Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/09c0e019-397b-38de-81b2-2590c6a1d473.roa
File:                     09c0e019-397b-38de-81b2-2590c6a1d473.roa (raw, json)
Hash identifier:          kOrXM+g9ySt/iNGT9HdoKsVii8mW03nEMhTezThFPTw=
Subject key identifier:   9D:91:19:0C:0C:C1:4B:77:AB:6F:66:E5:71:49:66:5A:08:24:2E:6E
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285849B14A392AD03EC089FB93FDC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/09c0e019-397b-38de-81b2-2590c6a1d473.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     7029
IP address blocks:        63.131.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:39:2a:d0:3e:c0:89:fb:93:fd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=702f818b-e50c-4199-b191-50d6dd72aa40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:07:e2:07:6b:c7:40:4f:aa:41:9d:db:f0:e8:
                    2c:ec:18:a3:36:c0:7a:2e:cb:ed:98:22:9e:01:13:
                    82:82:9d:13:a7:87:0a:1b:23:9a:dd:40:c4:47:eb:
                    4c:13:fd:12:2e:4f:a9:26:3e:b4:20:df:b7:8f:1c:
                    0d:de:e1:f2:b1:46:16:d3:b2:3c:ca:56:be:ad:34:
                    65:61:f6:08:b4:aa:0e:2a:0c:ac:db:a1:62:c0:14:
                    7f:dd:7e:92:13:8c:b1:2d:5a:eb:23:15:70:e3:b8:
                    15:31:34:04:88:25:e9:71:55:31:aa:95:4a:31:45:
                    cd:1c:2b:72:f5:f5:06:ee:e4:81:81:36:b0:b2:dd:
                    c2:b0:e8:33:a6:84:c8:7b:28:98:d4:d2:ff:d4:da:
                    07:45:b7:95:ae:d9:e7:c9:43:bb:53:1a:11:1d:74:
                    ae:b6:50:78:87:a3:11:28:08:45:31:40:68:12:c9:
                    8c:2f:66:c7:4b:d0:92:6e:d3:2a:96:73:aa:30:38:
                    8b:76:ad:4b:56:5b:2b:81:c3:af:8f:e2:8f:0a:27:
                    eb:70:eb:9d:e3:0c:ea:a4:8e:35:39:c7:38:ac:6c:
                    0b:4f:f1:f6:0d:57:8e:49:be:4b:e9:18:a8:17:06:
                    95:d9:5a:eb:88:00:ae:a3:89:0b:62:a4:b2:31:c0:
                    27:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:91:19:0C:0C:C1:4B:77:AB:6F:66:E5:71:49:66:5A:08:24:2E:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/09c0e019-397b-38de-81b2-2590c6a1d473.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.131.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:43:b0:6e:1f:18:57:c8:95:63:ac:f5:99:4f:28:a3:74:d6:
         c9:6b:1d:7b:8c:87:bb:c5:6f:4a:58:6f:7f:37:15:fb:37:cb:
         80:1c:db:ca:29:bd:71:e1:83:c8:d5:35:70:a8:9d:40:4e:94:
         ce:3a:7e:31:f3:40:d3:9f:d4:54:98:6d:c1:b6:8e:89:06:df:
         b3:0b:4e:6d:bc:49:58:c8:72:f0:d6:94:bd:71:39:2e:a2:ab:
         54:45:7d:e8:b4:87:17:2c:72:32:a5:5c:4f:d9:aa:ad:2d:ef:
         3e:28:32:c3:09:bd:52:ff:ed:ae:78:0b:2b:d0:d6:7f:56:ad:
         9d:8f:26:eb:38:03:26:6c:61:9d:18:38:8c:0e:6c:bf:19:2d:
         52:46:fe:40:31:6f:11:bf:f8:4a:df:10:a3:80:d2:ad:5a:68:
         a4:ee:6d:37:83:75:2e:04:11:bc:f0:69:95:28:35:09:62:98:
         e1:57:b4:8a:d7:16:b7:aa:31:89:21:dd:0d:f7:83:36:38:8b:
         cc:34:a6:c9:b5:aa:4a:70:12:e7:35:bf:cf:38:51:76:c1:70:
         b9:f7:cb:89:98:1d:ea:f0:15:9c:56:8d:7f:e8:58:f3:5e:db:
         4d:de:1d:5e:c6:88:de:48:19:8d:cd:6b:2f:2b:25:61:91:e2:
         98:ff:51:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:21:27 2025 by rpki-client