Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7dc425f4-1940-3fd3-af8f-e75824c4359f.roa
File:                     7dc425f4-1940-3fd3-af8f-e75824c4359f.roa (raw, json)
Hash identifier:          TWxfDg5dQOjn4Y1NVRSHEXJNu4Bt2WCdtejqlfsEmCk=
Subject key identifier:   CA:A6:6A:1D:40:6B:53:70:C8:D1:32:B0:36:23:B5:4B:78:FF:4E:EB
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285849F1800F41EEE5039E07CCA040
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7dc425f4-1940-3fd3-af8f-e75824c4359f.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     7029
IP address blocks:        72.16.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:0f:41:ee:e5:03:9e:07:cc:a0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=82399862-f07e-474b-bfd2-f1533a49b7f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:63:62:ed:f6:f3:50:00:c3:91:8d:5d:0f:95:
                    b3:88:0a:b1:d6:40:08:d4:48:fb:7d:d1:ae:c0:b5:
                    d2:63:10:14:6b:f7:17:21:15:70:66:8d:f6:83:e5:
                    24:c3:e7:ed:93:88:cb:f8:72:5e:0e:7a:de:3f:5b:
                    f2:fb:36:80:0f:47:0d:d8:ae:5a:06:e2:8d:fd:7d:
                    91:24:1a:d3:59:7e:dd:8e:92:5a:31:b3:88:88:34:
                    cc:ab:94:8a:d0:79:9d:f0:32:9e:ec:28:2c:7f:f1:
                    61:33:c3:41:92:68:f4:7f:13:30:9b:c3:44:f8:1f:
                    96:9c:ce:30:40:db:d4:2c:86:1e:ab:0c:e9:92:53:
                    fd:e0:4d:2b:f2:ec:9d:9e:b8:48:61:f6:b5:15:18:
                    5c:7a:7f:47:bf:c2:67:db:17:b7:21:7a:62:fd:1b:
                    42:10:c9:51:9c:19:34:7b:92:9a:73:29:25:c6:3e:
                    8d:11:fb:66:51:1f:92:27:a6:8b:1b:ff:b0:b3:4d:
                    9d:14:51:e1:9f:8b:bf:9f:b1:8d:37:b6:ee:b5:20:
                    a6:5e:d2:b0:4a:9e:3f:fa:ef:21:2a:55:e0:73:29:
                    b1:b7:77:e8:4c:6a:51:78:98:69:2e:a8:9d:d9:6b:
                    96:ff:72:0f:d7:dc:ef:05:54:43:02:4a:6f:ef:fe:
                    71:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A6:6A:1D:40:6B:53:70:C8:D1:32:B0:36:23:B5:4B:78:FF:4E:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7dc425f4-1940-3fd3-af8f-e75824c4359f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.16.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:3f:57:f0:e6:ba:03:f9:01:a4:cd:85:6a:30:49:81:5c:d8:
         dc:80:60:dc:62:b1:60:88:05:73:48:29:f2:20:0b:1c:a0:4f:
         3e:fd:79:3e:28:7f:eb:25:43:91:a5:cf:93:29:22:06:32:35:
         6c:27:1b:cb:fa:08:3f:32:87:c8:1b:70:61:e6:a4:6c:2c:da:
         18:39:6a:4a:4a:0a:db:d2:3a:a9:fa:5f:ba:43:79:c8:2c:d6:
         03:d6:5d:6d:fa:54:de:08:92:67:09:8f:fe:5b:29:1c:35:6d:
         c3:22:58:ef:16:cf:f9:94:48:9a:4f:05:46:02:81:3a:de:bd:
         f9:0e:17:b1:16:a0:2f:54:b4:4c:d1:b0:a1:1b:a4:ff:88:25:
         9e:8b:d2:94:38:f6:7f:e5:33:b3:44:91:47:62:76:bc:e1:6f:
         6e:97:1e:65:5f:c3:05:1b:be:62:63:89:eb:4b:b6:f7:48:3f:
         4b:05:8b:14:2e:b6:a6:5b:53:af:d0:fd:29:41:37:1d:d0:22:
         f7:1f:ba:c6:8f:3f:aa:f7:3b:f2:01:12:a1:88:ba:67:c3:c7:
         92:8a:3d:f3:40:56:a7:bf:6b:71:19:2f:8a:77:62:49:28:6e:
         ca:f2:0a:42:da:bc:3d:70:06:ef:d1:02:60:75:c3:85:df:19:
         c5:19:c2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:45:45 2025 by rpki-client