Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/2d32619c-1494-3ea5-9e53-bd103716ae4c.roa
File:                     2d32619c-1494-3ea5-9e53-bd103716ae4c.roa (raw, json)
Hash identifier:          BK/mCF1Ndgg3PpVz4pPRmUGmzipvi41mkwGFFFsqMxo=
Subject key identifier:   8D:73:5A:46:4C:75:B6:4F:43:80:B2:CF:4E:2F:48:85:44:3F:42:DF
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285849998F3B877A02809767606A80
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/2d32619c-1494-3ea5-9e53-bd103716ae4c.roa
Signing time:             Mon 21 Apr 2025 13:00:59 +0000
ROA not before:           Mon 21 Apr 2025 13:00:59 +0000
ROA not after:            Sun 20 Jul 2025 13:00:59 +0000
asID:                     30058
IP address blocks:        50.7.53.0/24 maxlen: 24
                          50.7.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:99:8f:3b:87:7a:02:80:97:67:60:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Apr 21 13:00:59 2025 GMT
            Not After : Jul 20 13:00:59 2025 GMT
        Subject: CN=7164dd2d-23a9-440c-90da-7066d17a5c4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:17:97:8c:1f:bb:76:f9:fd:4b:13:45:5a:9b:
                    76:70:31:13:19:66:6d:f5:85:0e:54:05:59:7a:b4:
                    6b:f1:16:d6:7e:ec:27:6d:f2:dd:9d:7d:b7:da:b8:
                    c1:04:fa:7c:b0:0d:6f:0a:ae:6a:a3:60:e4:16:54:
                    3b:6d:bd:ff:e3:02:54:1f:04:d5:af:26:5e:88:30:
                    eb:b9:c1:51:5c:51:d2:67:fc:cb:42:ca:34:08:de:
                    db:eb:dd:57:7d:91:b4:7b:3b:23:c3:6e:be:0d:de:
                    55:88:2c:93:aa:14:a4:49:43:52:5f:6a:08:4f:84:
                    f6:af:c6:0c:93:11:4e:32:88:74:2e:7e:01:31:06:
                    50:84:06:19:dc:42:56:a8:79:65:a6:7f:a5:ad:27:
                    60:7b:5c:6d:ae:a4:00:33:10:74:c9:dc:ab:dc:8d:
                    97:d5:72:f6:f5:ce:6c:3d:7a:f9:01:42:e2:ad:14:
                    92:73:e9:6f:a1:23:4e:fc:56:46:d5:3c:3b:0a:f8:
                    13:dd:71:47:63:f0:cb:4a:57:d4:2b:b0:ff:0e:1b:
                    a5:97:77:1c:44:ef:ec:ce:ac:b5:3c:8a:47:2f:50:
                    a3:83:1b:a7:66:6d:e2:b5:e2:28:fc:fb:d8:5e:23:
                    ed:61:fd:d6:dd:5b:a7:37:b5:b9:70:69:5e:bc:09:
                    db:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:73:5A:46:4C:75:B6:4F:43:80:B2:CF:4E:2F:48:85:44:3F:42:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/2d32619c-1494-3ea5-9e53-bd103716ae4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.53.0-50.7.54.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:2b:6d:51:06:cb:e3:ac:ed:04:97:97:83:b6:8f:38:4f:c5:
         71:7a:95:f5:5d:ad:fe:8c:35:1d:6b:43:0b:66:54:f5:2e:db:
         28:10:1b:b3:aa:9e:37:c1:00:ed:0c:9b:97:6c:a1:da:d8:28:
         4a:f2:78:4d:0e:2d:a3:c0:fc:0a:d6:9e:b7:b3:b9:63:90:7b:
         dd:02:6c:ff:09:d0:51:16:72:ee:68:eb:b8:16:01:b6:87:d1:
         c7:92:3c:02:78:47:39:f9:18:8f:c3:84:04:c0:ae:f3:d4:c9:
         f0:72:05:45:21:55:22:aa:45:d7:01:e3:a1:7f:3c:e0:5a:04:
         87:d4:cb:2c:14:e4:11:55:2f:7f:69:30:67:ee:db:0a:0a:35:
         2b:72:d7:ed:88:91:85:42:d5:59:e3:92:38:97:ec:cc:34:01:
         37:af:75:6f:d7:55:14:1e:51:6e:97:13:bf:8f:f7:b5:a4:0a:
         be:f6:7b:a7:e8:67:df:28:fb:b1:fd:4b:ce:0a:d9:99:94:41:
         5a:18:2d:6b:7a:b7:1d:7f:21:d0:81:52:ac:a5:6c:87:12:d3:
         1f:3a:09:eb:ac:8c:4b:cc:ca:bb:33:06:00:c4:ae:11:04:36:
         19:40:47:81:93:8c:3e:40:2f:bb:79:4c:f3:19:d4:28:f5:0f:
         f9:90:4d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:41:33 2025 by rpki-client