Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c364ae6-3895-3f91-8e07-b33e2bbd7d81.roa
File:                     1c364ae6-3895-3f91-8e07-b33e2bbd7d81.roa (raw, json)
Hash identifier:          jyA2tKPU9xb+N5EO0gH3qmtkTTN8fedakv2KMc80qus=
Subject key identifier:   32:15:53:46:05:8F:E9:9F:CD:A7:70:AB:6E:AD:79:C9:1E:53:01:A7
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584A8B0B74933A57A2662022FD80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c364ae6-3895-3f91-8e07-b33e2bbd7d81.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     7029
IP address blocks:        98.17.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:74:93:3a:57:a2:66:20:22:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=628005b7-7930-43a4-9f9b-380c4a6ca9cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c1:71:d6:a3:47:a2:ce:b0:7d:a9:70:44:c6:
                    8a:ad:54:ec:23:19:7c:2c:8c:c3:7c:77:ee:91:d2:
                    4b:ae:be:99:4e:e0:e1:d2:39:5f:6c:8a:50:41:54:
                    67:d8:7a:51:5a:21:ba:b3:00:aa:d4:9e:f4:aa:de:
                    8e:b2:d1:1a:60:c3:bb:f2:91:f4:d4:b7:bc:3e:c9:
                    e4:87:79:96:c6:14:aa:56:b0:e4:c0:e9:bf:42:05:
                    d3:fc:41:51:d4:29:02:d2:56:dc:33:c9:b9:32:b0:
                    82:00:fa:d2:11:f9:82:8e:af:96:94:fc:ba:19:a7:
                    f5:61:3b:6b:de:1e:7b:e5:b0:1b:05:c5:e5:a2:3c:
                    3e:05:b6:59:59:b3:66:c8:ca:17:d1:0d:b5:28:cc:
                    1d:de:cb:81:87:80:38:db:31:0e:62:58:88:bb:dd:
                    77:1b:2a:be:df:0a:43:dc:75:00:d7:cb:8f:57:3e:
                    c6:f0:4e:d8:91:58:08:2f:d7:78:6e:17:7b:41:81:
                    90:6a:47:f6:e0:bd:37:de:f1:ce:d2:bc:44:a7:68:
                    42:bc:b8:96:a1:69:45:82:98:77:e0:f8:08:7f:30:
                    67:cb:3a:61:48:97:7c:c6:ee:c2:f7:c7:54:fa:e3:
                    3c:12:3d:2c:bd:71:2a:55:82:5c:7b:52:6b:f3:5c:
                    ea:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:15:53:46:05:8F:E9:9F:CD:A7:70:AB:6E:AD:79:C9:1E:53:01:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c364ae6-3895-3f91-8e07-b33e2bbd7d81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.17.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:92:ad:5f:dc:23:76:07:d6:f0:8e:a7:db:7e:e5:9d:46:d6:
         22:1e:c4:7f:79:aa:cb:7e:ae:6d:55:4d:cf:d3:89:e9:b2:00:
         0d:db:3e:e9:d0:41:ce:27:43:c6:35:b9:52:26:5a:bb:58:c4:
         b0:3b:8d:24:67:d7:06:f2:1f:ac:05:b6:8f:b4:d4:fe:1b:de:
         1a:0a:49:b5:f8:86:b9:62:03:55:4d:52:c5:ae:86:85:8d:b2:
         de:91:39:c2:73:17:6f:c7:1e:16:13:15:42:eb:1e:48:06:61:
         2c:2d:25:9c:e4:05:83:3b:be:0d:c2:80:66:5c:99:ae:22:e9:
         f7:7e:1a:b6:16:ec:96:02:dc:31:b1:5f:98:61:fe:28:ba:32:
         9f:9d:dd:94:5d:c8:39:c1:6a:1c:35:8e:87:be:5f:a6:7f:99:
         6b:a3:b8:21:09:72:8e:02:4c:37:83:90:3d:53:64:eb:61:de:
         67:c0:04:d0:60:20:76:e8:c7:a1:8b:7b:f8:5b:f4:c8:3e:14:
         35:c3:8b:93:36:d6:07:2f:6e:63:8d:66:e3:21:54:ef:a2:2e:
         b9:74:95:66:a2:43:ae:e5:14:5c:f0:2e:93:fe:b7:7e:71:aa:
         67:08:8e:02:f2:ad:ec:e2:4e:be:70:12:3c:08:ae:d9:b6:60:
         dc:be:38:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:31:41 2025 by rpki-client