Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3f195750-2f0c-32d2-8737-8a441a517bf6.roa
File:                     3f195750-2f0c-32d2-8737-8a441a517bf6.roa (raw, json)
Hash identifier:          UMGVMSLHk9kDAlrMgP2IZEBlC9xnrSCriKzxiaaxzeQ=
Subject key identifier:   8E:DB:1F:82:F2:BB:A6:A2:C8:D2:EA:B0:E7:DB:E2:62:A1:C3:3B:E6
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584A2C202C979B7F6529813EB570
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3f195750-2f0c-32d2-8737-8a441a517bf6.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     20337
IP address blocks:        66.19.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:2c:97:9b:7f:65:29:81:3e:b5:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=a8d78733-a07a-46fe-89e4-b3fcb07adc42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fe:30:3f:ce:40:48:ee:e9:41:6d:f9:e2:7a:
                    2a:fe:6d:a3:fb:ae:ce:b0:45:ed:77:10:25:81:51:
                    f6:12:90:87:33:9d:16:04:54:1f:71:6c:18:90:2e:
                    9d:54:b0:ff:7d:0e:f0:5a:25:74:51:26:7a:72:fc:
                    14:f9:42:e1:fe:e4:e0:73:cd:eb:36:6f:f9:62:05:
                    4e:f8:7b:9f:5e:5e:4a:29:95:28:02:dc:24:06:c5:
                    c7:32:a8:d7:89:96:bd:1c:ba:47:bb:1c:c9:c9:a9:
                    03:1f:3b:89:b4:73:0f:23:b7:31:d2:75:36:1d:61:
                    d0:0f:16:f0:e5:b0:6c:45:ac:0e:d4:7d:34:2c:d2:
                    3c:29:8c:92:3a:26:8f:10:6b:ab:8c:6e:b1:f7:21:
                    c7:9f:ff:ea:ce:0a:ff:7e:c6:bf:0c:46:65:f4:a9:
                    44:6f:8b:09:f7:4c:34:22:1c:12:65:ac:cf:0c:0c:
                    7d:f5:5c:2a:76:62:3f:e8:09:92:fb:a6:d9:61:48:
                    5e:e3:b5:d8:bd:3f:5d:b4:a1:e6:21:00:16:36:ad:
                    3c:1a:9b:bb:35:a3:8b:a9:69:2f:3f:c8:a0:bd:a3:
                    e6:f3:4c:2e:d6:15:5c:3b:ca:ed:16:b8:7c:b5:cf:
                    27:e2:8c:69:1b:5a:0d:60:f1:05:d4:37:b8:1f:72:
                    e5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:DB:1F:82:F2:BB:A6:A2:C8:D2:EA:B0:E7:DB:E2:62:A1:C3:3B:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3f195750-2f0c-32d2-8737-8a441a517bf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.19.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:89:43:9b:cb:c2:eb:3f:0c:14:e2:3d:21:d0:06:c0:6c:d2:
         19:3e:4d:42:7b:5b:56:40:19:39:53:06:6f:fd:bb:4d:3b:9f:
         cc:0f:58:5a:54:73:39:4b:c1:14:81:f0:12:3d:57:69:ff:ba:
         3d:52:8f:bb:a6:47:6f:73:3a:b4:57:f4:b4:c7:a1:06:59:b9:
         09:68:94:38:4b:ee:d4:0c:24:ae:65:67:16:6c:47:46:97:b3:
         b8:00:2c:c8:39:0a:2b:00:ec:43:99:ef:a4:db:49:f3:50:c8:
         a6:22:b8:79:7f:df:c7:8e:b4:1b:a6:a5:08:b7:21:44:4f:53:
         44:8e:2e:7d:d4:42:64:2e:d9:ee:9d:4b:59:b5:ea:64:1f:bb:
         e2:e8:05:39:e0:19:5d:70:3e:30:8a:7e:b5:a6:44:e2:e1:5d:
         2a:7e:3e:3d:51:38:1b:22:62:31:cf:e8:e9:27:50:07:d6:a3:
         51:c8:d5:a2:20:bb:09:46:9a:7b:15:46:17:82:18:7b:d2:3f:
         22:e4:91:94:1e:89:cb:27:8e:31:0f:21:6f:98:20:8e:9e:1a:
         ed:56:33:03:79:bf:89:fe:a6:97:93:fb:2b:d9:06:06:ab:cd:
         dc:fa:7d:29:6d:cc:7b:28:80:e3:43:fd:80:70:2c:eb:58:30:
         52:00:09:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:30:01 2025 by rpki-client