Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1da50353-f473-3027-9512-8f06238fa823.roa
File:                     1da50353-f473-3027-9512-8f06238fa823.roa (raw, json)
Hash identifier:          OmU/r+WcppO/cOJ4k5PToqsYhZuuf8VeW5w0pVtwDVs=
Subject key identifier:   DC:A5:62:39:C5:9A:3A:46:25:F8:20:4F:D0:1E:13:F4:82:7D:3A:56
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584AF256870F551793A06449E380
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1da50353-f473-3027-9512-8f06238fa823.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     174
IP address blocks:        2001:49f0:d049::/48 maxlen: 48
                          2001:49f0:d04a::/48 maxlen: 48
                          2001:49f0:d077::/48 maxlen: 48
                          2001:49f0:d078::/48 maxlen: 48
                          2001:49f0:d07a::/48 maxlen: 48
                          2001:49f0:d07b::/48 maxlen: 48
                          2001:49f0:d07d::/48 maxlen: 48
                          2001:49f0:d07e::/48 maxlen: 48
                          2001:49f0:d07f::/48 maxlen: 48
                          2001:49f0:d081::/48 maxlen: 48
                          2001:49f0:d082::/48 maxlen: 48
                          2001:49f0:d083::/48 maxlen: 48
                          2001:49f0:d084::/48 maxlen: 48
                          2001:49f0:d087::/48 maxlen: 48
                          2001:49f0:d089::/48 maxlen: 48
                          2001:49f0:d08a::/48 maxlen: 48
                          2001:49f0:d08f::/48 maxlen: 48
                          2001:49f0:d097::/49 maxlen: 49
                          2001:49f0:d0a5::/48 maxlen: 48
                          2001:49f0:d0b2::/48 maxlen: 48
                          2001:49f0:d0b3::/48 maxlen: 48
                          2001:49f0:d0b4::/48 maxlen: 48
                          2001:49f0:d0b5::/48 maxlen: 48
                          2001:49f0:d0b6::/48 maxlen: 48
                          2001:49f0:d0d5::/48 maxlen: 48
                          2001:49f0:d0d6::/48 maxlen: 48
                          2001:49f0:d0d7::/48 maxlen: 48
                          2001:49f0:d0dd::/48 maxlen: 48
                          2001:49f0:d0e1::/48 maxlen: 48
                          2001:49f0:d0e2::/48 maxlen: 48
                          2001:49f0:d0e3::/48 maxlen: 48
                          2001:49f0:d105::/48 maxlen: 48
                          2001:49f0:d106::/48 maxlen: 48
                          2001:49f0:d107::/48 maxlen: 48
                          2001:49f0:d108::/48 maxlen: 48
                          2001:49f0:d109::/48 maxlen: 48
                          2001:49f0:d10a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:87:0f:55:17:93:a0:64:49:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=b6ffc68d-2731-493c-8de1-70b254782694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a9:f6:1d:b9:ee:18:80:3d:69:c0:67:2d:d8:
                    3c:f7:04:54:fc:89:28:3e:21:67:99:ed:12:a8:9f:
                    7b:0c:86:5e:89:c9:1a:b5:49:df:90:72:55:e8:b3:
                    a8:19:d3:ec:5c:95:d2:ec:e1:71:9b:1b:e8:38:c0:
                    36:74:1a:c5:41:77:b5:55:ad:26:c2:69:a6:a6:5d:
                    a5:bc:e7:a3:24:aa:2b:16:2e:ea:54:9d:cb:a7:ca:
                    ec:2b:41:b7:40:13:13:77:66:05:33:d3:8c:b6:da:
                    fd:65:b3:73:16:ce:30:18:1d:07:38:7a:4d:0d:47:
                    2c:f4:0b:98:a6:ac:dc:ec:a2:31:04:2f:31:a9:25:
                    90:07:47:19:50:8d:55:c4:d6:b8:d8:63:2b:b8:5e:
                    7b:2d:ab:f0:7a:ae:b8:3a:b6:6c:84:8f:c3:8d:ac:
                    2c:89:9a:ee:67:45:ff:e7:d3:41:47:8d:4a:e2:14:
                    e1:6c:af:f5:e0:5b:8d:29:90:86:32:32:1f:ab:48:
                    1b:54:7d:c1:55:85:c8:95:e8:b1:9a:88:e1:02:9c:
                    ba:1f:24:a7:24:23:79:20:8d:5a:40:b7:76:57:ac:
                    e8:dd:09:d7:1b:b2:21:f8:96:35:4a:79:d6:3b:f9:
                    5f:8c:b6:11:e7:10:6a:d2:b5:40:54:d8:22:35:d7:
                    5a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A5:62:39:C5:9A:3A:46:25:F8:20:4F:D0:1E:13:F4:82:7D:3A:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1da50353-f473-3027-9512-8f06238fa823.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49f0:d049::-2001:49f0:d04a:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d077::-2001:49f0:d078:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d07a::/47
                  2001:49f0:d07d::-2001:49f0:d07f:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d081::-2001:49f0:d084:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d087::/48
                  2001:49f0:d089::-2001:49f0:d08a:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d08f::/48
                  2001:49f0:d097::/49
                  2001:49f0:d0a5::/48
                  2001:49f0:d0b2::-2001:49f0:d0b6:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d0d5::-2001:49f0:d0d7:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d0dd::/48
                  2001:49f0:d0e1::-2001:49f0:d0e3:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d105::-2001:49f0:d10a:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:58:70:71:9e:2a:cb:f7:be:1d:6a:c0:8d:47:3b:64:58:59:
         aa:37:6a:72:b5:a0:73:19:ed:e4:52:85:a8:5d:1d:81:7f:d2:
         e8:ae:cb:32:74:10:9f:48:cd:c5:57:4f:b9:73:cf:8f:b2:fc:
         4b:5b:b0:56:09:7d:83:e1:c4:07:38:67:88:24:ae:b1:68:06:
         65:50:40:72:ba:9d:b8:7a:ca:95:e6:3b:37:43:bd:b0:fa:b2:
         c1:95:d0:ff:77:e4:5d:f3:9b:eb:71:1a:80:c5:3b:8f:d4:e5:
         c7:48:f9:07:93:fc:b0:05:35:e5:6c:49:90:d3:9a:5d:07:bc:
         ee:df:4b:ae:e6:da:e7:f7:f5:58:8a:79:3d:cf:c1:25:ad:da:
         c5:c5:2f:7c:43:09:52:af:52:ff:86:06:d4:08:32:fc:f9:03:
         b3:22:ca:34:a2:cb:2a:c4:2e:d0:ee:12:42:04:80:73:38:1e:
         f7:96:e5:1a:c3:7b:f7:8b:07:be:ba:98:5a:a5:e0:db:19:24:
         e9:27:fa:bb:77:02:2f:74:11:04:66:03:37:48:11:01:bd:7a:
         90:9e:ae:95:6f:6f:59:91:6b:6b:49:5e:19:08:56:a5:fe:5b:
         fd:46:96:f8:dc:c8:04:86:e0:1f:ab:55:d5:29:9d:e8:50:ba:
         a6:b5:f9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:32:45 2025 by rpki-client