Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/f0bf0382-21ed-3a77-938b-12a45d4d7c78.roa
File:                     f0bf0382-21ed-3a77-938b-12a45d4d7c78.roa (raw, json)
Hash identifier:          UGcZX4EzwhmFr6PAmzbu2ENQEybfQqm4ze405/avMeY=
Subject key identifier:   1D:04:23:29:3F:5C:66:F8:25:9E:97:32:F8:5F:52:6D:1B:20:47:B1
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584B3821A1AD93ABE3617AEC95E0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/f0bf0382-21ed-3a77-938b-12a45d4d7c78.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     174
IP address blocks:        50.7.128.0/22 maxlen: 22
                          50.7.132.0/22 maxlen: 22
                          50.7.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:a1:ad:93:ab:e3:61:7a:ec:95:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=925c92b4-71df-485e-9ece-06d2e9afe814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:27:cf:93:56:fe:f2:a1:94:aa:8c:56:7e:d9:
                    4c:cd:18:0d:46:44:34:ce:33:86:40:a5:45:9a:3c:
                    2c:d5:2c:2c:8a:6c:8e:c3:b8:e4:85:24:95:51:46:
                    8b:be:37:3c:09:c4:03:d4:36:c3:07:49:1e:7a:5f:
                    6b:a5:60:dc:9e:94:e1:72:1b:b1:05:87:15:50:81:
                    af:5f:c9:05:a5:2d:15:9e:83:7e:bc:1c:32:12:3e:
                    76:fd:fd:01:03:48:ba:f0:6c:e4:b6:98:51:f3:b1:
                    ac:ff:72:21:00:c1:62:35:f2:d1:d7:cc:cd:7b:ed:
                    9c:45:9e:fd:77:0f:20:ef:98:5e:bf:7e:6f:9a:79:
                    2f:ea:0a:d0:51:48:eb:fc:f9:fe:40:d0:c7:b8:6c:
                    31:e4:fb:d8:f8:4a:2c:62:96:64:47:94:14:f3:8d:
                    39:7e:c2:9f:01:b2:20:ef:74:bb:39:6f:51:0d:4c:
                    77:8b:2b:bd:ff:09:ab:fb:68:b6:cc:98:80:ad:e1:
                    4f:01:6d:93:a7:4b:18:3e:f5:89:54:a3:0b:89:80:
                    5a:42:d1:8c:ed:0d:ac:b9:38:a7:d7:46:f0:97:a9:
                    82:37:73:d7:15:31:c5:41:31:80:fb:b2:da:32:bb:
                    40:ab:15:2f:d8:a2:fc:9a:1a:2b:92:22:90:c5:76:
                    9f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:04:23:29:3F:5C:66:F8:25:9E:97:32:F8:5F:52:6D:1B:20:47:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/f0bf0382-21ed-3a77-938b-12a45d4d7c78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.128.0-50.7.139.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:20:c9:c3:ab:7b:5a:89:f9:82:86:4a:26:dd:96:00:41:19:
         23:2e:fe:2d:9b:a0:57:83:9e:94:92:68:b6:51:9d:be:e0:f8:
         59:82:90:32:d0:41:0a:3f:36:d3:ec:2d:40:72:e5:41:00:4a:
         da:34:18:e2:1e:3f:29:37:aa:9c:d0:e3:79:9e:ff:e0:10:42:
         f5:d6:72:8a:fe:e4:73:d4:4b:01:f5:87:fd:cb:bf:53:2c:37:
         14:55:b7:c8:ff:64:77:e3:48:03:38:03:a4:44:ba:17:4b:3f:
         92:d1:45:27:89:ac:ae:77:f9:83:14:2d:31:c0:e6:c6:48:e4:
         fc:1d:c8:d3:21:cc:98:b4:22:f9:60:f3:ec:68:37:29:5a:75:
         c3:1a:70:6c:9f:1b:4f:12:a6:fa:72:08:c5:42:e8:55:a3:48:
         7a:6a:6f:06:5d:8b:0d:79:7d:75:28:4c:7a:24:2c:4d:22:32:
         e9:7a:17:00:8b:9d:53:f7:64:bb:8e:ba:db:98:84:30:61:65:
         54:d3:93:4a:aa:e9:fc:57:f1:63:5e:f7:16:7d:30:3d:ee:1a:
         02:aa:a3:d6:f7:40:43:a4:61:04:0e:84:28:dd:d9:83:0a:47:
         ed:fa:12:71:ec:3f:3e:32:0f:65:70:d0:92:d2:1c:a1:04:7a:
         3c:0a:fc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 20:46:07 2025 by rpki-client