Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/978b4077-1a02-3b98-8d18-74a542cacb88.roa
File:                     978b4077-1a02-3b98-8d18-74a542cacb88.roa (raw, json)
Hash identifier:          1adhS+P1SmVuS9OFM228ipYUSjcGcnq8A+efy6/ZGlc=
Subject key identifier:   47:B9:87:77:49:EE:5A:F6:BE:1E:53:E1:DD:B5:4A:F9:B8:79:3B:B6
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584A90A0FABCC366AFABC10E87B0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/978b4077-1a02-3b98-8d18-74a542cacb88.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     7029
IP address blocks:        74.223.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:fa:bc:c3:66:af:ab:c1:0e:87:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=f4681a28-48f2-4b90-87f6-dc69ff2d03f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7c:29:7d:73:94:cd:c0:58:32:bb:ca:96:a4:
                    6a:ea:21:af:90:17:82:80:fe:e5:1b:ab:7f:63:80:
                    6e:bd:9a:3c:e8:5a:0a:61:c8:bf:68:7a:f2:b0:35:
                    35:dc:02:2f:5c:01:9c:87:f7:31:ce:de:5e:83:8e:
                    01:51:3a:b1:de:06:14:87:06:05:cb:2a:d6:8e:bf:
                    e2:4f:b9:92:35:f0:28:3a:99:d7:37:5f:96:80:7a:
                    3c:bb:23:3a:23:0e:ba:8a:fc:28:17:98:d0:58:7f:
                    8d:29:c9:09:73:e8:84:03:14:6f:98:53:62:8f:f9:
                    83:3c:11:3d:08:67:1f:a5:4c:42:3c:45:26:ec:c5:
                    00:4f:49:73:1c:da:7e:8e:75:c6:4a:2d:ae:03:af:
                    90:37:32:99:89:35:a4:4d:6f:cf:cc:e1:03:5d:be:
                    d5:23:04:e1:35:bb:90:32:de:6a:64:cd:0b:a2:2d:
                    55:17:68:e8:54:6b:0c:17:48:59:17:92:4e:a5:e9:
                    09:5f:96:9b:c2:3c:6b:c6:2c:45:98:36:74:aa:64:
                    a8:12:90:39:11:0e:4e:78:db:bd:33:f2:51:7a:7a:
                    35:06:f0:d2:c3:80:04:80:b3:ec:2a:63:f9:ee:1d:
                    4d:a0:5e:5f:c9:e6:ac:69:18:9b:06:8e:c9:f4:bf:
                    69:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B9:87:77:49:EE:5A:F6:BE:1E:53:E1:DD:B5:4A:F9:B8:79:3B:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/978b4077-1a02-3b98-8d18-74a542cacb88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.223.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:90:23:49:6b:99:79:ed:c3:c7:2c:bc:36:93:c7:8f:f1:8c:
         e9:49:23:72:7f:22:62:26:8a:ec:7d:02:d2:71:bd:8c:a5:a2:
         db:0a:31:14:74:ff:e8:a2:8c:3a:00:ea:56:3d:bf:26:58:e6:
         20:de:17:c3:d3:71:10:91:60:91:10:e5:a8:e3:9e:01:0b:ae:
         dd:15:65:0c:d0:68:95:33:8a:ef:a6:ee:66:e1:76:c1:76:d5:
         dd:b2:56:5e:d2:76:e3:ae:bf:3f:2c:96:83:c2:be:b9:2d:06:
         c7:4c:ee:d9:b2:50:c8:c0:86:9b:d0:e0:2a:f2:c4:0b:97:ff:
         82:6f:3d:0e:df:fa:6f:02:88:58:3e:56:6c:fa:a4:b4:32:d1:
         6e:8a:e0:4d:22:c4:d2:97:28:09:e1:c9:eb:39:01:28:aa:20:
         2d:b5:c1:4e:0c:15:a0:8b:50:30:c4:b8:2d:da:6d:a0:91:dc:
         78:d4:a2:14:41:d6:c4:a5:10:eb:28:cc:73:05:44:41:82:9b:
         88:4b:eb:7c:99:ae:4b:75:2a:7f:a5:54:d6:90:8e:47:78:28:
         ea:a6:d1:df:09:f8:97:b1:f8:c2:11:9a:0f:dd:01:fc:43:71:
         7d:cf:5d:e6:a5:87:ff:f3:c3:e9:f0:fd:77:f7:94:69:99:a4:
         4d:e1:f1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:57:58 2025 by rpki-client