Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/07f45c16-c50d-398f-9782-09e8e37bc032.roa
File:                     07f45c16-c50d-398f-9782-09e8e37bc032.roa (raw, json)
Hash identifier:          cxkJqE5wbylLfWTqjdYKx/JKiM4DWlG01TjCbMc+Rfc=
Subject key identifier:   05:E2:1D:0D:6D:AC:54:CE:C7:19:A6:4D:67:80:0C:33:85:8A:E3:C1
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584979744554EF61CDEC24EC5E40
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/07f45c16-c50d-398f-9782-09e8e37bc032.roa
Signing time:             Thu 10 Apr 2025 01:00:46 +0000
ROA not before:           Thu 10 Apr 2025 01:00:46 +0000
ROA not after:            Wed 09 Jul 2025 01:00:46 +0000
asID:                     1239
IP address blocks:        50.7.172.0/22 maxlen: 22
                          50.7.180.0/22 maxlen: 22
                          2001:49f0:d018::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:79:74:45:54:ef:61:cd:ec:24:ec:5e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Apr 10 01:00:46 2025 GMT
            Not After : Jul  9 01:00:46 2025 GMT
        Subject: CN=66ef3e9a-d0c5-44a3-90f3-e202139129a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c7:77:39:97:26:19:8c:2c:11:37:c9:39:0a:
                    7f:cb:48:ae:df:ed:71:2f:80:78:17:c3:6f:c3:75:
                    a8:56:6d:2b:91:01:69:24:1c:a0:58:d4:c0:d1:2f:
                    92:c5:3a:b1:0c:54:3d:d6:fb:d6:f7:92:1a:7e:1c:
                    58:20:6f:50:8a:c3:6a:c1:30:da:ad:b4:09:f4:b0:
                    69:db:33:04:24:8b:50:2c:0a:b1:2b:e7:c7:71:0b:
                    ad:93:d7:c3:c6:f6:32:5c:49:bc:86:d7:fb:f9:ea:
                    ba:77:ba:8e:7b:15:88:ff:22:96:fb:a1:81:91:9f:
                    a6:68:b8:fa:86:ad:62:df:61:07:03:6b:5b:d6:c0:
                    7a:cd:36:0e:0f:11:e7:00:73:3e:e6:da:0f:f9:25:
                    af:02:cb:0d:e4:1c:5a:0b:6d:43:e2:86:cf:09:bb:
                    40:69:63:0d:07:f0:5f:08:65:f4:51:3d:5c:cc:f6:
                    b0:04:03:23:95:d8:84:40:b4:30:d3:5b:ac:9f:ad:
                    9a:7f:ac:f0:3d:86:ba:c9:b5:1a:b1:ac:a5:f8:d2:
                    74:55:2d:70:bf:f2:89:06:fc:2f:c4:94:c5:9a:bc:
                    ea:33:a9:62:a0:29:1e:29:9d:c4:eb:f6:78:1c:ad:
                    f8:03:dd:de:4c:54:5a:79:1f:cb:ed:b3:99:d8:83:
                    93:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E2:1D:0D:6D:AC:54:CE:C7:19:A6:4D:67:80:0C:33:85:8A:E3:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/07f45c16-c50d-398f-9782-09e8e37bc032.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.172.0/22
                  50.7.180.0/22
                IPv6:
                  2001:49f0:d018::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:ae:75:a2:9c:67:eb:c7:68:86:e1:ed:43:45:52:09:30:ea:
         6f:b7:a8:49:12:95:11:c8:8a:2c:ee:88:a1:61:e1:c3:e7:d8:
         34:34:59:8e:1e:54:aa:8d:69:72:d8:51:11:5a:39:11:b2:db:
         a7:25:0e:ea:da:ee:f9:c9:9a:07:18:90:d3:52:7e:f3:2c:b4:
         6d:97:62:3c:2d:bd:4c:fa:bd:9b:d1:9e:45:d0:c8:fe:fd:98:
         ba:3c:66:1c:29:fe:f2:34:78:d1:52:6f:70:fa:4f:a4:c0:c0:
         0c:5d:9b:af:d3:51:d8:cc:67:f1:fd:14:59:e7:65:ba:a9:04:
         58:dd:d5:37:ef:b7:14:22:ca:17:b6:a3:0a:e6:19:fa:d4:55:
         c5:10:1e:e6:79:2b:79:6d:79:43:4a:56:18:20:ad:29:af:c5:
         5b:f4:c5:44:ba:fa:98:f5:40:a2:49:a9:bf:c9:1b:8b:79:73:
         9f:f4:26:bd:3e:22:2f:15:b7:85:05:87:42:43:41:14:ee:ae:
         fa:c0:70:c1:82:1b:34:20:ef:cf:6c:f5:99:de:9b:4c:48:33:
         9f:fc:2c:7b:45:a6:d2:cb:1c:37:b7:99:89:5f:b0:dc:01:fd:
         ad:c8:de:d6:73:87:10:d3:b6:28:e3:9f:a1:1b:0a:6c:6b:57:
         e9:dc:ca:b7
-----BEGIN CERTIFICATE-----
MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEl5dEVU72HN7CTsXkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI1MDQxMDAxMDA0NloXDTI1MDcwOTAxMDA0NlowLzEtMCsGA1UEAxMk
NjZlZjNlOWEtZDBjNS00NGEzLTkwZjMtZTIwMjEzOTEyOWE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsd3OZcmGYwsETfJOQp/y0iu3+1xL4B4F8Nv
w3WoVm0rkQFpJBygWNTA0S+SxTqxDFQ91vvW95IafhxYIG9QisNqwTDarbQJ9LBp
2zMEJItQLAqxK+fHcQutk9fDxvYyXEm8htf7+eq6d7qOexWI/yKW+6GBkZ+maLj6
hq1i32EHA2tb1sB6zTYODxHnAHM+5toP+SWvAssN5BxaC21D4obPCbtAaWMNB/Bf
CGX0UT1czPawBAMjldiEQLQw01usn62af6zwPYa6ybUasayl+NJ0VS1wv/KJBvwv
xJTFmrzqM6lioCkeKZ3E6/Z4HK34A93eTFRaeR/L7bOZ2IOTgwIDAQABo4IDbDCC
A2gwHQYDVR0OBBYEFAXiHQ1trFTOxxmmTWeADDOFiuPBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMDdmNDVjMTYtYzUwZC0z
OThmLTk3ODItMDllOGUzN2JjMDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCMgesAwQC
Mge0MA8EAgACMAkDBwAgAUnw0BgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6
MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr
aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAcq51opxn68dohuHtQ0VSCTDq
b7eoSRKVEciKLO6IoWHhw+fYNDRZjh5Uqo1pcthREVo5EbLbpyUO6tru+cmaBxiQ
01J+8yy0bZdiPC29TPq9m9GeRdDI/v2YujxmHCn+8jR40VJvcPpPpMDADF2br9NR
2Mxn8f0UWedluqkEWN3VN++3FCLKF7ajCuYZ+tRVxRAe5nkreW15Q0pWGCCtKa/F
W/TFRLr6mPVAokmpv8kbi3lzn/QmvT4iLxW3hQWHQkNBFO6u+sBwwYIbNCDvz2z1
md6bTEgzn/wse0Wm0sscN7eZiV+w3AH9rcje1nOHENO2KOOfoRsKbGtX6dzKtw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:31:57 2025 by rpki-client