Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0ff36b0e-3d65-356c-bde3-a24b1028422c.roa
File:                     0ff36b0e-3d65-356c-bde3-a24b1028422c.roa (raw, json)
Hash identifier:          B11Og0hQ0RNDSDvTJ4OT+ZKUh1scZZYqPQSxpx+hhDc=
Subject key identifier:   D5:F4:04:3A:C8:73:A7:B8:DF:E2:3E:B2:9D:80:4A:A7:BA:09:33:06
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584A03A5398FEAD478ED30FD3F80
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0ff36b0e-3d65-356c-bde3-a24b1028422c.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     30058
IP address blocks:        50.7.32.0/23 maxlen: 24
                          50.7.51.0/24 maxlen: 24
                          2001:49f0:d0e4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:39:8f:ea:d4:78:ed:30:fd:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=9b1ecb70-d2f5-4331-8343-db39866730e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:66:e8:fc:5b:9b:32:f0:4a:19:b2:39:c7:a0:
                    f7:a8:62:e6:aa:28:4a:ff:c5:9b:17:7c:31:7f:b7:
                    57:01:24:bc:63:a4:81:d7:14:12:3d:aa:1a:21:43:
                    a4:e8:4f:27:6f:1a:35:ce:0d:e0:40:1b:7e:ec:28:
                    c3:ad:45:8d:70:a9:1e:c9:12:97:e1:28:f5:98:88:
                    99:b4:6e:72:76:63:cd:b1:d2:cb:a5:7c:b8:7b:c2:
                    7e:37:60:9b:26:be:40:a2:48:50:ef:d7:68:1a:74:
                    3b:55:93:e6:fd:fd:9f:a1:a0:9f:06:37:1c:0f:40:
                    af:4a:1d:e7:16:58:4e:69:4e:40:12:1d:65:6d:9c:
                    e8:b6:b3:40:3a:9c:9c:5f:93:ce:f2:e8:1b:1b:8a:
                    f4:38:9a:9d:ec:08:ee:5a:ba:cc:2c:a2:99:0f:cd:
                    dc:86:c9:a7:f3:24:91:65:67:1d:80:84:51:02:a6:
                    4a:25:52:12:da:d1:d7:b5:d1:9e:55:89:7b:89:42:
                    f8:e5:e4:cb:88:75:6a:19:e2:60:b1:8b:40:a5:4a:
                    0e:47:f6:b2:1c:50:17:f8:4a:1c:b4:21:72:e5:91:
                    9d:8b:b5:4b:f3:d4:64:c0:27:39:41:63:76:b4:ce:
                    28:56:c4:c1:a7:42:03:50:15:1f:31:36:2f:80:08:
                    d9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F4:04:3A:C8:73:A7:B8:DF:E2:3E:B2:9D:80:4A:A7:BA:09:33:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0ff36b0e-3d65-356c-bde3-a24b1028422c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.32.0/23
                  50.7.51.0/24
                IPv6:
                  2001:49f0:d0e4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:14:46:cf:4d:75:0b:9c:80:eb:4e:d6:fd:82:df:50:c5:8d:
         da:c2:4d:c8:57:56:67:a3:9b:96:11:a5:8d:d5:9e:a5:05:e9:
         76:4b:ea:07:87:47:36:cb:b2:cf:64:81:13:f2:12:9c:d0:1e:
         15:29:aa:48:55:a5:60:e2:bf:6d:59:d6:d5:1d:bb:f0:8f:70:
         06:01:21:b4:57:d9:7d:8d:18:c9:83:e9:2a:0b:d9:69:e2:00:
         8b:49:eb:f9:12:f5:00:94:0e:93:5d:a2:7f:7d:d8:d0:b4:2b:
         e3:6d:e7:3d:98:a2:2e:86:a1:85:8b:2a:84:48:f1:91:da:cb:
         a0:c9:4b:8a:43:8e:27:c3:fd:b9:81:ff:b3:74:bd:62:b6:d8:
         c1:0d:b5:ef:2b:e3:35:ae:6b:b2:04:c2:40:7d:af:43:c5:cf:
         0c:5d:d7:5c:11:9c:34:14:e3:82:5e:13:cb:f6:0d:78:0c:b9:
         5f:52:3d:0c:18:19:2d:ad:b0:15:54:63:89:1a:21:c0:79:da:
         49:d7:23:c0:e0:34:78:19:57:77:18:11:6d:2f:2b:49:db:b2:
         49:46:76:eb:3e:11:ae:56:1b:53:47:c4:5b:ef:b7:08:3f:a4:
         7b:44:f6:07:ea:3b:73:b5:71:5c:c8:ec:7b:6d:7b:37:8d:65:
         91:c8:cc:a4
-----BEGIN CERTIFICATE-----
MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEoDpTmP6tR47TD9P4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk
OWIxZWNiNzAtZDJmNS00MzMxLTgzNDMtZGIzOTg2NjczMGUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWbo/FubMvBKGbI5x6D3qGLmqihK/8WbF3wx
f7dXASS8Y6SB1xQSPaoaIUOk6E8nbxo1zg3gQBt+7CjDrUWNcKkeyRKX4Sj1mIiZ
tG5ydmPNsdLLpXy4e8J+N2CbJr5AokhQ79doGnQ7VZPm/f2foaCfBjccD0CvSh3n
FlhOaU5AEh1lbZzotrNAOpycX5PO8ugbG4r0OJqd7AjuWrrMLKKZD83chsmn8ySR
ZWcdgIRRAqZKJVIS2tHXtdGeVYl7iUL45eTLiHVqGeJgsYtApUoOR/ayHFAX+Eoc
tCFy5ZGdi7VL89RkwCc5QWN2tM4oVsTBp0IDUBUfMTYvgAjZxQIDAQABo4IDbDCC
A2gwHQYDVR0OBBYEFNX0BDrIc6e43+I+sp2ASqe6CTMGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMGZmMzZiMGUtM2Q2NS0z
NTZjLWJkZTMtYTI0YjEwMjg0MjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBMgcgAwQA
MgczMA8EAgACMAkDBwAgAUnw0OQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6
MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr
aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAeRRGz011C5yA607W/YLfUMWN
2sJNyFdWZ6OblhGljdWepQXpdkvqB4dHNsuyz2SBE/ISnNAeFSmqSFWlYOK/bVnW
1R278I9wBgEhtFfZfY0YyYPpKgvZaeIAi0nr+RL1AJQOk12if33Y0LQr423nPZii
LoahhYsqhEjxkdrLoMlLikOOJ8P9uYH/s3S9YrbYwQ217yvjNa5rsgTCQH2vQ8XP
DF3XXBGcNBTjgl4Ty/YNeAy5X1I9DBgZLa2wFVRjiRohwHnaSdcjwOA0eBlXdxgR
bS8rSduySUZ26z4RrlYbU0fEW++3CD+ke0T2B+o7c7VxXMjse217N41lkcjMpA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:32:37 2025 by rpki-client