Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/43b1bbb9-556c-3851-b071-e28fdd67564e.roa
File:                     43b1bbb9-556c-3851-b071-e28fdd67564e.roa (raw, json)
Hash identifier:          RqqwMW6r3dI4To0cGGLo3SDxGpnos+kybphIrpFKLX0=
Subject key identifier:   A7:E3:85:69:04:BB:F2:33:0A:D7:9B:F2:21:ED:32:0F:B8:A5:7D:82
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584D59EAB4A7C9524CF61AF92C00
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/43b1bbb9-556c-3851-b071-e28fdd67564e.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     30058
IP address blocks:        50.7.44.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:b4:a7:c9:52:4c:f6:1a:f9:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=39da54b4-e91c-48c3-b125-116a1c254cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:19:f8:ea:7e:df:d3:f3:3a:90:99:84:b7:62:
                    03:df:5a:3e:55:a7:68:7f:68:88:e4:8e:53:26:7c:
                    fc:ce:f5:0c:3a:ce:07:b3:e7:81:82:08:c8:32:b3:
                    a6:d7:32:86:f1:a5:5a:f0:52:a9:a0:96:5f:3c:27:
                    0b:0d:07:b8:7a:83:75:f2:0f:88:12:e5:ef:b8:19:
                    17:30:12:67:dc:90:9f:9e:81:d2:ab:86:98:36:83:
                    90:12:a5:dc:a0:7e:85:23:d2:2a:7c:86:97:1a:ea:
                    ad:e0:28:8a:b3:88:68:bd:42:14:0b:1f:f6:e4:43:
                    e9:e8:c6:60:82:af:c2:69:bf:f4:2c:a1:26:94:61:
                    18:6f:ce:cb:40:42:cf:7a:3e:61:82:cc:ff:66:be:
                    7a:97:8d:14:63:bb:de:a8:b5:63:65:58:6c:62:6d:
                    b2:4f:82:03:44:49:f7:da:dd:67:37:9e:0b:46:b0:
                    84:33:79:0a:eb:3e:b3:6b:a7:07:71:e3:15:78:8a:
                    2c:b8:9d:0a:d1:c0:07:95:08:0b:43:e8:30:7a:2a:
                    30:c2:de:db:c5:6e:45:71:82:74:7f:24:48:18:c2:
                    c4:d2:84:44:b9:28:a3:7a:bb:f8:18:28:45:d6:4e:
                    dc:ae:c2:74:b2:a6:4e:0e:37:a1:6d:f3:43:e4:3a:
                    c2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E3:85:69:04:BB:F2:33:0A:D7:9B:F2:21:ED:32:0F:B8:A5:7D:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/43b1bbb9-556c-3851-b071-e28fdd67564e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:00:83:44:d0:cb:6d:f2:4d:2e:f3:b7:4f:bf:72:5f:86:76:
         20:16:b8:55:58:e6:19:03:55:78:3e:14:e0:0b:b3:82:ea:4b:
         65:8e:1b:b1:ec:f5:86:fa:f6:83:e9:3b:7f:81:3d:cd:57:4a:
         0e:61:e7:f3:81:99:87:65:4a:07:bd:43:c6:20:16:e2:54:c6:
         8c:2d:61:11:3c:39:f5:44:22:a6:9d:45:27:4a:ae:f5:3c:63:
         f5:75:22:ac:7b:ef:32:68:6a:37:44:ee:3e:1c:cb:ed:9f:d1:
         dd:65:d7:51:6b:54:46:68:cd:f3:70:e7:b4:0c:a0:a1:86:b6:
         e1:f0:dd:7b:e7:98:1f:8e:83:6b:16:46:6f:0a:1d:80:1f:48:
         bc:ac:9f:76:80:51:8a:50:30:20:d2:0a:f9:e2:43:70:24:76:
         3e:2c:f8:9a:27:f9:11:78:0c:2a:e6:21:98:2e:48:d8:a3:74:
         ae:1a:fa:04:07:74:20:e3:c3:a9:11:c7:1a:84:12:e9:d8:9e:
         a4:a0:47:ad:7f:02:e7:32:26:5c:a0:71:f6:68:f7:95:95:7c:
         90:e2:aa:25:5a:6f:69:1e:52:91:ad:93:d3:e0:88:ad:1e:31:
         28:0f:d6:08:d4:04:23:ec:25:df:a7:2c:14:d2:a2:63:74:6c:
         b6:11:68:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6rSnyVJM9hr5LAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk
MzlkYTU0YjQtZTkxYy00OGMzLWIxMjUtMTE2YTFjMjU0Y2I3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBn46n7f0/M6kJmEt2ID31o+Vadof2iI5I5T
Jnz8zvUMOs4Hs+eBggjIMrOm1zKG8aVa8FKpoJZfPCcLDQe4eoN18g+IEuXvuBkX
MBJn3JCfnoHSq4aYNoOQEqXcoH6FI9IqfIaXGuqt4CiKs4hovUIUCx/25EPp6MZg
gq/Cab/0LKEmlGEYb87LQELPej5hgsz/Zr56l40UY7veqLVjZVhsYm2yT4IDREn3
2t1nN54LRrCEM3kK6z6za6cHceMVeIosuJ0K0cAHlQgLQ+gweiowwt7bxW5FcYJ0
fyRIGMLE0oREuSijerv4GChF1k7crsJ0sqZODjehbfND5DrC5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKfjhWkEu/IzCteb8iHtMg+4pX2CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvNDNiMWJiYjktNTU2Yy0z
ODUxLWIwNzEtZTI4ZmRkNjc1NjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMgcsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEgAg0TQy23yTS7zt0+/cl+GdiAWuFVY5hkDVXg+FOALs4LqS2WOG7Hs
9Yb69oPpO3+BPc1XSg5h5/OBmYdlSge9Q8YgFuJUxowtYRE8OfVEIqadRSdKrvU8
Y/V1Iqx77zJoajdE7j4cy+2f0d1l11FrVEZozfNw57QMoKGGtuHw3XvnmB+Og2sW
Rm8KHYAfSLysn3aAUYpQMCDSCvniQ3Akdj4s+Jon+RF4DCrmIZguSNijdK4a+gQH
dCDjw6kRxxqEEunYnqSgR61/AucyJlygcfZo95WVfJDiqiVab2keUpGtk9PgiK0e
MSgP1gjUBCPsJd+nLBTSomN0bLYRaA8=
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:05:42 2026 by rpki-client