Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c8edd8f9-a4c3-35e8-8227-1ca8a0adaaa7.roa
File:                     c8edd8f9-a4c3-35e8-8227-1ca8a0adaaa7.roa (raw, json)
Hash identifier:          7f6GG38WMVSoB3VE1WECOesSrjjPy3E0ns/40r2WJAI=
Subject key identifier:   E6:AA:1E:A0:74:2A:47:66:0C:03:87:60:CD:F0:A4:36:F5:A3:E5:66
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584E210EF8F483AD60B30C66D380
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c8edd8f9-a4c3-35e8-8227-1ca8a0adaaa7.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     1239
IP address blocks:        50.7.24.0/23 maxlen: 24
                          50.7.126.0/23 maxlen: 24
                          50.7.140.0/22 maxlen: 24
                          50.7.164.0/22 maxlen: 24
                          50.7.176.0/22 maxlen: 24
                          50.7.186.0/23 maxlen: 24
                          50.7.236.0/23 maxlen: 24
                          50.7.254.0/24 maxlen: 24
                          66.90.86.0/23 maxlen: 24
                          66.90.120.0/24 maxlen: 24
                          198.16.117.0/24 maxlen: 24
                          198.16.118.0/24 maxlen: 24
                          198.16.123.0/24 maxlen: 24
                          198.16.125.0/24 maxlen: 24
                          198.16.126.0/24 maxlen: 24
                          198.16.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0e:f8:f4:83:ad:60:b3:0c:66:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=825d9283-993e-4480-a629-e02ea815a5eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b3:25:26:59:2f:31:f2:ff:79:09:2a:6a:6e:
                    28:ba:ff:e9:30:18:7e:9c:af:98:06:65:92:32:c8:
                    ef:5d:f7:35:db:7a:ce:9d:b1:47:89:df:3e:57:48:
                    d8:2f:83:61:79:76:6b:b1:f5:88:ed:78:92:b4:da:
                    79:af:19:ee:09:44:d3:58:64:e1:8b:1c:81:da:9d:
                    41:11:b1:3f:07:6e:3a:15:28:67:6b:f3:27:df:aa:
                    61:e1:ce:32:60:20:f7:9b:3a:e9:33:84:ae:e3:8b:
                    d2:ac:ac:40:16:ba:fb:df:4b:00:0c:31:91:af:8f:
                    fd:02:e3:32:00:e7:93:82:91:9b:bc:00:7a:6d:41:
                    6e:ed:bb:d9:d3:f9:2f:5f:d3:95:f5:b9:08:2f:da:
                    36:bb:74:b9:48:e0:8f:03:eb:82:7a:6c:0a:c8:27:
                    10:89:1d:9f:13:b5:d0:d6:5b:4c:7c:8b:fc:7e:cd:
                    b6:d1:b8:01:33:09:be:92:5a:2c:b9:57:74:94:6f:
                    30:38:9a:56:e8:67:14:ee:67:a0:8b:0f:3b:7e:ae:
                    13:67:45:52:8c:c5:0a:5c:4e:78:a3:93:7b:cb:46:
                    8e:b8:61:9f:4f:80:dd:3a:c8:ed:bf:71:98:c8:20:
                    72:70:35:2e:9e:56:cc:50:4c:f2:69:8e:9e:96:f5:
                    cc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:AA:1E:A0:74:2A:47:66:0C:03:87:60:CD:F0:A4:36:F5:A3:E5:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c8edd8f9-a4c3-35e8-8227-1ca8a0adaaa7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.24.0/23
                  50.7.126.0/23
                  50.7.140.0/22
                  50.7.164.0/22
                  50.7.176.0/22
                  50.7.186.0/23
                  50.7.236.0/23
                  50.7.254.0/24
                  66.90.86.0/23
                  66.90.120.0/24
                  198.16.117.0-198.16.118.255
                  198.16.123.0/24
                  198.16.125.0-198.16.127.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:89:1d:74:8a:23:dd:f6:cf:c9:6e:d1:56:b3:72:f4:73:60:
         60:a1:8d:eb:f5:ae:ce:03:24:e1:23:bf:e8:b7:8c:48:e6:76:
         cc:5f:f0:8f:11:0c:a6:79:cb:78:3b:b2:ed:47:2c:3e:a2:ae:
         33:3f:ac:13:11:89:bb:f6:20:23:b9:5a:c0:66:1d:b9:11:4e:
         74:12:b4:7a:3d:6b:0f:24:39:49:d5:58:fe:01:73:6e:4e:fc:
         27:cf:e2:87:cf:b1:b0:45:72:96:7b:9a:e0:76:54:c4:b9:8a:
         d5:98:84:80:3b:3e:8c:2d:30:06:05:87:a9:23:53:82:21:0e:
         92:04:ee:86:f7:89:71:f0:be:18:6a:1d:f2:94:f5:5c:e6:47:
         17:18:08:d0:5f:3c:b7:47:5c:28:89:77:56:b6:a3:bd:9a:86:
         02:01:57:03:3d:45:84:27:73:85:73:ba:19:a0:bb:d0:40:82:
         8a:0c:c7:7a:cf:95:17:d8:a4:3f:64:3c:3d:fe:59:1e:60:5d:
         08:d5:8d:f4:de:bf:f9:8e:d5:1f:6b:fb:30:44:72:f6:47:7a:
         47:10:3d:98:97:21:a5:32:ad:21:02:7c:68:b7:cd:3b:c1:95:
         ac:df:ea:44:c3:ed:6f:85:73:22:bb:69:06:d7:ef:82:2d:a4:
         26:4d:fc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:57:27 2026 by rpki-client