Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4dac3a66-2390-353e-a856-4725c0e824cd.roa
File:                     4dac3a66-2390-353e-a856-4725c0e824cd.roa (raw, json)
Hash identifier:          YTfOp65tMzyAIlFqPqXF1GBcoNUN0Z5/g7c2GLTUEik=
Subject key identifier:   D8:86:19:50:CC:01:8F:06:FB:9D:46:DD:38:29:71:B0:26:64:FC:76
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584A8C70D32A7CA9EEAA0BC51E00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4dac3a66-2390-353e-a856-4725c0e824cd.roa
Signing time:             Thu 17 Jul 2025 13:01:04 +0000
ROA not before:           Thu 17 Jul 2025 13:01:04 +0000
ROA not after:            Wed 15 Oct 2025 13:01:04 +0000
asID:                     7029
IP address blocks:        173.190.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8c:70:d3:2a:7c:a9:ee:aa:0b:c5:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 17 13:01:04 2025 GMT
            Not After : Oct 15 13:01:04 2025 GMT
        Subject: CN=b41abab8-a154-4bbd-adfe-2a43c4b0e47d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:69:d8:26:bc:63:0d:16:48:ed:fa:04:a2:bf:
                    cf:d2:18:03:3b:89:cb:a1:52:86:63:62:26:c9:7c:
                    9f:74:c4:47:02:c4:36:de:9e:0f:23:4a:8a:b7:71:
                    3e:e5:a0:3b:97:5f:1f:d1:12:72:35:b3:43:8b:3f:
                    82:40:a7:74:7b:cd:a7:7c:cb:57:6b:b8:8a:66:fb:
                    5b:02:7f:b5:6f:ca:12:33:bc:c0:ea:9a:fd:ec:2a:
                    62:2e:af:93:26:54:68:58:75:52:f3:14:2c:34:f5:
                    a8:8a:ff:8b:7f:46:06:e4:b1:93:50:a0:25:33:aa:
                    61:e9:0b:db:e2:40:60:42:6a:7b:6e:0e:8e:7a:62:
                    0a:dd:93:a5:36:65:23:95:f9:b8:a8:8a:aa:47:bf:
                    f5:fa:1e:04:87:26:69:39:a1:55:c8:ff:c8:a5:00:
                    33:76:52:6f:3d:4b:07:19:7b:f0:84:c1:83:8b:73:
                    03:89:7a:61:01:3a:bf:99:4e:8c:1f:0f:5e:a6:e3:
                    51:d3:e7:ec:03:50:b3:1c:62:3b:5c:55:c5:53:45:
                    92:78:7b:49:2b:0c:3c:90:9a:36:8d:5c:71:c2:88:
                    d4:36:f3:0b:55:85:3f:be:a8:7b:17:d3:41:2a:d3:
                    2a:b5:c9:f7:ef:e8:6e:75:e0:62:c5:90:5a:c7:4f:
                    0e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:86:19:50:CC:01:8F:06:FB:9D:46:DD:38:29:71:B0:26:64:FC:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4dac3a66-2390-353e-a856-4725c0e824cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.190.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:a8:dd:98:ca:11:a9:b4:b2:85:27:07:d6:d5:72:5a:ca:b6:
         9d:2d:b8:e5:34:74:26:0a:16:06:e9:12:8f:c8:c0:a2:e5:8b:
         a8:ef:d4:0c:0f:20:e0:72:4f:bc:5a:f8:58:f5:5e:58:39:6a:
         e9:d4:59:cb:55:89:dd:b0:be:34:ee:57:00:b2:cd:7a:19:ad:
         ef:1a:a9:72:05:c4:37:b3:85:06:6e:3a:e9:60:59:f8:f7:10:
         b8:4d:0c:c0:e5:39:fd:31:44:43:19:d4:c3:a9:39:00:5e:9b:
         7d:f8:9d:fb:63:85:89:7f:37:3a:32:a5:fb:ce:0f:fd:ef:d1:
         97:d6:df:96:cd:d6:7c:43:d8:03:0c:2d:a9:41:55:19:18:a8:
         0c:cf:dc:94:51:f7:17:fc:d5:26:ce:f2:0a:21:10:b6:71:9a:
         d7:d3:c9:90:7a:a8:a7:28:68:a1:7d:be:fd:71:b8:67:04:f9:
         10:6a:3f:5a:67:3e:73:54:24:e3:aa:ff:1d:78:f9:62:f1:0f:
         50:85:20:07:1f:1b:53:02:55:60:11:0f:3b:23:70:31:37:bd:
         c2:bb:c2:7b:49:ff:e6:8f:d4:5c:a2:49:c1:38:9d:d1:07:bb:
         20:e2:af:65:83:ff:cb:00:0e:a9:f4:6d:92:96:3c:78:84:eb:
         e2:10:ee:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:11:09 2025 by rpki-client