Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12745f0e-e662-342d-905f-96f848e71092.roa
File:                     12745f0e-e662-342d-905f-96f848e71092.roa (raw, json)
Hash identifier:          m0pMa/wrCjKKYNwfNJmyFSjazhl6YZHL0SdiVotxC2I=
Subject key identifier:   04:18:43:BF:27:8D:BA:5B:6B:1F:02:42:8B:43:93:D1:F0:A2:6E:91
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584A9900CA6C60F75DF881D5BC80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12745f0e-e662-342d-905f-96f848e71092.roa
Signing time:             Tue 22 Jul 2025 01:00:50 +0000
ROA not before:           Tue 22 Jul 2025 01:00:50 +0000
ROA not after:            Mon 20 Oct 2025 01:00:50 +0000
asID:                     7029
IP address blocks:        75.88.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:99:00:ca:6c:60:f7:5d:f8:81:d5:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 22 01:00:50 2025 GMT
            Not After : Oct 20 01:00:50 2025 GMT
        Subject: CN=b9ec96dd-83c0-4d11-8541-c6cf5226febf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8b:fe:92:9f:49:01:2d:27:32:ff:1d:23:99:
                    82:24:96:5a:09:19:c3:43:dd:8d:6d:38:e2:89:7c:
                    ea:3b:c4:f2:8a:c9:db:93:44:fb:3f:ed:73:fb:c8:
                    d8:39:54:ee:18:7b:97:21:8a:93:29:21:41:41:46:
                    12:88:d1:38:fc:2e:21:2b:a0:1d:9f:ef:43:d3:86:
                    ec:d2:ce:00:5d:8f:a6:e4:ad:64:53:9e:38:70:59:
                    a3:a6:09:fe:0a:b6:fb:77:ad:93:19:27:6f:4d:48:
                    cc:ea:60:88:69:0a:9c:49:2f:49:91:c0:be:f5:f5:
                    09:ef:db:c6:06:f2:d0:9e:60:6f:c0:d8:e2:f8:35:
                    c3:53:74:ad:f6:bb:1e:62:31:74:15:b6:3d:19:6b:
                    f8:3a:34:a5:9b:32:86:65:5e:2b:2a:e6:83:e7:8d:
                    8b:d9:91:59:9f:32:b8:2f:dd:cc:2f:9b:5c:63:89:
                    73:50:e5:64:88:ec:66:23:56:41:ee:32:d1:35:22:
                    45:65:53:e7:3e:39:39:db:98:40:03:0d:7a:55:13:
                    6d:d7:df:a8:40:fd:19:ca:39:65:ec:3c:b5:26:aa:
                    ed:f7:38:2b:fc:a6:fd:f4:62:c3:23:15:ab:60:eb:
                    95:47:5a:06:3a:d8:45:56:12:2d:46:f7:37:d9:7d:
                    cc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:18:43:BF:27:8D:BA:5B:6B:1F:02:42:8B:43:93:D1:F0:A2:6E:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12745f0e-e662-342d-905f-96f848e71092.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.88.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:ea:77:f2:c5:85:8d:03:db:1b:d5:42:b0:30:93:59:32:b4:
         09:99:7e:67:79:1c:4f:cc:fa:e1:78:52:13:28:29:c4:74:9d:
         c5:1e:47:98:54:31:82:3d:b7:22:b7:76:ec:83:f6:d8:59:4e:
         a0:a6:b6:b5:f7:20:6e:00:7d:e5:98:fe:d0:39:04:3d:7d:97:
         63:f1:d7:2b:34:bc:a7:04:66:ec:f8:2f:97:45:3c:1e:d5:bd:
         2e:0f:97:f2:9a:02:98:a3:6a:1a:68:3c:0b:20:32:09:b4:6d:
         9f:8e:c8:5f:43:0a:c6:ac:08:57:ec:6d:ca:3f:88:29:9e:5f:
         b0:28:ba:45:84:50:e9:ff:85:21:39:57:0f:4d:bc:7f:58:5d:
         4b:e0:f9:9e:ae:e8:33:84:fb:5b:29:68:cf:c9:e8:a1:95:35:
         fe:a7:9d:82:02:84:81:b5:4d:90:01:bf:0e:7e:7f:e0:aa:c6:
         27:b6:90:d9:81:53:fc:48:3c:26:8f:0d:bb:10:64:67:42:9a:
         d7:ae:74:15:69:d1:65:d1:77:2d:d1:cb:87:e7:aa:26:d6:10:
         3e:82:e3:ea:68:1a:b8:5e:3e:f4:72:c9:8f:70:02:a4:3c:d2:
         2d:0b:f9:74:56:28:26:20:fa:6a:0e:e1:ae:b6:29:ea:e8:1d:
         8e:da:5e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:39:41 2025 by rpki-client