Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7dd4c02a-5ee8-3d01-bdf1-cb5a5d68b0fa.roa
File:                     7dd4c02a-5ee8-3d01-bdf1-cb5a5d68b0fa.roa (raw, json)
Hash identifier:          Aua/fKN6/iMf1favmyeINc4DehsJJO32wGKhG3V72EQ=
Subject key identifier:   FF:CA:42:5C:81:2D:5E:1E:54:12:A2:A2:A1:A6:4C:D0:18:A1:7D:48
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584B94422462C48781EBB90ADB12
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7dd4c02a-5ee8-3d01-bdf1-cb5a5d68b0fa.roa
Signing time:             Mon 20 Oct 2025 01:00:31 +0000
ROA not before:           Mon 20 Oct 2025 01:00:31 +0000
ROA not after:            Sun 18 Jan 2026 02:00:31 +0000
asID:                     7029
IP address blocks:        75.117.84.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:94:42:24:62:c4:87:81:eb:b9:0a:db:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Oct 20 01:00:31 2025 GMT
            Not After : Jan 18 02:00:31 2026 GMT
        Subject: CN=f27d19c6-de2d-48cd-b2eb-1aee384b9c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:06:00:4b:49:e9:6c:54:c0:40:27:4b:75:3e:
                    7b:b0:69:c7:6a:e8:f9:ab:c9:76:3d:c7:92:11:4a:
                    59:3b:76:ee:a5:5f:9f:3f:57:1f:e9:08:b0:e4:5d:
                    ab:e4:69:92:2d:63:05:5b:3e:0c:9b:a9:24:bc:ba:
                    25:43:e7:8f:af:b9:b1:80:6c:13:56:cd:ad:1c:bc:
                    6f:b8:64:0b:b3:d3:0a:f8:d9:fe:d2:4b:62:49:ea:
                    ef:e0:7b:3f:e9:41:09:13:61:85:b9:cb:61:9f:26:
                    63:d7:c7:96:08:66:ba:59:ae:f2:06:b9:f5:6c:d3:
                    7b:0e:53:66:e2:29:4a:e3:7c:95:67:43:01:bd:cf:
                    a0:8f:64:ab:46:d4:58:62:b5:4a:35:98:0f:f8:ec:
                    54:a6:1c:86:18:81:59:d3:9d:4b:55:a0:4a:77:f5:
                    f6:83:52:a5:c0:7a:eb:7b:62:0c:1f:f5:17:64:8b:
                    84:b7:fa:34:c8:9a:78:7b:43:0d:5d:d1:a6:c4:3a:
                    ae:b0:09:6c:57:76:6d:81:98:f0:63:88:48:f7:c8:
                    ef:14:f8:3e:ca:25:89:a3:bc:78:5b:2f:eb:db:0b:
                    b6:a4:00:bb:19:6e:17:10:bf:57:39:fc:65:1a:f0:
                    8b:7a:10:c7:75:c6:a6:4c:5e:31:7f:6d:26:2a:db:
                    29:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:CA:42:5C:81:2D:5E:1E:54:12:A2:A2:A1:A6:4C:D0:18:A1:7D:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7dd4c02a-5ee8-3d01-bdf1-cb5a5d68b0fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.117.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:55:f7:2c:02:52:16:80:04:65:bb:9f:ec:90:b3:36:52:98:
         d4:4d:0c:ce:7a:11:dc:aa:3c:d1:7e:6d:de:32:94:ef:c2:9e:
         0a:16:48:2f:9a:19:b7:59:8d:b8:3c:ed:fe:eb:1c:d5:14:ab:
         00:17:b7:0f:b7:d3:5c:9b:bc:08:89:23:9e:5e:73:7e:4f:64:
         55:4c:47:a8:cb:3c:b5:d0:77:be:d9:bf:f7:1e:27:bc:69:8c:
         24:13:43:86:0d:45:f0:3c:27:85:b2:27:a7:4e:52:68:00:bd:
         e4:27:c3:46:17:9c:1a:ee:62:33:f4:05:aa:42:1a:94:79:bb:
         d7:c1:cc:2b:05:d5:47:c3:1a:8c:c6:b3:3c:ec:55:7d:57:72:
         be:94:31:56:eb:19:bf:32:39:86:22:74:e6:0c:08:4c:5a:c1:
         f4:c8:8c:5e:d3:30:33:ea:51:3a:57:f6:9f:8b:5b:8c:29:40:
         aa:c0:83:be:eb:d5:a2:5e:34:7f:0b:ea:b1:25:1a:ad:dc:2f:
         87:45:01:b5:1c:b8:cf:0a:c1:ff:81:e1:63:4c:3c:3e:81:57:
         58:7f:da:fc:71:33:c8:26:45:aa:f8:6b:3e:01:ff:3d:32:85:
         da:10:20:b8:d6:fa:ad:9c:30:51:f8:7d:76:a4:b0:08:29:0d:
         88:ec:a7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:07:47 2025 by rpki-client