Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ac0e2073-91e7-3500-8d0b-ef84269d7ed4.roa
File:                     ac0e2073-91e7-3500-8d0b-ef84269d7ed4.roa (raw, json)
Hash identifier:          imvTdJrYSWfdYphPVa/kytzLZUopgslBHe3FZVq+80o=
Subject key identifier:   27:98:BB:C6:60:97:11:F3:6A:1E:40:27:D4:23:E3:1C:B7:2A:A1:41
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285849ABB49319F520237C600EFB40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ac0e2073-91e7-3500-8d0b-ef84269d7ed4.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     7029
IP address blocks:        75.90.48.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:93:19:f5:20:23:7c:60:0e:fb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=7b89b38b-57f8-4255-8c18-6048656f853b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:87:55:ed:bc:44:12:7a:e0:ff:bc:fd:8d:ea:
                    61:41:a2:11:ef:e8:42:89:32:a2:ab:90:d1:42:4d:
                    1c:02:b2:c3:67:82:97:c5:bd:f1:71:94:f5:92:63:
                    85:ba:5d:1b:70:6b:81:27:56:ea:84:84:a9:5d:be:
                    ee:6f:55:93:e6:85:3f:20:8c:66:cf:e3:92:a4:bb:
                    f5:52:8b:64:a9:f5:5e:13:77:ee:a8:c6:d0:4d:fe:
                    3a:89:91:4a:25:78:7c:a7:83:85:cd:68:93:60:b1:
                    b6:5e:17:0d:98:69:12:da:61:9b:81:9a:01:75:c4:
                    7e:f0:e7:83:01:24:85:bf:90:e4:8d:c8:f8:3c:f7:
                    13:5d:dc:28:30:1a:ed:cf:5e:9b:ab:2d:47:e5:da:
                    86:0a:28:dd:50:b6:7f:9d:b2:b3:df:c8:e8:30:79:
                    b7:72:76:24:d2:4c:a2:48:79:f6:b0:61:d6:55:10:
                    e7:b4:09:55:5a:40:a2:33:54:8e:bf:f0:53:98:f7:
                    9c:70:ad:e3:e3:96:c4:30:ed:76:1e:83:1d:e5:0a:
                    93:a9:be:ce:99:b1:ea:ab:f0:7b:35:dc:7a:ef:d3:
                    5b:8a:de:3e:08:16:25:c3:dc:a6:d7:80:8c:6b:1d:
                    9b:f8:10:93:7d:a5:4b:0d:7d:35:1e:98:0e:2f:2e:
                    81:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:98:BB:C6:60:97:11:F3:6A:1E:40:27:D4:23:E3:1C:B7:2A:A1:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ac0e2073-91e7-3500-8d0b-ef84269d7ed4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.90.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:33:c3:68:e2:22:4f:18:eb:cc:a0:88:ec:84:d9:15:a7:48:
         37:09:da:42:51:eb:5e:23:80:30:6b:10:75:2f:0b:00:1e:1f:
         67:82:92:d9:82:f9:87:cd:4d:cb:38:2a:11:31:ce:aa:9d:06:
         ce:21:13:2e:8c:5c:e8:75:3d:87:68:0f:38:54:fe:76:69:b7:
         ed:1f:de:18:94:6b:e7:ee:53:35:50:5b:2f:cd:6a:e5:ac:90:
         4b:01:a6:0c:6b:0f:3f:e1:e1:a3:01:df:ee:32:46:81:7c:47:
         b0:8f:45:db:23:fa:54:2d:f7:7c:e5:4b:d4:ec:b5:d0:be:63:
         0e:65:4d:5e:7a:6a:f7:88:1e:84:be:69:c5:44:4a:ee:70:b5:
         ec:c2:64:4d:61:c3:9e:7e:88:f2:16:7f:07:9f:32:60:a3:d4:
         38:cf:02:fd:91:72:e2:01:9b:b8:bb:ae:ef:bb:d9:be:c5:29:
         79:5d:56:4f:b9:7e:0e:74:e1:0a:19:aa:bb:7c:7f:e0:a7:76:
         96:a9:be:df:a8:15:50:87:36:f6:06:b1:71:6c:2f:66:04:15:
         8b:76:65:f4:d7:da:7a:e9:bb:03:f1:35:a8:39:0c:66:ac:3b:
         60:72:f3:f8:cf:c7:c9:f2:da:cb:67:83:c8:2d:28:2b:24:2b:
         84:3e:43:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:02:14 2025 by rpki-client