Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/526b240e-e9df-3324-a2ba-0b3fb4e0624e.roa
File:                     526b240e-e9df-3324-a2ba-0b3fb4e0624e.roa (raw, json)
Hash identifier:          owQdjNrAcv+znb5hEnTXusfyGyLX9EtigsllEbKmCA4=
Subject key identifier:   34:5F:89:C0:FE:4E:0D:27:9B:5E:52:EF:CA:0E:4B:6A:C2:45:16:CD
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584A8B0B4C21189BEBC093DA6C80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/526b240e-e9df-3324-a2ba-0b3fb4e0624e.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     7029
IP address blocks:        174.130.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:4c:21:18:9b:eb:c0:93:da:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=4e30066f-4961-45ff-a3e5-565e6279a011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e3:9e:ac:49:97:86:54:07:2b:cd:c4:eb:96:
                    8b:2e:83:61:c1:86:17:68:50:3a:9e:bf:5b:fb:ae:
                    6f:35:dd:bf:fd:37:c0:38:8e:6e:47:94:9e:cb:62:
                    68:9d:90:0e:64:2d:79:16:a3:50:87:c4:0f:d1:b1:
                    ad:79:3a:2b:58:9f:60:73:ea:c5:cc:d9:c6:51:53:
                    48:43:5e:f6:6c:12:39:e3:db:9e:65:22:13:d4:75:
                    01:90:7f:2b:33:fc:5e:93:bc:04:cc:e7:0d:b5:47:
                    d6:17:cf:21:00:ee:82:ea:49:de:1d:66:6b:60:e8:
                    ce:34:2d:eb:dc:d9:39:78:c4:a2:4c:f2:93:89:f5:
                    6e:be:fb:ba:4a:cb:2c:df:00:78:e8:df:19:e4:cb:
                    9e:4c:03:2f:3f:7b:75:d9:18:cf:3b:92:e6:83:53:
                    64:74:ff:e1:4e:a8:58:74:10:af:f7:42:03:3b:2c:
                    e2:5c:dd:df:fb:2b:b6:73:c2:66:84:3a:07:8b:36:
                    81:62:32:c7:d1:80:a6:6a:b7:72:89:c8:f1:be:35:
                    b3:6f:9e:3c:15:a8:98:e2:c4:c5:3f:4b:46:6b:67:
                    93:5f:74:d2:06:29:04:e6:3f:62:f8:36:2d:b1:2d:
                    d0:08:ae:13:ab:76:53:5d:0d:0f:57:e5:15:4c:8a:
                    71:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:5F:89:C0:FE:4E:0D:27:9B:5E:52:EF:CA:0E:4B:6A:C2:45:16:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/526b240e-e9df-3324-a2ba-0b3fb4e0624e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.130.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:17:51:7c:62:4a:05:5e:6d:3f:15:ce:cd:e2:a7:6a:f5:5a:
         ab:2a:7a:35:b5:7f:65:13:9a:88:c7:1c:90:10:fe:94:02:7c:
         38:b3:2b:52:7c:97:15:19:a1:4a:4e:30:bd:d1:14:13:58:2e:
         32:bc:c8:8f:68:40:fd:23:d5:4d:dc:8f:13:49:ed:1c:98:44:
         f5:f4:3a:6c:56:69:73:29:e2:48:d2:38:5f:fc:29:18:4f:9c:
         5a:a7:65:89:ab:d3:40:43:5e:d0:ec:a5:49:7c:18:2b:4a:d4:
         81:eb:65:37:07:5c:a5:20:07:00:7e:c6:2b:34:89:2f:bc:d8:
         92:d2:98:aa:42:44:b0:f5:44:be:67:56:96:3d:b0:4a:95:df:
         dd:45:35:ec:aa:8a:1d:d7:9d:72:bc:eb:f6:44:6e:4e:29:bb:
         42:5b:32:85:d1:5f:c7:66:06:6b:fa:45:d1:9f:e3:07:22:38:
         5c:f6:9e:d7:25:cc:6a:40:b2:3a:54:02:b7:5e:6c:1d:d9:2c:
         23:c6:c9:2d:0a:5a:87:0e:f4:aa:6d:7d:98:c4:65:06:9f:38:
         39:6f:a8:a7:3f:90:33:a0:21:b2:4c:73:f1:65:7e:f9:10:3d:
         87:3b:75:b0:5b:51:17:5f:39:12:5f:25:7c:bf:3e:b6:2a:6c:
         56:c9:60:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:08:01 2025 by rpki-client