Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64d7bc3d-01fa-3761-aa0d-05cbcd1ad392.roa
File:                     64d7bc3d-01fa-3761-aa0d-05cbcd1ad392.roa (raw, json)
Hash identifier:          7UluR8cB/Z0Rhv9oh4dvqve2hIx9mNTm91A3EYiYA80=
Subject key identifier:   4D:E1:F9:50:87:0C:65:AB:0C:85:32:19:4C:E3:E2:0B:24:C5:9C:9F
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584AB386263AA334CC969CA086C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64d7bc3d-01fa-3761-aa0d-05cbcd1ad392.roa
Signing time:             Thu 31 Jul 2025 13:00:39 +0000
ROA not before:           Thu 31 Jul 2025 13:00:39 +0000
ROA not after:            Wed 29 Oct 2025 13:00:39 +0000
asID:                     7029
IP address blocks:        151.213.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b3:86:26:3a:a3:34:cc:96:9c:a0:86:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 31 13:00:39 2025 GMT
            Not After : Oct 29 13:00:39 2025 GMT
        Subject: CN=34211b9a-ce67-4661-9f22-9e8988f40672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0c:90:e1:cb:33:f8:b3:83:5d:57:3a:54:e7:
                    2c:45:8d:6a:29:ca:9d:7e:aa:89:ce:06:22:82:15:
                    45:bb:64:d2:41:8d:3d:87:0a:19:f9:14:11:e5:9f:
                    2f:15:1f:c9:28:48:92:b6:a4:cc:6f:69:0f:fd:3a:
                    50:c3:c4:c5:c5:de:3e:37:c9:9d:a0:b1:32:a9:e7:
                    8d:6e:6a:3a:5f:9d:46:a8:c7:b4:08:0d:32:31:45:
                    70:50:89:01:9c:5d:a0:4a:0c:10:9c:2d:6d:eb:08:
                    c5:c9:4d:e9:a5:c3:97:4b:9c:26:02:a1:09:a7:e2:
                    16:92:82:f3:65:a3:4e:36:a2:16:2a:66:2d:34:f1:
                    66:ff:7f:55:22:4b:f3:cb:99:fc:82:d3:40:8e:66:
                    7c:dd:02:0e:e8:38:5d:ed:ff:88:02:ce:a7:a2:02:
                    cb:6b:33:a7:33:1b:b3:62:29:d9:91:2c:91:8e:65:
                    1a:ad:87:b5:db:78:df:75:d0:93:b3:fb:3c:63:dd:
                    8e:2d:83:f1:c0:e8:59:d8:d7:eb:24:10:89:38:01:
                    ff:d8:db:01:d4:4e:81:41:e4:7f:c5:5f:08:27:d4:
                    b1:95:b6:db:a1:10:ae:02:6a:be:b7:63:c8:84:5b:
                    1f:60:5d:d9:93:fb:41:35:38:06:9c:66:bd:74:16:
                    ea:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E1:F9:50:87:0C:65:AB:0C:85:32:19:4C:E3:E2:0B:24:C5:9C:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64d7bc3d-01fa-3761-aa0d-05cbcd1ad392.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.213.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:85:cf:23:b6:35:7b:ff:77:bd:65:ae:f0:ec:4a:73:97:4e:
         eb:ce:e1:8e:9e:17:e5:fe:2c:0f:2d:6b:34:9e:38:ef:41:2d:
         e1:41:93:3e:17:91:4a:be:61:8a:97:5d:b0:7e:24:33:f9:96:
         fc:86:d7:38:00:94:cf:d2:94:d5:51:a2:eb:66:da:c3:1b:55:
         00:37:d2:14:a6:bf:e3:97:1a:dc:c9:8a:e8:b7:2e:db:1b:e6:
         3b:fa:6e:7d:91:90:eb:db:ad:ed:57:b7:22:73:5d:21:76:55:
         f8:b4:fc:9b:a4:44:a8:ad:5d:7c:82:a1:fc:46:be:11:59:56:
         86:27:6f:77:f3:9d:c4:9b:07:59:65:57:1a:be:94:97:09:48:
         90:57:2d:ca:e0:d3:56:31:4d:14:f4:80:eb:ff:9f:64:2f:c3:
         8e:79:54:71:c6:8b:d0:4d:7a:8e:de:34:1c:e2:3e:c9:2b:62:
         b3:16:ab:1c:e1:e0:cc:a0:1a:09:fc:57:42:36:f8:9e:3c:af:
         85:2b:ad:f0:97:57:10:ea:12:f2:41:fa:f0:c7:ef:9c:75:05:
         3b:58:9b:cd:3e:54:4a:b8:38:6e:e7:43:8c:bc:ec:4f:bd:c9:
         32:56:29:ba:e5:90:85:35:8c:03:c0:2f:52:87:0a:27:ff:c3:
         72:b4:05:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:09:37 2025 by rpki-client