Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1088f935-e5ec-3c0f-ac2a-5f16bcfcb0af.roa
File:                     1088f935-e5ec-3c0f-ac2a-5f16bcfcb0af.roa (raw, json)
Hash identifier:          brhf0a12SIz1W3QPm163G331eQr9QgEi6HQanl+hmzY=
Subject key identifier:   03:2B:89:7C:2F:F7:27:DB:F8:9B:EE:AE:C7:6A:FC:08:F6:10:5C:69
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584A9900CCA021BB5DE7E4034C80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1088f935-e5ec-3c0f-ac2a-5f16bcfcb0af.roa
Signing time:             Tue 22 Jul 2025 01:00:50 +0000
ROA not before:           Tue 22 Jul 2025 01:00:50 +0000
ROA not after:            Mon 20 Oct 2025 01:00:50 +0000
asID:                     7029
IP address blocks:        75.91.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:99:00:cc:a0:21:bb:5d:e7:e4:03:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 22 01:00:50 2025 GMT
            Not After : Oct 20 01:00:50 2025 GMT
        Subject: CN=820ea203-56a6-4525-8219-afbb4c3bac0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:22:ea:c3:ef:70:3b:e2:4e:6c:57:6a:37:94:
                    8e:19:96:d0:dc:e5:45:81:b6:d7:f1:81:30:28:a0:
                    f4:2d:8f:73:29:fc:8a:7a:4d:07:e0:1f:8e:b4:26:
                    92:88:8e:58:06:7a:bc:3f:a8:52:3c:0a:3f:55:e2:
                    88:e7:de:14:02:40:3f:89:2e:e5:f8:e7:4c:17:f8:
                    e2:e4:fb:49:60:8b:88:8c:06:44:79:55:3d:84:57:
                    34:c6:6c:f0:b4:37:03:3c:79:36:b6:a7:03:bc:7e:
                    6f:61:7a:99:b5:71:93:9d:08:c8:ad:b9:2d:7c:dc:
                    01:5c:92:18:1d:48:c5:59:07:14:96:93:62:04:23:
                    ea:e5:08:22:c9:fc:bf:c7:5e:25:ba:39:da:0e:c4:
                    88:38:9f:d7:e2:30:71:05:eb:c4:e9:c1:cd:20:3e:
                    83:17:29:14:d8:93:f0:17:3a:49:f0:43:05:d6:23:
                    c8:02:50:08:29:9e:98:9b:d3:6c:49:3f:09:a6:08:
                    f6:35:4f:20:7b:9d:3c:a0:62:26:9a:96:8a:41:23:
                    85:b6:41:88:5d:7d:a7:e8:55:b1:48:59:a7:5c:44:
                    f5:95:b8:9d:90:4f:bd:03:b4:b9:af:de:90:7b:68:
                    03:ad:35:65:77:45:8b:c3:51:c2:31:31:ab:1a:e7:
                    cd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:2B:89:7C:2F:F7:27:DB:F8:9B:EE:AE:C7:6A:FC:08:F6:10:5C:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1088f935-e5ec-3c0f-ac2a-5f16bcfcb0af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.91.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:17:cf:be:26:cf:44:7c:fa:df:eb:36:81:46:5d:f0:fa:34:
         23:97:f2:c2:12:e5:a6:ce:12:ec:71:5e:f6:47:36:a8:37:ac:
         f2:5b:b5:d4:50:15:2b:88:52:b8:a2:0b:09:e7:b2:d7:83:32:
         8a:8a:a8:5a:c5:d6:79:72:9a:b4:44:1b:6c:fc:08:e0:04:93:
         5d:4f:d0:aa:7a:9e:c9:fd:d4:63:2e:a2:4f:dd:28:9a:61:da:
         d2:2c:31:77:58:4a:a1:4f:81:bb:7d:7d:9f:c2:26:43:f6:38:
         2f:d2:db:69:e9:12:14:16:a3:30:8b:27:d3:3e:0f:24:14:f4:
         de:6d:bb:70:6d:18:38:d7:0f:f1:52:9c:55:95:db:b0:09:9b:
         1c:3c:39:33:4a:ba:b8:81:a3:57:6d:b3:75:44:af:f6:c5:66:
         89:a8:48:74:33:39:fa:64:8c:9e:0d:06:cd:1b:89:15:6e:2f:
         fc:4f:8c:f6:f0:eb:59:a2:38:55:ab:cf:a3:3f:e5:8e:c5:2e:
         5b:ad:7f:b0:19:9e:7d:9e:0b:00:0b:bb:07:07:a1:f0:c8:91:
         47:96:7e:d2:9a:9f:ec:81:f0:ae:95:35:ee:e6:0b:a7:4c:2d:
         eb:a1:bf:ab:de:e8:3b:26:12:88:05:7e:09:b1:67:78:ed:c8:
         53:7d:50:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAMygIbtd5+QDTIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk
ODIwZWEyMDMtNTZhNi00NTI1LTgyMTktYWZiYjRjM2JhYzBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iLqw+9wO+JObFdqN5SOGZbQ3OVFgbbX8YEw
KKD0LY9zKfyKek0H4B+OtCaSiI5YBnq8P6hSPAo/VeKI594UAkA/iS7l+OdMF/ji
5PtJYIuIjAZEeVU9hFc0xmzwtDcDPHk2tqcDvH5vYXqZtXGTnQjIrbktfNwBXJIY
HUjFWQcUlpNiBCPq5Qgiyfy/x14lujnaDsSIOJ/X4jBxBevE6cHNID6DFykU2JPw
FzpJ8EMF1iPIAlAIKZ6Ym9NsST8Jpgj2NU8ge508oGImmpaKQSOFtkGIXX2n6FWx
SFmnXET1lbidkE+9A7S5r96Qe2gDrTVld0WLw1HCMTGrGufN5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAMriXwv9yfb+Jvursdq/Aj2EFxpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTA4OGY5MzUtZTVlYy0z
YzBmLWFjMmEtNWYxNmJjZmNiMGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1vwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFgXz74mz0R8+t/rNoFGXfD6NCOX8sIS5abOEuxxXvZHNqg3rPJbtdRQ
FSuIUriiCwnnsteDMoqKqFrF1nlymrREG2z8COAEk11P0Kp6nsn91GMuok/dKJph
2tIsMXdYSqFPgbt9fZ/CJkP2OC/S22npEhQWozCLJ9M+DyQU9N5tu3BtGDjXD/FS
nFWV27AJmxw8OTNKuriBo1dts3VEr/bFZomoSHQzOfpkjJ4NBs0biRVuL/xPjPbw
61miOFWrz6M/5Y7FLlutf7AZnn2eCwALuwcHofDIkUeWftKan+yB8K6VNe7mC6dM
Leuhv6ve6DsmEogFfgmxZ3jtyFN9UKE=
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:57:26 2025 by rpki-client