Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7b9e94ae-1878-33a9-9d1d-ef09867b01ef.roa
File:                     7b9e94ae-1878-33a9-9d1d-ef09867b01ef.roa (raw, json)
Hash identifier:          pXfe83W/xovchaT/4c5968qX880ropPckhxwIQTYxKI=
Subject key identifier:   6C:32:C2:75:6C:81:BF:C0:F2:3B:0F:2D:E1:3C:C8:46:84:66:D1:88
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584AB221256FC957FC7E01E3E280
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7b9e94ae-1878-33a9-9d1d-ef09867b01ef.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     7029
IP address blocks:        67.140.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:21:25:6f:c9:57:fc:7e:01:e3:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=a6cd4ef6-4a0e-4276-9e6b-69f2ad612b8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:18:cf:cd:ca:a3:90:24:dd:69:97:2e:84:e6:
                    8d:fe:93:07:9c:1c:ab:c2:54:99:8f:93:c7:9e:65:
                    92:87:ae:3e:43:5c:cc:7b:3c:55:15:70:7c:ab:c3:
                    b9:23:67:5a:fb:c3:be:63:f2:79:ac:e5:4c:91:c2:
                    81:7d:1a:1a:f5:8b:1c:b8:4c:2e:1e:12:63:58:a0:
                    74:5b:88:78:2c:25:fc:aa:d5:a0:82:78:60:7f:5b:
                    9d:86:c5:79:dc:f5:fe:ac:94:5d:d9:7c:c7:47:bb:
                    1e:5d:e7:64:63:3f:13:e8:02:af:e3:05:ca:88:3f:
                    72:22:10:bc:1c:59:a5:02:5b:4e:1e:cb:64:d1:b1:
                    ba:cc:e2:46:72:84:08:33:9a:94:95:3c:d4:55:ad:
                    5d:34:dc:d7:1f:ad:95:15:ee:c3:8c:e8:49:4b:2e:
                    fd:3c:e1:d3:8c:89:70:8d:37:79:c7:a0:18:98:00:
                    94:88:7c:9f:f9:6f:76:ac:ba:d2:45:e1:4e:0c:2c:
                    df:05:19:96:b8:fa:01:99:a0:4c:ca:1b:00:1e:fc:
                    b4:4a:b8:04:33:fa:8b:fd:f2:33:b4:93:b3:c7:bf:
                    08:81:f4:ee:b4:46:a1:a6:ac:e3:df:15:95:bb:fe:
                    5f:20:79:0c:05:8d:d4:70:f6:a8:fe:c2:79:d0:82:
                    26:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:32:C2:75:6C:81:BF:C0:F2:3B:0F:2D:E1:3C:C8:46:84:66:D1:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7b9e94ae-1878-33a9-9d1d-ef09867b01ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.140.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:e6:71:cf:74:09:26:07:01:b0:3c:bc:6d:a1:9a:cd:74:f2:
         58:87:94:04:76:05:b7:62:49:95:81:03:45:9c:f1:7c:a6:b4:
         7e:41:91:f8:ad:86:f7:86:01:83:72:b1:b8:f4:d9:f6:6e:fe:
         7b:35:04:88:da:d3:62:cc:3c:bd:e5:3d:c8:98:2d:40:c9:cd:
         bc:55:b3:6d:10:49:51:34:0c:f6:b1:a0:4c:e5:4f:b4:83:b2:
         59:b7:db:89:11:a8:1d:07:93:32:2d:7c:eb:68:fb:29:ef:fd:
         30:e2:d5:10:6a:fd:42:57:1a:c7:af:1f:ca:d6:de:6b:ad:37:
         fd:54:4b:48:51:88:6d:8c:f0:d2:16:b8:b5:2a:1a:44:78:41:
         d8:cd:76:89:a0:b1:6e:06:c5:44:f5:54:cb:ba:12:f3:68:42:
         41:d2:10:4f:f3:20:9d:5a:26:df:70:84:42:df:23:c8:9c:e3:
         33:61:19:15:7f:2f:9d:96:4c:15:7e:36:2f:7d:17:e7:4a:01:
         44:7d:2d:e8:b5:72:4f:a0:20:88:ab:f8:a6:df:74:4e:48:ed:
         92:44:31:58:55:41:a2:94:dc:67:a6:42:c3:58:f7:2f:7b:a7:
         90:38:cf:fd:79:63:8c:30:64:23:06:ea:1e:eb:b5:33:b2:1b:
         31:1b:e3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:23:12 2025 by rpki-client