Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/ed45778c-e235-313e-8396-ca48cd4b5f7e.roa
File:                     ed45778c-e235-313e-8396-ca48cd4b5f7e.roa (raw, json)
Hash identifier:          m/lVOobDrkqqPHv1rH314hzK9LLxtNB/NSG9AwT4H48=
Subject key identifier:   39:FC:E3:F0:52:5A:83:B9:3C:F2:9F:F5:C7:A5:CC:2B:2A:45:FC:66
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285847D99A09765A2DEAEAE48F67A0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/ed45778c-e235-313e-8396-ca48cd4b5f7e.roa
Signing time:             Tue 12 Nov 2024 02:00:27 +0000
ROA not before:           Tue 12 Nov 2024 02:00:27 +0000
ROA not after:            Mon 10 Feb 2025 02:00:27 +0000
asID:                     30058
IP address blocks:        50.7.120.0/22 maxlen: 22
                          67.159.6.0/23 maxlen: 23
                          2001:49f0:d01b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d9:9a:09:76:5a:2d:ea:ea:e4:8f:67:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Nov 12 02:00:27 2024 GMT
            Not After : Feb 10 02:00:27 2025 GMT
        Subject: CN=02386dfd-aa10-4511-935b-852b3bb1457f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:86:1b:09:17:6c:d9:61:3a:ec:5c:a2:e2:33:
                    da:ca:56:ea:0f:80:10:f1:07:5a:d8:3e:6f:21:7e:
                    08:46:69:e9:07:25:05:9d:02:d2:02:91:a0:87:2d:
                    cc:a9:e1:4b:1a:fe:eb:b3:8b:14:88:ef:c9:81:d7:
                    84:89:cc:a6:62:c8:d2:73:01:2d:bc:06:c7:02:41:
                    f3:ce:78:43:9f:0b:1d:80:65:92:f8:38:a8:ae:63:
                    81:c3:b6:a2:24:f5:ab:1c:9f:d2:cf:7d:33:45:f9:
                    16:c7:20:3b:8a:b4:54:9f:24:24:6e:98:a4:eb:d2:
                    ae:ea:eb:73:ed:c7:07:07:48:31:dc:05:9a:25:ff:
                    36:47:5c:ef:17:a1:88:50:d7:84:70:56:a1:32:72:
                    74:c0:b2:53:62:41:87:49:43:19:c8:0a:53:09:11:
                    17:5d:fd:f3:49:f8:89:c0:af:69:b7:da:c9:cd:4f:
                    48:08:40:6b:ba:5c:d7:53:34:70:7b:ea:da:05:f4:
                    70:7b:54:77:26:1c:6a:11:1e:fc:c5:29:41:fc:d1:
                    f8:74:ad:c8:47:60:85:ae:ac:8d:24:ea:5f:3f:07:
                    54:41:9d:95:0c:03:ff:51:c9:8a:d2:56:e2:46:50:
                    de:75:71:8b:97:c0:72:28:b3:b0:4b:d4:42:03:ca:
                    db:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:FC:E3:F0:52:5A:83:B9:3C:F2:9F:F5:C7:A5:CC:2B:2A:45:FC:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/ed45778c-e235-313e-8396-ca48cd4b5f7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.120.0/22
                  67.159.6.0/23
                IPv6:
                  2001:49f0:d01b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:f2:6a:32:ae:5b:f4:1e:b6:f4:64:ce:54:53:b5:9e:03:22:
         0d:17:a5:c2:95:f5:fc:8f:05:cc:c1:92:fe:89:2f:18:92:f3:
         b3:02:11:75:71:2d:83:35:7d:df:0f:87:cb:99:54:c2:33:9e:
         7d:0b:c8:e1:f2:af:77:9b:89:10:b4:f4:e3:a5:e8:44:39:b3:
         27:e2:e0:1a:8c:42:d8:6c:cc:0d:30:22:9c:5f:13:25:a7:1d:
         63:11:ff:a8:34:c6:25:07:7e:74:17:c3:89:e1:af:2f:15:60:
         6a:38:40:a7:ee:59:ff:dd:65:8d:df:ba:00:04:7c:cd:15:7c:
         0b:7c:8b:1f:1a:80:6b:f2:3a:ff:12:47:f0:a7:99:48:32:2d:
         92:ff:9f:28:f4:fe:64:23:70:33:ce:1a:df:e6:4f:4e:84:06:
         bc:ef:72:c0:18:73:ff:69:5b:9b:0c:c2:c6:88:db:04:4d:63:
         fe:20:c4:6b:10:81:4c:f6:c3:e9:00:a0:26:19:67:90:96:cb:
         cb:8b:e4:91:58:61:45:d2:c7:30:fa:f7:fc:fc:2b:90:24:90:
         5a:52:dc:14:c4:49:f0:e1:23:1b:4f:b2:68:3f:56:07:2f:0e:
         5f:41:db:ba:db:39:7b:37:7b:fa:27:78:35:14:01:ed:2d:a6:
         58:b3:67:96
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Nov 25 03:24:05 2024 by rpki-client on console-ams.rpki-client.org