Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/353852e9-8244-3a99-a4c3-a3d7d092a01c.roa
File:                     353852e9-8244-3a99-a4c3-a3d7d092a01c.roa (raw, json)
Hash identifier:          +D+yicf7Kypvy1tq4931MTmgViWHWtrcArE1TW0xJmA=
Subject key identifier:   A7:31:66:DE:2D:7F:3E:64:C6:C4:B2:4C:88:17:70:9B:22:7F:E6:8C
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584A90A108F9E2D836A3EF277700
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/353852e9-8244-3a99-a4c3-a3d7d092a01c.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     53286
IP address blocks:        63.139.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a1:08:f9:e2:d8:36:a3:ef:27:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=a5fb8d4d-64b5-4fbd-a193-2a0008db7f41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:46:36:d1:a8:12:61:9c:df:96:3f:49:15:66:
                    a6:e0:38:84:5e:7f:83:00:9e:e7:e6:07:47:6d:39:
                    25:b9:aa:35:fb:e5:7d:5a:c1:8b:a2:ed:3f:56:3a:
                    9c:fd:fe:e7:a4:06:2f:97:b4:85:0b:95:bf:69:b8:
                    a1:80:86:36:03:fa:70:ac:32:42:7a:62:66:1d:d4:
                    fc:e8:7b:28:0b:31:2d:b3:81:dc:9c:09:79:5c:03:
                    c1:e4:30:a0:f8:a5:be:b6:50:b7:55:a4:3d:d3:c6:
                    7c:de:a2:6d:f3:9b:29:82:0d:06:0b:a1:90:fc:c8:
                    d4:db:00:e8:ed:4a:b9:ec:41:f9:66:81:24:05:fe:
                    e6:fb:c1:e4:87:22:0f:77:4d:e8:45:ba:87:5b:55:
                    89:dd:ba:5f:d3:5a:e1:fc:7c:85:06:6b:50:b8:b9:
                    5e:14:72:31:35:5e:a0:f8:ea:34:e5:e9:02:30:fb:
                    13:74:df:7e:5b:e8:cf:e7:d8:75:61:12:aa:33:7e:
                    87:77:8c:08:ca:90:0e:88:d3:47:65:98:b4:7e:53:
                    41:5f:15:9c:db:a9:f1:c6:a1:47:db:c4:5c:71:02:
                    4e:15:f5:22:62:4b:4a:64:ed:cc:bf:37:1b:e1:96:
                    d1:2f:7c:eb:40:65:be:4e:13:4e:17:a2:cb:93:c6:
                    72:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:31:66:DE:2D:7F:3E:64:C6:C4:B2:4C:88:17:70:9B:22:7F:E6:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/353852e9-8244-3a99-a4c3-a3d7d092a01c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.139.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:fe:82:e5:4d:bb:1e:e5:f3:32:9d:2a:33:a4:29:8d:da:cc:
         1d:7b:a4:0d:b9:e3:e3:a3:29:5f:13:77:4a:92:59:87:d2:27:
         46:7d:8a:f3:11:2f:c2:19:db:d8:f4:f6:3b:11:75:9b:4d:ea:
         9c:c8:44:79:56:59:20:b7:c0:2d:7b:aa:b3:c8:ec:9e:87:e4:
         bc:30:c4:34:15:df:72:61:47:aa:98:76:9f:a9:35:dc:65:55:
         55:6d:f9:38:15:0b:f0:4b:9f:ab:12:da:68:7d:a9:43:6c:57:
         7f:39:2f:3c:5e:af:43:26:28:35:44:c3:0c:94:5a:0e:b2:dd:
         51:43:41:23:0c:2c:28:60:e7:5f:1d:f7:f1:c4:d9:50:ce:11:
         10:3e:be:2c:0e:80:17:df:8f:79:12:9c:26:8d:78:de:ac:39:
         42:44:93:81:4d:4e:f2:8a:60:85:98:b4:37:ac:22:61:e0:16:
         ff:2f:8c:a9:27:ae:db:20:6e:2a:62:5e:1c:ae:84:c7:8a:ea:
         0d:fa:f0:7b:9d:9c:47:c5:d7:37:e3:26:fa:b0:b7:41:74:b0:
         53:e4:18:09:67:68:e0:df:29:42:d0:2b:31:ed:e3:65:6e:b4:
         65:76:13:38:63:bb:08:2d:be:71:e7:25:0d:62:e2:10:d0:55:
         54:83:86:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:22:41 2025 by rpki-client