Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a9b9b5d-f359-3547-85d9-3ee904cf5903.roa
File:                     4a9b9b5d-f359-3547-85d9-3ee904cf5903.roa (raw, json)
Hash identifier:          So8spXnKTZv7odnpxAZPGfDwL4xRKxgSfhNVBt6Y37I=
Subject key identifier:   27:29:B2:B4:C0:DC:D3:54:B6:50:AA:09:D9:0F:71:1F:FA:AD:2F:1A
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584A90A108B3F156E9594653CA80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a9b9b5d-f359-3547-85d9-3ee904cf5903.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     40852
IP address blocks:        75.77.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a1:08:b3:f1:56:e9:59:46:53:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=eda5f16b-ca16-439d-8abf-40b1389a2680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:02:ed:5d:47:1b:1f:b4:55:55:64:18:b1:44:
                    91:80:d1:9c:f9:45:80:3c:22:da:7b:ae:27:22:a0:
                    45:50:8a:ee:16:d1:8f:28:db:d4:29:b2:50:f0:ee:
                    4c:1a:b1:53:51:f2:b3:0c:e4:bb:01:c1:f5:4c:28:
                    90:c6:b0:e8:dc:ea:40:be:87:e8:4b:75:20:bb:76:
                    9d:d6:3d:94:d4:80:91:6a:54:45:0c:ea:86:91:44:
                    17:6d:53:46:e0:4d:56:de:23:89:68:ef:38:87:c4:
                    fa:f7:47:c0:21:18:98:07:b2:67:f6:62:8f:0d:8d:
                    ca:c6:ab:09:c7:3f:62:bd:c2:44:4b:e9:99:e3:60:
                    6c:46:68:c7:c4:a1:16:9e:33:61:da:86:e4:fc:c7:
                    ed:28:25:a0:c4:37:04:48:44:30:83:28:d3:56:7a:
                    95:d5:34:9d:c1:23:1a:ba:61:4d:94:02:3f:96:4e:
                    14:e6:62:0b:59:2c:e7:dd:2e:f6:79:9b:4e:20:34:
                    11:ca:0c:a4:b4:bc:40:b3:f3:ca:25:af:4d:ca:86:
                    1a:13:cb:d1:31:05:95:ac:0a:7c:ff:f7:99:62:26:
                    32:91:10:cb:bb:c6:77:58:23:0a:22:a4:a0:c5:49:
                    9f:5f:bd:0c:29:75:b3:77:ca:37:b2:54:e8:08:e9:
                    a4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:29:B2:B4:C0:DC:D3:54:B6:50:AA:09:D9:0F:71:1F:FA:AD:2F:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a9b9b5d-f359-3547-85d9-3ee904cf5903.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.77.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:0e:19:ad:b7:18:3f:75:29:30:c9:a1:ff:77:51:4a:39:61:
         8c:49:2c:1b:7c:64:f5:f4:e2:f4:5a:33:b1:7d:21:4a:86:cb:
         dc:4b:a7:09:1f:09:15:05:4d:cb:54:c3:f8:a1:c7:f8:66:c2:
         36:d2:19:36:ee:ec:56:2b:be:42:25:c7:ba:4c:30:96:50:07:
         13:d1:60:d7:52:45:03:5b:be:c9:83:6a:80:79:aa:03:de:6c:
         84:e3:12:5d:09:fa:fa:81:82:a4:8f:c4:53:85:da:11:1a:f4:
         d5:9d:96:10:2d:ce:55:b7:10:4d:8c:fe:fa:e1:6e:d6:c0:97:
         3d:65:15:3e:e5:df:c1:86:12:75:d2:bb:08:22:a4:53:66:ec:
         4a:b1:04:59:b3:ce:8a:48:c0:38:68:f3:80:28:12:f3:90:87:
         56:c4:33:23:0d:8f:85:a3:2e:20:1b:c6:80:e9:91:3c:8a:6c:
         a0:3f:20:b4:63:6d:db:c8:13:a5:cb:ec:90:d7:8a:fa:72:fa:
         6b:5f:77:db:0a:a6:3e:e8:53:97:f5:78:dc:09:cf:5f:97:2b:
         c6:d2:8e:36:78:12:a6:79:b5:d2:f7:e2:b0:c8:02:ed:5c:07:
         56:ee:14:ef:8d:37:22:37:59:d6:36:a6:22:27:50:b6:2c:9e:
         d6:27:8e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:20:27 2025 by rpki-client