Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fd055926-a691-35d2-8f8a-be5964802b98.roa
File:                     fd055926-a691-35d2-8f8a-be5964802b98.roa (raw, json)
Hash identifier:          vpOyqIx0jd+0TeGxEDLUbqtiM3I8hlw9Vcqzpxhh5Zk=
Subject key identifier:   DB:6E:6C:88:C5:B7:BB:10:04:D0:A5:75:8C:CE:0A:23:C1:E4:25:60
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584A49707C9C841E0D615EEE1B40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fd055926-a691-35d2-8f8a-be5964802b98.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     7029
IP address blocks:        174.131.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:7c:9c:84:1e:0d:61:5e:ee:1b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=789eb795-b808-4ecb-9a53-1295846ee023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:57:7e:f6:db:21:b0:48:ee:d9:02:2d:83:80:
                    c3:4c:62:8f:02:88:2f:2f:3b:a6:a4:6d:1b:28:77:
                    5e:7f:c9:d1:d0:c9:de:7c:4c:d2:b5:54:f9:7a:13:
                    41:1e:b0:b5:a4:70:6f:f4:37:b7:83:2d:e4:e7:1b:
                    f1:49:22:03:e8:48:8a:1b:b0:5d:0d:e1:a7:5a:02:
                    4f:c9:75:6c:8d:04:1e:a4:b3:88:c0:1e:1d:9a:b9:
                    f4:73:1c:dd:c7:48:32:fc:f5:2d:54:d9:99:9a:2e:
                    fd:6e:09:06:6e:69:cf:cf:67:ec:ea:49:bb:53:dc:
                    a9:17:04:a0:44:f5:dc:09:08:4a:ee:ef:6a:f7:88:
                    74:ea:90:f6:c7:b1:5c:d2:70:00:85:15:c5:92:7d:
                    b8:a3:d8:17:25:24:8b:1c:d7:68:35:69:33:71:8f:
                    78:c0:a0:e0:85:48:93:8e:60:34:6a:cc:d2:44:b5:
                    a1:28:c6:1f:a6:4c:26:51:78:47:ad:3a:de:e4:52:
                    cc:90:f2:ec:fd:c1:0b:0e:f1:19:89:fb:0b:d7:94:
                    2b:bd:96:c4:ed:9f:e7:61:f5:ef:6f:61:3b:71:60:
                    50:20:42:0a:aa:32:25:2f:df:55:e7:ce:a1:86:02:
                    01:c4:4e:26:e5:1f:52:97:3d:89:64:46:a0:bb:ef:
                    0e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:6E:6C:88:C5:B7:BB:10:04:D0:A5:75:8C:CE:0A:23:C1:E4:25:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fd055926-a691-35d2-8f8a-be5964802b98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.131.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:b5:8c:13:d8:3f:db:0e:b6:33:aa:fb:f9:2e:d1:15:a9:3a:
         08:0b:ad:44:bd:25:18:5b:88:52:58:27:01:ee:91:55:1f:51:
         35:e0:88:cf:30:34:2a:f9:44:9e:d8:2b:9f:98:8f:ca:28:34:
         c3:f6:d2:1a:29:49:ae:28:57:de:87:db:f4:49:25:9e:c9:f6:
         5a:cb:e3:3f:6f:d4:57:3e:dd:b7:71:bb:99:36:4c:02:f3:e8:
         8d:f6:2b:1a:7f:66:e2:c0:08:b0:1c:71:f4:95:0b:bf:a7:23:
         ee:05:47:f5:73:2f:1b:12:ec:f5:69:d0:94:45:20:2a:70:dc:
         8d:79:d1:be:2b:91:bf:ed:fe:49:37:b1:82:83:16:94:ec:82:
         42:12:a6:12:23:8c:2e:fd:df:cb:75:bc:ab:e2:a9:a7:06:f9:
         80:e3:ba:f7:c8:11:6a:dc:cc:b5:aa:dd:86:5c:76:14:8e:6d:
         8d:a2:68:cb:80:41:43:18:cb:bd:a6:f9:c6:67:56:76:ae:d0:
         e1:da:0e:24:8a:4e:be:d3:e6:ed:82:4f:73:6f:fe:a2:d8:1e:
         e3:6b:75:8e:14:12:d0:64:63:3b:c9:a8:f0:4b:60:d4:02:9c:
         ce:c2:e1:b7:7a:b0:d7:bd:ae:57:bf:82:8a:71:eb:64:eb:eb:
         40:85:ce:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:35:55 2025 by rpki-client