Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d332597c-9bdd-36d2-9637-73c4c9fce066.roa
File:                     d332597c-9bdd-36d2-9637-73c4c9fce066.roa (raw, json)
Hash identifier:          0QLHLuUL80Di7VhQzMuaeo7uXEricmgNerbEjWbm2us=
Subject key identifier:   39:EB:75:53:10:66:C7:58:04:96:42:79:DF:59:A0:59:F8:7C:8F:18
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285849B14A1A9A2028D702D3B767C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d332597c-9bdd-36d2-9637-73c4c9fce066.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     7029
IP address blocks:        216.97.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:1a:9a:20:28:d7:02:d3:b7:67:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=e5ad056e-c82d-4025-86bc-81a043ca0b3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4d:24:2e:07:e4:ff:62:b2:14:da:a6:3e:22:
                    2e:a3:0b:a5:12:23:7c:27:5e:58:47:b4:2d:7a:cb:
                    a8:52:25:b7:b2:7e:43:b4:8f:a1:1e:65:89:17:3f:
                    97:66:8e:ce:3e:7f:8c:dd:73:e0:d9:e1:51:62:2d:
                    ef:28:e8:cb:d3:66:59:85:36:76:35:d9:23:24:47:
                    7c:ef:64:e9:6a:d9:e5:fc:4d:20:8b:0b:80:bd:4a:
                    3e:36:0f:de:bd:df:6b:26:35:30:45:ad:6a:32:a6:
                    07:f2:6e:fb:77:f7:10:b0:ba:65:ad:b3:12:ca:63:
                    ae:3b:d1:ff:de:dd:35:fe:a1:46:14:b6:87:71:50:
                    31:48:7f:70:b3:56:a9:9a:8a:db:75:d9:68:02:52:
                    69:1e:0f:43:e9:4b:8b:c4:d2:50:66:a6:17:d8:ac:
                    cd:77:ce:6e:a3:3d:0e:fc:fe:68:af:69:16:5e:1d:
                    09:17:92:7e:00:8b:a6:08:aa:4b:a2:ab:97:4d:94:
                    17:aa:3e:6b:85:ff:9b:52:f4:d6:4a:9b:fb:17:8b:
                    05:bb:85:17:ff:93:e5:6b:56:0a:a2:f7:e8:f4:7a:
                    7a:93:fb:bb:ce:7f:c5:47:be:20:53:7c:22:5e:60:
                    b2:32:88:e5:96:59:3b:8a:b9:4e:9e:31:45:5c:5d:
                    d8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:EB:75:53:10:66:C7:58:04:96:42:79:DF:59:A0:59:F8:7C:8F:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d332597c-9bdd-36d2-9637-73c4c9fce066.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:37:df:20:95:7e:95:00:53:34:22:93:b5:70:ed:11:67:60:
         b2:05:e6:c9:5b:1b:14:52:4f:7e:fd:0a:27:df:0c:aa:a6:df:
         79:3e:4a:f0:39:3c:4d:74:65:d6:35:a2:7d:19:9d:b6:d4:f4:
         21:98:84:f1:60:17:59:88:79:cd:ac:07:81:d6:fb:e4:3e:cd:
         b0:f3:11:d9:16:87:f9:9f:97:fa:d5:17:85:a6:80:55:a8:af:
         96:d1:9a:06:a5:91:41:4f:ae:83:ca:b0:6f:38:04:14:c2:17:
         17:cf:e5:18:dd:6f:bc:22:c4:8a:6e:14:05:a0:fb:b1:54:34:
         7e:2e:7f:e5:10:6b:34:75:0b:05:f2:f3:12:96:0b:a6:02:0a:
         6a:d2:c4:ae:3b:b0:0c:30:75:db:47:f3:e8:85:bb:6c:51:d8:
         fe:36:95:f9:16:2a:9f:41:ee:1d:94:75:9a:ae:72:e5:ca:7f:
         bd:1c:0d:05:ae:f9:18:ea:df:9b:89:fe:c6:97:08:74:c2:ee:
         0c:31:74:9f:99:67:a6:2e:5d:c8:7a:63:1e:92:96:6e:16:69:
         ab:62:86:33:c9:88:4a:b1:dc:f0:50:bd:b8:c3:7b:0e:a7:5e:
         4a:7a:c5:92:9b:6a:25:6b:ef:05:5b:1a:a8:3a:b6:3c:5e:c9:
         d1:99:e0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 14:03:07 2025 by rpki-client