Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ac1987c-f88d-3172-a637-1190e9dafcde.roa
File:                     8ac1987c-f88d-3172-a637-1190e9dafcde.roa (raw, json)
Hash identifier:          55hEtddsOJiAW1cykcJFl18JT8u7mg4DekjP2C2VQLk=
Subject key identifier:   AA:F2:AF:43:33:99:69:96:E1:D9:8B:83:19:D3:A0:59:3D:A3:2D:19
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584B944223AB07298802FF85E700
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ac1987c-f88d-3172-a637-1190e9dafcde.roa
Signing time:             Mon 20 Oct 2025 01:00:31 +0000
ROA not before:           Mon 20 Oct 2025 01:00:31 +0000
ROA not after:            Sun 18 Jan 2026 02:00:31 +0000
asID:                     7029
IP address blocks:        75.91.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:94:42:23:ab:07:29:88:02:ff:85:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Oct 20 01:00:31 2025 GMT
            Not After : Jan 18 02:00:31 2026 GMT
        Subject: CN=1c924f49-f561-47a8-9ac9-4ddf753d19a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:60:02:a1:c1:b2:3c:66:25:85:2a:72:77:77:
                    ad:f3:99:9e:f5:6f:5f:77:86:e6:ae:82:58:fc:95:
                    70:00:e2:5f:ae:ce:a1:11:0e:cd:34:14:3a:89:37:
                    aa:a1:e6:1b:65:97:f0:14:de:77:16:bb:c4:12:58:
                    76:f0:9e:52:30:c2:88:3c:b1:b0:9e:85:b3:d0:ce:
                    5c:04:7e:01:62:8c:cb:60:a5:f6:75:8d:74:ce:88:
                    05:fe:a4:0c:a7:1e:81:95:5c:e1:e6:2c:88:76:be:
                    f1:b3:8e:57:67:da:9f:fa:16:68:24:8a:82:13:86:
                    c9:ab:d9:60:c7:6b:cc:ad:b3:4b:af:7c:40:18:58:
                    bf:17:26:6e:c9:3c:d9:3b:e8:d8:08:cd:80:4d:c1:
                    7c:77:c7:3b:ad:d7:f2:82:67:2c:5d:d9:df:dc:07:
                    71:3d:67:62:37:5b:8c:44:8b:e4:f3:9b:9c:c9:e0:
                    a2:59:97:af:24:1b:e7:7e:b2:0a:0c:40:88:2a:14:
                    e5:5f:22:9f:1b:45:99:75:69:06:39:71:15:24:6f:
                    bd:a1:8c:39:89:5f:16:9f:76:5b:13:c7:f0:d4:f4:
                    f5:91:04:4d:a5:6f:1d:e1:be:f3:0f:64:e2:36:77:
                    a1:07:0a:1c:cb:41:e0:53:69:a0:91:27:95:28:67:
                    71:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F2:AF:43:33:99:69:96:E1:D9:8B:83:19:D3:A0:59:3D:A3:2D:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ac1987c-f88d-3172-a637-1190e9dafcde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.91.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:38:68:25:ec:d0:92:e1:ae:87:89:f9:4b:a3:07:50:e6:c4:
         df:09:2b:2f:5a:a5:ec:a5:90:00:29:f2:9b:f3:8a:c0:be:6a:
         2e:d5:58:3b:7c:81:02:92:52:f8:ce:a7:70:e1:1b:04:2a:72:
         0f:85:9c:b4:8d:9a:16:7c:90:60:af:ea:dc:13:41:48:82:3e:
         b1:10:8a:26:b1:41:7a:0d:f3:91:8f:bf:3b:4f:e9:55:04:07:
         7d:7a:e9:e5:c9:21:95:8a:c1:d6:fb:83:59:33:88:a8:00:55:
         82:58:43:93:91:b1:d9:3e:55:0e:cb:88:96:7b:7e:1b:97:55:
         57:92:cc:70:cc:26:bd:49:f0:66:52:9e:6c:c3:47:3d:1b:ef:
         44:b6:58:59:6b:87:16:68:45:58:5c:64:7d:0a:60:8a:78:3c:
         ac:c2:4f:7b:68:0b:ec:1b:57:3a:c8:c0:74:f0:9e:67:5b:a4:
         e0:ab:52:21:8d:2d:1b:08:c2:5a:2f:e6:24:ae:99:62:29:3a:
         09:5d:4f:a9:f2:20:c1:36:1e:b0:f0:53:dc:26:bc:2e:bf:64:
         4b:24:a3:c2:f2:ca:9e:dc:a7:c0:f4:9d:f9:69:c0:46:6b:43:
         d5:0f:a3:f0:30:ed:4b:24:93:d2:27:38:e7:7f:33:3f:56:50:
         6e:c8:ca:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:44:57 2025 by rpki-client