24
                          2001:49f0:d0ea::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3d:0c:9e:a9:a9:a7:84:f6:d5:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=a3d34df9-5111-4130-9145-65c83389b0c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3b:6c:1f:6f:b9:83:2e:5b:77:7b:a3:d8:6b:
                    66:93:83:ee:68:7b:7c:51:88:02:3c:f4:90:a3:36:
                    24:f2:58:61:29:4e:c9:39:48:fa:8f:93:28:b3:d9:
                    7e:5b:36:57:29:c6:38:e9:da:c4:ca:f9:f9:86:18:
                    ea:f5:95:82:a2:3f:fe:95:a6:d8:82:6b:3c:76:ef:
                    21:b8:60:81:bc:0c:45:8d:24:0c:7e:49:dd:f1:fc:
                    97:0a:e1:5a:1e:cd:60:48:41:13:eb:28:64:2a:2c:
                    92:74:2e:67:8c:99:12:1b:f1:f9:98:0a:b2:cc:0c:
                    37:1e:bb:80:9f:7d:9d:42:f0:e8:2e:58:b0:bb:9c:
                    ae:5e:8d:6d:3d:ff:fa:3e:98:02:2f:e7:b1:fd:ea:
                    c7:59:f3:b2:14:e7:9b:f1:59:15:0d:93:41:e3:25:
                    8a:59:c1:e7:b2:18:ad:af:7a:39:6e:7c:7b:72:00:
                    72:08:c8:8b:40:ca:22:70:be:95:ad:c7:57:11:3c:
                    5d:d6:fc:c1:1c:83:21:50:96:8a:4d:aa:ce:be:d0:
                    13:5c:5b:eb:94:bc:26:07:a1:fc:11:c9:23:34:a1:
                    00:2e:82:93:8c:f5:4d:03:1e:9f:2b:0d:1a:57:a2:
                    a9:d5:50:6e:90:ec:d6:2f:7f:15:f7:df:05:5b:24:
                    71:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:22:3E:7F:0F:8B:66:C9:6F:21:5B:0B:ED:D6:C6:4D:0A:96:B4:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/bd00868e-852a-35c6-b559-7748035e2dd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.4.0/23
                  50.7.55.0/24
                IPv6:
                  2001:49f0:d0ea::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:ac:f2:2e:03:2d:97:80:f6:e8:fb:04:b3:c3:66:82:8e:a7:
         31:fa:46:c5:92:46:f8:a1:02:41:60:cd:d6:7f:d7:f3:9b:d2:
         1c:08:8e:02:88:c4:8a:f5:49:d5:3c:11:5f:94:26:3a:20:e9:
         33:0a:6e:e4:25:54:68:3b:86:24:d2:fc:46:79:7a:bf:6a:26:
         c2:c8:78:ac:bf:77:77:1a:66:5b:b6:74:e8:b6:68:8c:2e:8b:
         bd:10:9d:38:7c:92:83:d4:7e:fd:f9:74:84:d0:77:8c:ca:9d:
         4b:27:76:24:5c:3f:bb:e2:a2:c2:df:e8:e5:90:ec:8a:ce:7a:
         db:0a:1e:44:5f:70:e9:43:63:cb:f5:26:b3:c8:bb:64:df:2a:
         8c:c7:15:86:49:18:81:04:1e:f0:f2:69:6f:e9:f3:f2:e0:76:
         53:9e:65:ee:8b:d0:48:b4:f3:39:4e:0b:23:b3:92:94:f7:a5:
         d7:b5:08:ec:6f:4e:8a:a5:95:46:62:ec:9a:b2:c3:c4:36:30:
         7e:0f:5d:49:67:bf:81:65:88:4e:39:93:54:40:ca:d6:10:f4:
         b5:bf:b7:45:a7:94:1a:aa:e9:c7:76:53:f6:b0:b6:4b:98:ec:
         9c:60:fd:2f:a2:a8:ff:bc:f2:c8:c3:e2:27:89:00:32:11:91:
         f0:28:6e:3f
-----BEGIN CERTIFICATE-----
MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWE8JPQyeqamnhPbV2wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk
YTNkMzRkZjktNTExMS00MTMwLTkxNDUtNjVjODMzODliMGM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDtsH2+5gy5bd3uj2Gtmk4PuaHt8UYgCPPSQ
ozYk8lhhKU7JOUj6j5Mos9l+WzZXKcY46drEyvn5hhjq9ZWCoj/+labYgms8du8h
uGCBvAxFjSQMfknd8fyXCuFaHs1gSEET6yhkKiySdC5njJkSG/H5mAqyzAw3HruA
n32dQvDoLliwu5yuXo1tPf/6PpgCL+ex/erHWfOyFOeb8VkVDZNB4yWKWcHnshit
r3o5bnx7cgByCMiLQMoicL6VrcdXETxd1vzBHIMhUJaKTarOvtATXFvrlLwmB6H8
EckjNKEALoKTjPVNAx6fKw0aV6Kp1VBukOzWL38V998FWyRxsQIDAQABo4IDbDCC
A2gwHQYDVR0OBBYEFHwiPn8Pi2bJbyFbC+3Wxk0KlrQ8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvYmQwMDg2OGUtODUyYS0z
NWM2LWI1NTktNzc0ODAzNWUyZGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBMgcEAwQA
Mgc3MA8EAgACMAkDBwAgAUnw0OowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6
MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr
aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAvazyLgMtl4D26PsEs8Nmgo6n
MfpGxZJG+KECQWDN1n/X85vSHAiOAojEivVJ1TwRX5QmOiDpMwpu5CVUaDuGJNL8
Rnl6v2omwsh4rL93dxpmW7Z06LZojC6LvRCdOHySg9R+/fl0hNB3jMqdSyd2JFw/
u+Kiwt/o5ZDsis562woeRF9w6UNjy/Ums8i7ZN8qjMcVhkkYgQQe8PJpb+nz8uB2
U55l7ovQSLTzOU4LI7OSlPel17UI7G9OiqWVRmLsmrLDxDYwfg9dSWe/gWWITjmT
VEDK1hD0tb+3RaeUGqrpx3ZT9rC2S5jsnGD9L6Ko/7zyyMPiJ4kAMhGR8ChuPw==
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:50:31 2026 by rpki-client