Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8d3930bd-105f-3853-afe2-8d5d7f5e6311.roa
File:                     8d3930bd-105f-3853-afe2-8d5d7f5e6311.roa (raw, json)
Hash identifier:          OzK9lFcfg8gm/y6E3JigU0rEmY8eISu4xiWViLhCV1Q=
Subject key identifier:   43:B4:CE:59:C4:67:DE:FA:C9:A0:15:26:96:2C:71:1D:65:8D:32:92
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285849FCAA9685150EA54F10DE2200
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8d3930bd-105f-3853-afe2-8d5d7f5e6311.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     7029
IP address blocks:        64.24.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:96:85:15:0e:a5:4f:10:de:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=90695215-05f1-4d29-a057-987f15d5f8ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:9d:69:ea:54:54:3f:a4:4a:aa:ab:bf:98:fe:
                    71:e8:94:a9:14:a8:f9:63:10:f9:99:18:0a:f1:35:
                    94:fc:75:58:d9:72:e7:68:aa:55:0a:9d:0a:eb:96:
                    e3:fb:63:1c:6c:90:3f:9e:48:3e:23:0f:70:c8:4b:
                    44:f5:68:85:6a:38:c5:92:a8:c1:6f:21:bd:c1:b0:
                    df:90:a8:5e:a0:6d:80:e1:fd:87:01:9c:6d:19:27:
                    01:3d:18:ed:f3:84:c3:40:9c:ae:ed:e5:4f:f6:43:
                    8c:2d:26:9f:13:4a:50:09:95:c5:bf:66:96:a8:27:
                    f4:c2:00:b0:18:97:88:e9:ff:3f:04:26:b7:62:50:
                    ff:7f:7a:9c:f6:45:c0:72:ce:b8:87:ea:99:16:02:
                    ad:c6:d3:a0:0d:02:0e:52:19:ff:a9:45:8f:9c:61:
                    d7:f8:38:85:35:15:82:0c:ef:2f:53:9d:cf:50:3f:
                    2d:d8:f6:8e:28:7f:08:fe:b0:ba:33:f6:ab:af:dd:
                    7b:cc:15:0f:32:81:4d:1c:cd:47:23:22:e1:5f:6c:
                    1f:60:cd:1c:75:3a:fb:66:0c:f6:9c:7f:7b:e7:98:
                    6a:7f:6e:7d:4d:90:08:da:ca:86:1d:78:f3:ed:e4:
                    33:27:85:d6:b5:90:78:24:8e:ae:de:11:d7:11:23:
                    08:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B4:CE:59:C4:67:DE:FA:C9:A0:15:26:96:2C:71:1D:65:8D:32:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8d3930bd-105f-3853-afe2-8d5d7f5e6311.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.24.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:6c:82:a8:1d:ce:ce:60:d2:7f:44:5c:1c:5b:88:a2:0b:66:
         45:53:3e:6e:94:35:76:52:3a:59:f0:1c:2c:d6:d3:23:7e:f5:
         d3:ad:32:0b:02:15:a3:32:83:22:b8:cd:e7:84:02:2a:59:16:
         3d:53:0f:68:d3:c1:f3:2d:c9:f4:26:31:e6:2c:ce:86:56:28:
         9c:6a:55:5a:09:74:af:12:51:79:41:1c:a6:2d:42:54:b3:7c:
         30:e0:c1:8e:4a:e6:9d:d8:6d:fd:a8:a3:3c:78:b4:85:27:d6:
         87:73:3a:c0:25:4e:f1:ea:25:de:76:ff:b4:a6:45:1b:d2:0e:
         ce:d9:a9:24:b4:ca:03:cd:fd:61:e0:23:ad:dd:1f:36:07:10:
         60:49:8d:09:47:bf:32:63:ee:af:6d:86:dc:83:71:1f:5e:f4:
         4d:c3:53:8b:f4:68:23:45:c7:1a:36:97:d5:f0:dd:e4:f8:c2:
         f6:30:a2:a0:ea:8c:e6:05:8c:1b:2a:de:b6:4a:48:e3:04:12:
         a3:62:a0:cf:f0:21:fc:a9:6f:32:28:84:e2:8d:b2:29:dc:49:
         f2:15:8d:da:fd:f1:5d:93:f6:56:32:de:a1:f1:07:b8:44:92:
         bb:8c:7f:ef:cc:fb:5f:6f:da:c0:53:b8:b9:d6:ff:d4:04:b0:
         5f:8c:5e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:16:39 2025 by rpki-client