Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/118eaf2e-733e-34b1-a27c-5888e86eadd2.roa
File:                     118eaf2e-733e-34b1-a27c-5888e86eadd2.roa (raw, json)
Hash identifier:          n8SLGnKjSmDqA2WEl4YeXX3zz6CR+YyNpis/7AcGoso=
Subject key identifier:   05:0F:C0:88:18:FA:0A:EE:6A:10:AA:EF:A4:AF:C5:00:1E:9E:54:48
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285849ABB492CB5EEA03E5AE56D700
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/118eaf2e-733e-34b1-a27c-5888e86eadd2.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     7029
IP address blocks:        71.31.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:92:cb:5e:ea:03:e5:ae:56:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=08483da3-26b5-477b-b2ab-29e8dccf13af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1f:21:e8:be:94:22:1c:94:0c:17:a1:d1:91:
                    bc:a1:8e:0e:f3:4e:19:ef:cb:eb:ff:63:af:45:07:
                    73:27:98:78:fb:dd:4a:81:19:cf:fb:dc:38:40:3a:
                    cf:97:00:4d:d7:70:3e:b3:d9:09:8a:8d:4e:4c:d2:
                    0e:bc:ef:c3:61:1b:d7:d1:18:91:8c:69:56:6d:c7:
                    0e:7d:4e:50:e4:2d:21:5d:90:e0:04:9d:94:b0:7e:
                    ec:b1:e5:a7:3d:07:04:84:ff:74:9b:96:55:81:56:
                    16:4c:fd:50:c7:c8:6f:0f:d1:3e:29:10:e4:74:dd:
                    53:bf:33:37:e9:46:1f:a8:b1:7c:e7:cd:30:74:30:
                    d2:97:ed:8c:5e:da:98:39:8e:d9:dc:90:81:7e:80:
                    c4:a4:eb:9a:58:f4:d0:cf:ec:fc:a5:f0:b7:f4:05:
                    c1:9f:24:ea:5e:5f:f2:67:cb:4f:79:f0:3a:b5:af:
                    13:cb:58:14:ec:e5:2b:d2:95:91:fb:ed:74:0a:d0:
                    ea:e3:c7:a3:06:ac:cd:57:f5:7f:94:eb:8a:7b:fc:
                    8b:ea:c5:e3:86:f8:39:0e:49:95:69:5b:d1:1b:53:
                    af:bb:27:59:a1:b3:41:90:b9:b5:ad:21:03:c7:c6:
                    11:f6:52:f2:a7:5d:4d:e2:8b:db:13:19:76:97:ed:
                    bc:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:0F:C0:88:18:FA:0A:EE:6A:10:AA:EF:A4:AF:C5:00:1E:9E:54:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/118eaf2e-733e-34b1-a27c-5888e86eadd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.31.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:e8:f9:b5:d3:fa:0e:b2:69:b2:48:7b:86:e4:20:7c:e5:89:
         d1:b5:90:fb:ce:bf:d5:b5:e8:91:a8:95:9e:a2:2f:e0:da:a6:
         79:9a:ed:80:a8:0e:e4:35:0b:c5:72:88:a6:fe:37:cf:56:55:
         4a:56:da:d3:21:c0:f1:7b:02:9b:5c:e0:35:b5:3f:1b:fc:ae:
         2d:2d:89:54:93:99:1c:3f:6f:95:38:df:46:07:f7:b7:ba:0d:
         57:b7:fe:e1:7c:6e:a9:5d:d2:1e:52:1a:2e:a0:4e:45:8f:14:
         86:e4:c4:9d:c8:67:af:27:7b:a0:3e:89:37:e4:f3:d2:1b:a9:
         54:d4:7f:5e:5f:d4:ba:3c:02:89:32:4e:90:b2:bc:11:76:3f:
         78:b9:c0:3c:a6:33:f5:b1:13:a7:4f:a0:50:bd:44:b8:2e:93:
         bb:04:2e:ac:6c:29:30:b8:10:bc:a0:21:0e:9a:c6:98:4e:1a:
         a8:8a:fa:8c:c0:d5:18:4f:1b:e7:26:42:59:49:67:ba:eb:31:
         db:d0:86:b3:88:97:af:f6:26:9e:75:80:ac:c2:1b:9c:26:f8:
         52:91:21:16:03:dd:f4:ea:07:58:17:f1:97:c8:23:11:0a:b2:
         a8:5e:ee:5b:71:bf:d2:78:10:6d:d9:29:8a:39:bc:f1:8f:ba:
         e0:00:98:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 16:50:05 2025 by rpki-client