Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b7018231-1d12-33c3-91e9-2da426ea822c.roa
File:                     b7018231-1d12-33c3-91e9-2da426ea822c.roa (raw, json)
Hash identifier:          WpRvjJ20v25Y7pYWsXg08DC+4rDhAMBbCmEDRnSeIyM=
Subject key identifier:   0F:41:21:4C:CD:D6:FD:88:19:E4:56:9E:3F:8B:0F:7D:5B:1C:77:60
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584AB4EC6523BD302B0ACCA67900
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b7018231-1d12-33c3-91e9-2da426ea822c.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7029
IP address blocks:        64.24.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ec:65:23:bd:30:2b:0a:cc:a6:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=a24aad7d-9e9d-48c1-a82e-e293764fc09b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:15:02:95:9e:11:c7:d3:a0:38:dd:0e:4f:76:
                    1c:29:5d:77:e3:7b:ba:2d:f2:b3:de:ca:0b:6b:3a:
                    6c:e1:e2:68:bc:73:69:5d:a7:30:17:1b:f5:d9:73:
                    b2:29:45:e0:89:6e:aa:3f:a1:0a:69:aa:b8:25:12:
                    c2:a5:11:b2:0e:0f:8e:cf:10:46:49:ac:47:f5:3e:
                    5d:f7:98:cf:1f:26:d2:45:e3:c8:92:3a:db:af:35:
                    bd:cf:c2:0e:40:b5:54:b5:c9:04:e7:ae:4e:e1:fd:
                    b2:34:37:02:99:2f:53:15:b6:44:4a:1f:0b:f8:d7:
                    05:de:b2:49:d9:05:26:68:c8:40:44:32:cb:97:85:
                    9a:ea:56:22:13:66:72:bc:4e:2c:3b:20:f7:9a:22:
                    1f:34:43:0a:50:74:38:e3:5b:18:3a:3c:f1:8e:d6:
                    b9:a5:37:ba:e7:23:49:27:df:2c:2b:94:71:a1:17:
                    11:7a:46:28:31:8c:62:52:dd:a2:ec:27:83:de:81:
                    c7:cf:2f:f8:dc:89:67:5f:98:b3:ba:14:d6:7b:78:
                    11:9f:88:7a:78:1e:44:b1:2d:d3:dd:ae:8b:08:a5:
                    a4:58:77:97:2c:4f:20:b7:75:c4:8a:be:3a:ab:d5:
                    35:f7:38:c5:1c:39:c0:09:fa:44:24:36:66:80:60:
                    59:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:41:21:4C:CD:D6:FD:88:19:E4:56:9E:3F:8B:0F:7D:5B:1C:77:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b7018231-1d12-33c3-91e9-2da426ea822c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.24.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:39:5a:f5:1b:0d:05:a0:6b:94:08:79:1c:9f:ba:71:9d:39:
         ed:f1:04:9d:55:90:df:08:8f:56:5d:5a:e6:74:99:8a:7f:02:
         f5:a4:3d:c0:f8:10:88:a6:a0:6f:3c:fb:c8:03:d8:1b:dd:28:
         75:28:a8:31:d7:74:aa:31:a5:a0:28:31:71:03:07:87:68:7b:
         97:1e:ab:b0:83:62:b8:99:32:d0:14:ec:23:74:d2:09:23:75:
         2e:5d:c3:ba:36:69:e7:7c:9d:92:58:47:6d:12:76:b2:40:12:
         85:ab:ca:07:13:f6:13:c0:ca:a3:1e:67:4b:73:83:9b:86:72:
         18:94:05:2f:7d:0d:b1:84:af:7a:b8:b8:d4:25:14:04:04:9c:
         8e:af:3b:52:d4:c3:0b:ce:45:e1:0e:6c:a8:5c:ff:b2:49:cc:
         ee:a3:be:66:61:b5:8c:2f:9a:fb:f2:ce:d1:b0:66:cd:a7:33:
         4a:b2:ba:84:fb:c6:52:6f:12:14:3e:17:fa:0b:e4:a7:d3:a7:
         f3:84:d1:13:cb:24:0e:49:a9:37:1b:1a:75:77:3f:5c:25:78:
         90:09:6b:12:4e:2c:18:d8:b9:a9:0f:c7:9a:d8:d4:37:86:12:
         11:a2:05:c8:31:d6:b1:e3:7c:fc:5d:3a:c2:d5:bf:2d:09:72:
         64:e5:8a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:10:59 2025 by rpki-client