Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/722f3704-d798-3059-b812-9e050f41dc24.roa
File:                     722f3704-d798-3059-b812-9e050f41dc24.roa (raw, json)
Hash identifier:          m+GSIeU16Px+63WFakwazx7z8tqLHUf4QswJ2fwiTK0=
Subject key identifier:   AE:4F:17:0A:21:3C:42:2C:37:7E:71:C5:5F:A1:B1:CA:5B:41:AE:B3
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285849FCAA888F8981CE70D29CC000
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/722f3704-d798-3059-b812-9e050f41dc24.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     7029
IP address blocks:        71.28.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:88:8f:89:81:ce:70:d2:9c:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=1e8ac825-0a44-428b-ab2d-81e4239d4fa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9c:fa:77:b6:b1:aa:46:18:2e:bb:4b:c2:ac:
                    f2:b4:6c:2f:70:9c:85:9f:ab:2d:5b:94:47:6e:0e:
                    52:62:7d:27:42:3f:57:ae:5c:51:08:c5:3c:11:98:
                    70:f5:bf:9b:05:98:6d:8a:b8:56:ef:4c:8c:7d:26:
                    a7:8e:a7:d5:50:f0:a5:07:de:b7:6e:cb:44:e1:7e:
                    21:6a:20:de:ff:3f:cb:59:9a:d8:bb:b8:0e:a8:11:
                    3d:48:d6:77:9f:c3:e8:51:5b:d9:86:b3:81:6e:a8:
                    62:90:2e:54:44:8c:60:d3:75:c8:d1:4a:4a:c8:ec:
                    ea:f2:5c:3d:8b:4d:1d:91:fb:99:17:37:71:06:50:
                    e7:90:24:c3:c4:9b:a2:91:f4:98:9c:ef:51:c2:1c:
                    5a:9f:ab:80:a1:f2:85:cd:2c:a7:8b:36:44:ed:92:
                    be:f1:ae:08:ed:1a:63:39:98:e4:ff:09:67:c7:bc:
                    e0:c0:03:3a:d0:9e:da:8d:a3:7c:0d:a2:09:86:95:
                    fb:da:69:e4:54:7e:ab:b1:d9:25:58:d2:29:76:95:
                    8c:e4:68:e4:62:81:36:cf:86:6c:8d:89:e8:d3:78:
                    0b:0f:5a:89:0f:31:be:0e:38:a6:14:80:64:a2:dd:
                    d3:33:c3:a2:ac:ea:e8:eb:9d:7d:cc:da:a8:6d:7b:
                    98:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:4F:17:0A:21:3C:42:2C:37:7E:71:C5:5F:A1:B1:CA:5B:41:AE:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/722f3704-d798-3059-b812-9e050f41dc24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.28.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:c6:9e:61:bc:17:f6:80:6d:fc:a9:54:d0:fa:a9:d4:51:22:
         48:d6:65:c5:69:b5:5d:f7:73:b4:39:a3:e5:84:fe:e7:81:95:
         0f:9a:88:b0:89:6a:f1:72:f6:39:de:bf:24:9c:2c:a0:9f:b2:
         5e:66:f0:d4:c7:a4:70:7f:4e:ad:3c:2e:0c:24:51:49:90:8e:
         f6:f4:e8:79:59:de:0e:e4:f0:95:73:4f:5d:00:99:30:24:20:
         3b:16:86:e4:99:7d:6a:fb:88:f8:2f:7c:fd:57:36:1f:4a:b0:
         53:30:87:63:79:b8:5e:cf:0d:27:cc:76:ac:9c:3e:50:9f:66:
         c2:b9:75:9f:17:68:67:e7:bd:bd:de:15:20:66:94:24:42:72:
         5c:31:f1:61:a1:6e:3c:f6:72:c5:90:40:33:81:d3:ed:6c:91:
         41:a2:e6:f4:19:ad:d3:d9:d9:86:58:7e:88:50:b2:b9:fe:47:
         4e:61:d5:e6:53:9e:de:06:33:02:cf:63:37:33:0b:bc:c6:fe:
         ae:d1:fe:84:47:67:fb:38:2f:8f:03:ef:4f:10:5b:45:4e:2d:
         01:05:14:71:a4:da:81:4d:da:ca:25:3a:05:01:af:8e:33:bf:
         e5:a8:c8:c5:30:e3:b6:d1:d7:9e:d2:b5:94:ad:58:d9:f5:34:
         ba:98:0b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:26:16 2025 by rpki-client