Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4194b9a-5919-3a2c-94dc-6d4c61633dc0.roa
File:                     c4194b9a-5919-3a2c-94dc-6d4c61633dc0.roa (raw, json)
Hash identifier:          dkJtJhjsCBjX0l0BKX9hfDisBHFTxon/dioqepOYko8=
Subject key identifier:   E1:16:66:E1:D1:4B:15:6A:CD:F8:02:4C:3F:84:23:A4:B1:D8:04:A0
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285849ABB491F98A8E1BCC398E29E0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4194b9a-5919-3a2c-94dc-6d4c61633dc0.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     7029
IP address blocks:        75.89.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:91:f9:8a:8e:1b:cc:39:8e:29:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=c6bd1777-32f1-489c-ba8e-368fb97ef63c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:63:c5:72:e8:af:a0:4e:d6:cb:98:4b:68:82:
                    1b:e8:68:dd:0f:7e:cc:55:61:e6:c3:36:9b:b1:a7:
                    a8:80:1f:64:30:60:04:da:81:96:40:eb:9c:db:71:
                    55:c8:0c:95:00:60:a2:70:dc:16:84:27:d5:20:51:
                    4b:f3:51:7b:74:c6:cb:ca:5a:35:7c:fb:86:d7:0b:
                    d3:f0:e1:ad:64:06:17:1a:a4:48:68:bb:17:30:0c:
                    4d:17:bf:f4:37:76:99:de:32:9a:ee:31:01:6a:f9:
                    3e:f5:a7:a1:ce:c8:1d:43:21:81:6f:5c:1b:ae:10:
                    61:8b:34:54:93:db:81:a3:0f:94:3c:10:c4:cd:59:
                    46:52:3f:4c:24:8c:d8:70:ee:0a:14:47:f3:bc:cd:
                    69:4d:b0:a0:2f:48:b8:e8:d7:1f:c7:36:af:70:7a:
                    ed:22:b9:5c:20:a9:93:47:80:1a:16:ff:8b:b1:41:
                    d9:a8:0f:b0:06:f4:d1:b6:32:f3:29:61:11:f0:1c:
                    98:5b:24:ed:03:22:4c:48:d8:90:96:f0:29:14:0c:
                    e2:3e:5a:67:53:3d:26:9b:25:25:a1:98:ae:76:8e:
                    12:07:dc:96:6b:86:d5:b3:d6:f4:f9:6e:1e:4b:b7:
                    f3:67:97:ba:a9:d8:dd:89:e3:52:a4:4b:02:e0:8d:
                    4f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:16:66:E1:D1:4B:15:6A:CD:F8:02:4C:3F:84:23:A4:B1:D8:04:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4194b9a-5919-3a2c-94dc-6d4c61633dc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.89.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:56:73:3b:44:43:73:2c:89:6e:94:24:97:c3:fb:93:46:ba:
         ec:22:6d:d6:21:4e:ee:a2:34:29:a5:1c:d7:d6:3e:9d:30:10:
         4a:2a:81:c4:28:32:1f:19:ce:f3:3e:4a:de:37:fb:78:be:f9:
         cd:87:fc:15:0f:fa:7f:60:30:23:4d:0b:12:5b:a8:3f:00:5e:
         1f:8d:7c:91:76:b7:42:ad:7f:88:04:04:c3:15:62:98:38:c9:
         02:a9:54:87:0c:a2:d4:bf:a7:f3:80:f7:3e:d5:6d:9f:d6:66:
         50:36:b8:d7:66:56:58:3f:ff:62:05:06:f4:de:c4:eb:f3:42:
         59:44:7d:15:3e:b2:ca:35:c4:9c:4f:75:c2:37:10:73:27:9e:
         9e:03:0b:6c:8d:b3:57:b1:fb:db:4f:eb:f0:82:65:29:28:8a:
         91:76:e7:b8:d4:26:7f:93:5d:22:e2:6e:11:1b:74:61:43:ec:
         01:6f:fe:a3:3e:7d:bf:44:11:f9:76:e2:85:e8:29:06:cd:17:
         9f:40:58:21:93:22:16:8f:c4:1d:f5:3c:62:2c:99:20:0c:ab:
         1e:b2:1a:c5:87:47:02:61:4b:67:72:d7:ca:55:2b:09:f1:dc:
         e7:fc:a2:78:ae:0a:0b:00:0a:98:7d:ec:9e:5e:b3:83:65:c0:
         68:fe:5c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:02:31 2025 by rpki-client