Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b2fe3b2a-64d9-3ebc-b631-baafb80b221f.roa
File:                     b2fe3b2a-64d9-3ebc-b631-baafb80b221f.roa (raw, json)
Hash identifier:          pdtgwe4YBHklCudefW3Glt5QzM+r/pt1VDea0SoUahw=
Subject key identifier:   6D:9B:9E:89:0C:BC:90:6B:AB:A2:0C:FE:26:B1:4E:5F:1C:AE:83:CA
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584A8DD5FA4C156F0D1C3327FC40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b2fe3b2a-64d9-3ebc-b631-baafb80b221f.roa
Signing time:             Fri 18 Jul 2025 01:00:48 +0000
ROA not before:           Fri 18 Jul 2025 01:00:48 +0000
ROA not after:            Thu 16 Oct 2025 01:00:48 +0000
asID:                     7029
IP address blocks:        75.117.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8d:d5:fa:4c:15:6f:0d:1c:33:27:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 18 01:00:48 2025 GMT
            Not After : Oct 16 01:00:48 2025 GMT
        Subject: CN=90b61b0a-4fc6-4def-8a01-cc7ffe3362b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:f9:14:90:39:ed:7b:0f:cc:36:22:b7:a5:02:
                    a8:02:d3:98:49:17:e3:82:22:80:34:21:ab:a7:ea:
                    39:8a:5e:c3:04:57:ee:ac:e7:66:25:ed:76:a3:dd:
                    d7:ab:d2:ac:58:3b:0b:8b:2a:df:11:85:78:3a:01:
                    5d:da:fe:59:68:55:67:d8:54:2f:29:ea:48:82:62:
                    80:be:7d:2a:04:01:de:c6:ba:b6:d4:e3:4b:80:11:
                    d9:06:11:b8:8e:6e:fd:4c:c0:c4:ad:30:e1:2e:7c:
                    08:fb:06:a0:8b:5f:39:a7:97:43:e2:eb:95:95:45:
                    fe:7e:3e:19:4e:5d:32:30:21:0d:3a:11:7a:21:a1:
                    77:8a:5c:de:dc:98:53:ae:57:03:bb:41:d7:f6:9d:
                    67:42:10:37:4a:b5:54:1e:81:dd:7f:c1:41:47:fc:
                    a9:45:6c:55:83:39:06:33:60:8c:ab:17:02:ec:df:
                    73:8e:8a:c4:a0:53:da:83:af:37:c7:8f:72:2c:c2:
                    9d:a2:fc:19:73:65:56:3d:f1:91:6b:23:19:b0:54:
                    f9:43:00:aa:9f:d4:40:03:b2:61:94:9b:62:6d:d1:
                    1b:1c:b3:4f:79:aa:72:ae:f5:37:52:dd:3c:09:d9:
                    bc:22:5c:8a:50:58:6d:d2:50:b1:10:61:61:2b:43:
                    c5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:9B:9E:89:0C:BC:90:6B:AB:A2:0C:FE:26:B1:4E:5F:1C:AE:83:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b2fe3b2a-64d9-3ebc-b631-baafb80b221f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.117.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:48:5d:be:5b:da:0e:b9:04:05:2b:17:42:eb:b5:4d:9d:0f:
         8a:76:f3:9d:68:b7:63:75:3e:ec:0d:8c:eb:eb:37:68:82:4f:
         08:90:52:dc:9d:33:20:56:d3:30:88:a9:88:ac:e0:0d:fd:da:
         c0:5e:30:79:88:d5:ba:d2:d1:73:1b:53:49:c8:d5:77:2e:49:
         2a:7a:bb:fa:36:a1:75:86:0f:9e:2f:d3:20:34:90:4b:9e:ae:
         fb:dd:18:80:f5:a9:dd:b1:11:6c:76:1f:7d:b8:aa:fb:84:18:
         3b:34:0b:e1:33:50:b8:d4:42:df:b5:a5:be:b2:be:42:3b:d2:
         61:2f:ef:28:95:ae:9c:6d:1f:b7:41:c2:c8:79:46:70:ed:b0:
         9c:02:9f:6f:e5:28:ec:8a:08:b1:25:af:71:3f:8c:b1:22:0e:
         1f:59:83:8f:f8:04:b6:1d:e8:94:68:9e:3e:95:c5:d0:ee:93:
         17:dd:63:95:77:b6:17:11:27:53:7b:ee:61:aa:d5:0a:11:3c:
         5f:17:00:ef:64:81:86:22:66:e5:e2:fa:90:60:8b:8c:55:6f:
         8b:3f:c6:e6:f3:a8:b1:fe:7f:90:7c:42:0f:54:09:15:09:0b:
         d7:43:ae:cd:5f:d3:65:72:e6:68:19:f6:b3:67:35:c9:09:ac:
         75:3f:02:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:12:28 2025 by rpki-client