Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7cd7301d-8874-31f5-bc17-74bd6043da2a.roa
File:                     7cd7301d-8874-31f5-bc17-74bd6043da2a.roa (raw, json)
Hash identifier:          spl1Jy3kt7oEet1fRGkt5qYCahbE5MhKDCOScFrY5Y0=
Subject key identifier:   20:5A:48:AB:8E:9D:21:72:5A:1E:D2:8D:CD:73:AC:77:66:B9:F5:E1
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584A90A0FB881365B2B732EDCE40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7cd7301d-8874-31f5-bc17-74bd6043da2a.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     7029
IP address blocks:        75.117.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:fb:88:13:65:b2:b7:32:ed:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=69629783-8566-4fb2-bd1e-8fe84d6e5bd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:7b:7a:5e:ca:7d:12:e9:f6:a0:0f:57:51:74:
                    51:d8:5a:de:f6:60:00:7c:29:c1:d8:6e:e0:aa:b6:
                    76:04:1e:aa:7a:5c:b8:a0:f6:a9:f7:67:92:6c:41:
                    fa:77:5a:ab:38:df:65:ea:06:2c:ec:47:e2:08:3e:
                    19:41:20:8d:c0:1b:82:66:16:15:ea:d1:07:a8:4c:
                    c2:8d:43:4f:0e:97:b1:e4:8e:d4:32:6a:f2:a9:12:
                    95:d9:e2:0f:5d:5d:65:d8:96:49:44:d3:95:ad:d3:
                    ff:99:42:3d:3a:5c:19:e2:0d:ad:1c:0c:a9:38:73:
                    c7:fe:e5:d2:3a:09:12:a9:8e:a2:19:d7:c4:b6:e3:
                    ff:d9:04:4e:de:7d:51:25:24:d2:db:0c:d8:d7:44:
                    64:b2:b8:39:54:81:ae:a1:ec:bd:7a:0e:bd:e3:85:
                    64:e6:0c:b4:5f:cd:40:f3:3a:a8:2a:7b:cf:d4:35:
                    90:d4:6b:50:97:21:1c:f3:85:03:7c:86:ee:01:a4:
                    de:1f:79:e9:ed:fa:46:29:c2:51:2a:f1:96:50:18:
                    27:d2:b1:2b:ba:6c:73:16:96:2b:41:89:a7:12:ce:
                    22:dd:ef:06:04:42:e9:54:5b:92:84:db:98:34:c5:
                    b1:62:c9:c4:64:3a:81:c0:b3:4d:6d:9c:11:cc:4a:
                    41:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5A:48:AB:8E:9D:21:72:5A:1E:D2:8D:CD:73:AC:77:66:B9:F5:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7cd7301d-8874-31f5-bc17-74bd6043da2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.117.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:fd:e0:3c:c8:bd:e3:e9:5d:2d:d0:9e:3c:d8:f7:60:6b:a9:
         29:e3:0b:d0:f4:11:e5:81:8a:5a:42:c6:ca:25:d0:25:88:a5:
         71:60:dd:8d:89:91:8b:b6:71:60:37:96:7c:11:51:8a:63:17:
         d0:01:4c:59:fe:61:fd:cb:cb:9e:71:aa:78:f3:96:be:dc:0b:
         7e:87:15:30:51:e4:59:a9:2e:56:91:57:4e:c5:ac:31:a8:f6:
         51:0c:2b:bd:35:08:17:13:c2:96:1b:b1:85:3e:54:ab:ee:e5:
         a9:7d:7a:ec:92:f8:f6:e8:86:89:84:42:56:69:63:43:f0:5e:
         38:83:4b:92:fa:39:77:0b:53:ed:7a:e0:29:d6:34:c3:9f:7f:
         ab:05:3a:f2:60:3b:16:24:15:17:6e:fe:42:46:00:17:cf:6b:
         75:68:88:9b:fe:d4:81:c8:d8:09:83:61:56:ee:bb:0a:9a:9c:
         c9:12:71:d8:b2:f0:25:c5:ce:39:c6:d0:d6:f2:41:6c:30:82:
         0a:31:c2:c3:5f:dc:dd:51:de:36:21:d9:2f:28:0c:3e:36:53:
         8b:b3:fe:61:b1:83:79:95:02:37:52:84:a8:9e:6b:56:2f:e8:
         bd:07:35:91:4a:1b:06:b5:f3:9f:cc:af:63:ed:7d:be:29:23:
         8e:22:e9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:18:30 2025 by rpki-client