Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/d1baa7b6-110d-318a-b7bb-0c0b5b90b9b0.roa
File:                     d1baa7b6-110d-318a-b7bb-0c0b5b90b9b0.roa (raw, json)
Hash identifier:          cC4RDToYrdky/YQ48QJovno3/kexs0q2wKjQFP39gxo=
Subject key identifier:   F1:D8:92:ED:2C:7F:2E:F8:16:0F:41:92:DC:85:63:40:D5:D5:51:67
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285849350EA89B41CE9088F37D8E60
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/d1baa7b6-110d-318a-b7bb-0c0b5b90b9b0.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     30058
IP address blocks:        50.7.60.0/24 maxlen: 24
                          50.7.252.0/23 maxlen: 23
                          66.90.98.0/24 maxlen: 24
                          66.90.116.0/24 maxlen: 24
                          198.16.115.0/24 maxlen: 24
                          2001:49f0:d0db::/48 maxlen: 48
                          2001:49f0:d0fa::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:a8:9b:41:ce:90:88:f3:7d:8e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=93a6d5ca-a589-4941-a485-7c3292046bbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3a:64:17:af:35:31:30:1b:60:08:86:a7:a4:
                    ca:53:9e:85:1a:72:37:48:b7:22:60:6d:48:b7:31:
                    4b:c7:fd:37:7d:50:24:2d:29:36:e5:0f:f1:5f:84:
                    24:17:66:49:27:5d:94:bc:2d:db:a5:0b:90:7a:78:
                    39:bf:5b:81:d5:01:5b:8d:39:a4:c6:89:cf:fc:53:
                    2d:e8:5d:65:9b:a5:73:d0:32:32:59:d4:66:50:a0:
                    67:32:fc:ac:91:5a:30:57:72:ac:9b:ea:af:78:76:
                    71:fb:04:71:38:15:9b:f5:ba:f2:04:4c:9f:2c:ab:
                    20:9b:5a:83:eb:7a:9a:bd:85:c1:d5:8c:a5:e1:70:
                    7f:b0:da:a0:5b:29:2c:55:7f:03:fc:8e:4b:90:04:
                    79:80:d4:8b:ec:23:c2:07:f2:ad:0c:f6:97:4d:5b:
                    ff:4f:64:0f:af:b7:79:f3:6f:b3:f3:16:2f:8c:11:
                    74:6b:f0:dc:09:6b:5b:e9:68:ea:8f:c7:d3:ed:02:
                    ad:d2:41:9b:fc:23:6d:06:89:52:fd:33:03:9c:61:
                    f1:e1:6a:e8:c8:f6:be:e7:9d:4f:ba:84:59:8c:d3:
                    63:86:0a:e3:9a:8b:bd:fd:53:86:41:6f:54:84:7c:
                    0f:4a:33:f6:fb:34:fa:e4:e0:fe:58:d6:2a:3a:c3:
                    8e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D8:92:ED:2C:7F:2E:F8:16:0F:41:92:DC:85:63:40:D5:D5:51:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/d1baa7b6-110d-318a-b7bb-0c0b5b90b9b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.60.0/24
                  50.7.252.0/23
                  66.90.98.0/24
                  66.90.116.0/24
                  198.16.115.0/24
                IPv6:
                  2001:49f0:d0db::/48
                  2001:49f0:d0fa::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:c3:4d:04:72:8e:ca:b9:5a:5c:b6:b1:d9:e0:4b:2f:38:36:
         a0:13:40:2e:27:2a:a9:4f:38:ba:21:4e:6a:9f:b8:0c:71:e2:
         d3:2a:55:01:fc:0f:e4:1e:25:ae:1d:93:ca:9d:f7:bc:7d:0c:
         84:b6:e3:58:2f:c1:b0:81:9f:87:8e:79:3e:b4:27:5c:ef:1f:
         44:d4:87:ed:63:56:42:16:6c:c5:13:d7:7a:9e:3a:c2:be:c9:
         93:79:42:ba:e2:3a:e8:88:06:66:27:62:98:aa:30:b9:38:84:
         49:51:f7:a8:0e:34:aa:9f:97:bf:11:f9:94:44:b4:e3:74:01:
         2b:c5:3a:b4:94:06:80:52:fc:0a:a1:38:b6:8b:11:3c:69:6f:
         7d:91:52:60:b2:0a:ba:15:bd:6e:b2:81:d3:d8:0a:42:3e:11:
         eb:59:f1:2d:8c:27:f4:7c:83:18:43:18:ab:fa:59:ec:7a:63:
         cb:67:11:fe:ee:b8:a3:9c:84:42:c7:65:64:36:9d:78:a8:9d:
         11:b8:e1:42:c9:50:b2:0f:78:c9:5d:93:ce:32:eb:42:f8:53:
         3f:63:ae:49:6d:af:b8:5b:42:d8:54:07:a5:7a:13:fb:42:ed:
         25:d7:ed:ea:95:17:2c:30:b8:43:7e:6f:a0:41:b8:e8:db:26:
         f0:5d:78:b7
-----BEGIN CERTIFICATE-----
MIIGdTCCBV2gAwIBAgIUAQ0Mn0MoWEk1DqibQc6QiPN9jmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk
OTNhNmQ1Y2EtYTU4OS00OTQxLWE0ODUtN2MzMjkyMDQ2YmJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljpkF681MTAbYAiGp6TKU56FGnI3SLciYG1I
tzFLx/03fVAkLSk25Q/xX4QkF2ZJJ12UvC3bpQuQeng5v1uB1QFbjTmkxonP/FMt
6F1lm6Vz0DIyWdRmUKBnMvyskVowV3Ksm+qveHZx+wRxOBWb9bryBEyfLKsgm1qD
63qavYXB1Yyl4XB/sNqgWyksVX8D/I5LkAR5gNSL7CPCB/KtDPaXTVv/T2QPr7d5
82+z8xYvjBF0a/DcCWtb6Wjqj8fT7QKt0kGb/CNtBolS/TMDnGHx4WroyPa+551P
uoRZjNNjhgrjmou9/VOGQW9UhHwPSjP2+zT65OD+WNYqOsOO8wIDAQABo4IDhzCC
A4MwHQYDVR0OBBYEFPHYku0sfy74Fg9BktyFY0DV1VFnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvZDFiYWE3YjYtMTEwZC0z
MThhLWI3YmItMGMwYjViOTBiOWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMFEGCCsGAQUFBwEHAQH/BEIwQDAkBAIAATAeAwQAMgc8AwQB
Mgf8AwQAQlpiAwQAQlp0AwQAxhBzMBgEAgACMBIDBwAgAUnw0NsDBwAgAUnw0Pow
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEANcNNBHKOyrlaXLax2eBLLzg2oBNALicqqU84uiFOap+4DHHi0ypV
AfwP5B4lrh2Typ33vH0MhLbjWC/BsIGfh455PrQnXO8fRNSH7WNWQhZsxRPXep46
wr7Jk3lCuuI66IgGZidimKowuTiESVH3qA40qp+XvxH5lES043QBK8U6tJQGgFL8
CqE4tosRPGlvfZFSYLIKuhW9brKB09gKQj4R61nxLYwn9HyDGEMYq/pZ7Hpjy2cR
/u64o5yEQsdlZDadeKidEbjhQslQsg94yV2TzjLrQvhTP2OuSW2vuFtC2FQHpXoT
+0LtJdft6pUXLDC4Q35voEG46Nsm8F14tw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:13 2025 by rpki-client