Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/985b0057-2b5e-3bc5-9d27-99e4fbf5439d.roa
File:                     985b0057-2b5e-3bc5-9d27-99e4fbf5439d.roa (raw, json)
Hash identifier:          AJqNW+cz4cMfNdXz7dpbEqg9jDBeR+BFpIf9zWgnFgI=
Subject key identifier:   AE:87:8F:1D:57:2C:2D:B6:9E:7D:2B:72:4F:16:5A:12:E0:D5:0D:80
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584A90A108DAFD2CADD3D6F33880
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/985b0057-2b5e-3bc5-9d27-99e4fbf5439d.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     40857
IP address blocks:        184.80.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a1:08:da:fd:2c:ad:d3:d6:f3:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=87b0c472-6471-4c98-810e-7a9ead611754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:00:12:4c:6b:61:a0:c4:2b:cc:08:fb:55:ef:
                    4c:0f:5d:aa:e4:64:e3:67:9b:a9:63:b4:1a:3d:82:
                    48:04:38:bc:00:e5:df:7e:05:2c:9f:0e:cc:58:1a:
                    1b:81:8a:be:43:4d:2b:22:81:91:ff:15:5a:37:bf:
                    a0:87:e9:f1:e8:c8:6d:27:bf:0e:5b:bd:a2:fc:a5:
                    19:fc:b2:fc:59:ab:f7:a9:1b:39:46:29:9d:54:c6:
                    c7:2f:8c:03:e0:97:58:e2:f2:28:b2:b3:6c:f6:68:
                    e7:74:db:1b:12:1e:47:c2:39:ef:8d:c3:31:38:b9:
                    96:d4:1d:1c:fc:79:f9:ce:d4:ae:c9:d0:09:17:52:
                    ed:1b:e2:86:a4:17:63:d7:29:aa:d3:c4:89:4e:12:
                    a4:c1:26:98:f6:33:9c:29:59:76:f6:bb:97:3f:9c:
                    94:a1:38:01:b4:78:b0:86:27:42:ff:75:6f:62:3f:
                    18:38:59:89:ec:9e:81:b9:1c:57:08:ae:f5:4b:18:
                    13:65:02:50:33:08:fb:d6:64:9f:fa:4b:f3:0a:ac:
                    5f:6e:ed:67:80:e8:36:e0:da:d3:ec:d2:c3:ae:cc:
                    46:86:ec:d1:09:01:3b:0a:51:80:4c:0d:6b:13:1a:
                    86:d1:4f:3e:db:ed:20:74:1d:30:bd:c5:1b:d4:7c:
                    9c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:87:8F:1D:57:2C:2D:B6:9E:7D:2B:72:4F:16:5A:12:E0:D5:0D:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/985b0057-2b5e-3bc5-9d27-99e4fbf5439d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.80.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:36:c3:84:95:1a:72:8c:b0:08:3e:4e:65:b6:af:cd:94:8d:
         73:fb:00:83:16:41:a1:b6:d9:74:28:da:5c:5f:11:d0:57:5d:
         5a:fa:da:e5:d6:f8:36:f9:7b:5e:97:85:46:55:3a:ee:9c:c4:
         d1:a9:9a:f1:17:da:d2:4b:87:f0:6b:d6:18:d8:5f:2a:e3:4d:
         eb:5a:02:14:e5:9a:b3:6d:64:6a:cc:c4:f7:89:df:14:f0:10:
         b6:a4:e7:0b:3c:12:fd:11:79:27:62:58:6c:fe:a8:a0:52:d1:
         ee:80:e7:cd:93:c3:91:bc:60:d1:c7:83:37:0e:35:5c:f8:dc:
         7d:f7:3b:63:1d:1f:7d:d3:d1:02:6c:cd:05:f5:a1:71:17:86:
         8b:1c:d3:de:c0:7c:9d:bb:f2:93:92:96:c1:aa:53:b4:75:47:
         00:4c:9f:3d:04:05:95:d4:a8:5b:d7:20:40:2d:75:02:9f:db:
         d7:d7:19:05:f3:dc:1b:b0:20:3b:39:ef:b5:df:4c:92:eb:13:
         b1:6e:61:08:f9:1b:63:b5:02:8b:9a:37:17:14:46:7c:c0:a5:
         29:57:0c:94:12:04:b0:a4:76:c4:9e:e1:6f:cf:c1:2c:21:9e:
         f9:3b:e4:b7:54:3b:05:a4:a9:b6:9a:8b:47:ac:5a:96:09:59:
         54:b0:61:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:38:38 2025 by rpki-client