Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c771b488-beec-37c3-8958-267f5277a09a.roa
File:                     c771b488-beec-37c3-8958-267f5277a09a.roa (raw, json)
Hash identifier:          cgv/ds1ETdn3RBduSfqCkrL8UQiNMHfAd6TL14qIlwg=
Subject key identifier:   7C:57:D1:33:40:74:2D:44:26:59:FA:48:B7:1D:86:C0:C5:FF:D7:6E
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584A8C70DD8922A8BFDEAA8D4540
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c771b488-beec-37c3-8958-267f5277a09a.roa
Signing time:             Thu 17 Jul 2025 13:01:04 +0000
ROA not before:           Thu 17 Jul 2025 13:01:04 +0000
ROA not after:            Wed 15 Oct 2025 13:01:04 +0000
asID:                     7029
IP address blocks:        173.186.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8c:70:dd:89:22:a8:bf:de:aa:8d:45:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 17 13:01:04 2025 GMT
            Not After : Oct 15 13:01:04 2025 GMT
        Subject: CN=6442bd2c-aeab-49df-8ff7-0aba5c73cf99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:6f:6a:60:e6:6f:74:39:df:04:fc:a0:7e:24:
                    66:cb:40:3c:9d:f7:5f:77:78:fe:fd:56:bf:d8:b2:
                    0e:fe:03:c0:4d:a3:ae:64:0a:5b:5b:37:d3:d9:1c:
                    18:ef:1a:ec:03:c8:11:bb:71:fe:c4:14:45:5d:07:
                    08:c7:36:bb:39:8b:2f:39:89:8f:d0:f3:0a:54:77:
                    5c:59:7b:f9:5a:25:9d:b7:57:e8:8d:3b:84:ef:37:
                    3a:f6:53:92:f1:45:b9:47:1f:5c:54:8b:d6:68:8e:
                    24:bb:f1:c1:c3:60:1f:7c:ef:d2:54:27:81:23:7b:
                    0b:6e:12:3f:8b:f2:f0:41:51:09:28:e1:b9:22:6d:
                    96:20:ba:86:21:c1:e4:b4:92:4e:d2:41:3e:33:13:
                    6e:fa:3b:b3:ea:1d:2d:93:55:73:a0:59:5f:59:cc:
                    0d:95:55:4a:ad:b8:b0:15:57:4e:15:95:7f:a3:f6:
                    39:62:b5:c1:2c:c7:cc:c6:d5:39:ec:32:cb:a6:cc:
                    82:35:f0:b2:71:7f:b5:ec:04:20:be:e8:de:c0:ca:
                    f3:7b:d6:5d:0f:e5:32:db:7b:ee:be:c6:7c:d0:23:
                    39:19:12:e3:b0:7a:74:5a:b1:97:b5:9d:85:d9:e6:
                    b8:6c:e5:88:94:fc:fd:38:c0:b1:87:55:25:59:bf:
                    21:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:57:D1:33:40:74:2D:44:26:59:FA:48:B7:1D:86:C0:C5:FF:D7:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c771b488-beec-37c3-8958-267f5277a09a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.186.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:d0:94:ab:6c:55:7d:74:98:ff:d8:fe:51:61:2b:c9:fb:11:
         97:84:dc:7c:62:7e:a7:47:a1:7f:35:d5:e4:f8:45:18:14:30:
         36:2c:6b:da:1a:45:ad:a0:4e:e1:f1:f2:71:68:e9:6a:f1:ee:
         b7:fd:7c:d9:b4:23:bd:0d:b3:9b:73:2c:61:a7:0a:57:5c:43:
         1c:9e:45:c4:29:81:53:0e:a8:5c:8f:14:7b:50:9a:31:fa:0c:
         c5:3f:f3:29:14:b2:f9:74:b2:66:a4:19:d6:dc:7d:b6:59:c7:
         1e:3c:12:60:eb:b1:ac:7e:e9:30:a5:fd:4f:83:52:8e:d1:32:
         32:e1:50:10:de:a9:49:3d:dc:dd:38:2f:b5:1f:57:d1:98:c3:
         f3:7d:e2:58:9d:4c:6e:d9:a2:27:1b:2e:92:05:7e:6c:dc:33:
         56:d9:02:da:5b:17:50:9e:32:78:7a:a4:0c:75:ce:24:05:18:
         ae:87:5c:5c:68:6e:e0:95:06:be:1c:e6:52:85:d7:df:3d:c1:
         97:04:db:e9:75:67:fc:33:38:99:bc:81:bd:82:f6:6c:4d:ab:
         e6:1e:74:b7:d4:de:e1:9c:d0:38:3f:c4:81:55:1b:1e:71:70:
         d3:84:a0:5e:33:fd:1f:02:d4:0e:de:ca:0a:c2:1e:6d:dc:4e:
         0e:54:19:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:45:36 2025 by rpki-client