Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aedfc36f-f9ab-38bc-8f1a-10883237ddc3.roa
File:                     aedfc36f-f9ab-38bc-8f1a-10883237ddc3.roa (raw, json)
Hash identifier:          3uqmu80y0rJ7yGeWRghRZdT4ddbUYfP56wm8CExXKX8=
Subject key identifier:   56:95:03:81:B2:AD:BB:20:F1:B9:14:38:38:2E:29:AC:F6:35:15:A9
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285849AD1A1234A32D9F80066FC380
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aedfc36f-f9ab-38bc-8f1a-10883237ddc3.roa
Signing time:             Mon 28 Apr 2025 13:01:00 +0000
ROA not before:           Mon 28 Apr 2025 13:01:00 +0000
ROA not after:            Sun 27 Jul 2025 13:01:00 +0000
asID:                     7029
IP address blocks:        173.190.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ad:1a:12:34:a3:2d:9f:80:06:6f:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Apr 28 13:01:00 2025 GMT
            Not After : Jul 27 13:01:00 2025 GMT
        Subject: CN=4b83ffcf-5fa7-4a4b-8130-f33551146303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:dc:5c:cf:ea:be:32:64:5b:39:35:be:ce:e9:
                    d2:75:31:42:20:17:d9:37:28:d5:c0:4e:d0:aa:b6:
                    1f:46:9a:c1:0e:b6:f7:8f:66:76:3f:63:b1:33:44:
                    d1:6e:38:00:cc:85:e0:44:b4:20:9f:a0:85:0c:d4:
                    3c:34:1d:c7:f0:df:86:0c:ca:65:0f:bc:89:f7:65:
                    f5:0b:f8:ec:e9:1a:e8:3e:73:09:5d:dc:f4:bf:4a:
                    d3:e4:ff:92:9e:7f:cd:08:05:ad:6c:c4:69:41:64:
                    76:a0:2f:a1:08:da:15:6c:f1:ed:0a:6e:bf:67:44:
                    2d:4f:c9:6c:87:ea:71:8d:e6:7f:7b:d0:c4:8c:15:
                    b5:29:7b:19:25:19:9f:e1:70:6c:0b:d9:5d:0d:8e:
                    ce:d1:e7:3e:76:ea:41:4b:fe:50:16:40:24:01:8c:
                    a7:cd:31:25:19:92:d4:fe:c8:7f:a3:88:72:05:2e:
                    db:6d:ba:73:6c:1b:5c:9b:e7:85:c9:bf:2d:12:72:
                    1c:f4:04:2c:0b:f9:a2:da:ec:a1:e6:1c:42:e5:9d:
                    36:de:fd:8d:08:0e:c2:b2:cf:32:16:15:1d:66:5c:
                    78:78:c4:e3:67:3a:5d:61:64:75:54:e4:d2:f7:7a:
                    5b:05:84:4d:c6:f0:56:c9:c8:ad:38:f8:d7:1c:81:
                    73:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:95:03:81:B2:AD:BB:20:F1:B9:14:38:38:2E:29:AC:F6:35:15:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aedfc36f-f9ab-38bc-8f1a-10883237ddc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.190.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:60:66:48:8c:61:ff:00:9c:aa:30:0a:58:e1:3a:2c:60:87:
         af:15:2a:01:dd:17:2d:74:38:7e:1a:3e:83:56:a2:e3:d7:41:
         6f:6c:d2:14:2c:a0:d3:65:fd:64:eb:95:1d:81:e7:17:71:a5:
         8d:4c:c8:24:ac:74:8c:39:39:3b:9c:b3:a7:e2:f3:db:dd:0f:
         95:2b:7e:0e:f8:ac:68:1c:f2:66:5d:82:19:40:92:c5:f7:94:
         e3:e9:dc:91:95:b5:ce:a1:65:7c:53:5a:46:7f:f1:43:53:38:
         3d:0f:ab:dc:2f:da:5c:72:e6:e3:f3:df:6b:d4:8e:bc:19:d5:
         b6:b5:4c:ab:8b:d0:14:42:8b:7c:33:3e:eb:87:c6:2d:6e:dc:
         53:ba:7e:48:b9:48:e7:95:e5:c3:e4:e0:b2:00:15:48:93:1a:
         3e:47:f3:f3:26:e9:03:b5:82:9a:6c:98:62:67:dc:fe:29:57:
         cc:3c:8a:ca:98:f4:54:49:ef:98:00:64:7a:41:a0:e3:a1:3f:
         79:96:66:43:24:ec:a8:52:66:94:67:1e:b9:57:4b:ea:b4:f4:
         0d:19:ff:75:4c:1f:1f:ff:81:52:c8:2d:09:d5:86:22:c4:3e:
         1a:13:e7:40:5d:da:f2:21:23:1c:9e:b0:79:d7:45:bf:47:de:
         c7:0d:a2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:00:13 2025 by rpki-client