Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9cea1be-73cb-3bce-ad62-f8abb6b24fc8.roa
File:                     c9cea1be-73cb-3bce-ad62-f8abb6b24fc8.roa (raw, json)
Hash identifier:          Xalnxs/ZUMJdseh8Nx+vWU2KtplvecFBONih5X//A5Q=
Subject key identifier:   3E:AB:D6:43:AE:F1:F4:F1:AB:96:6D:2A:39:88:57:24:2F:7D:3D:01
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584A90A0DC9174C69F8BE58B07C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9cea1be-73cb-3bce-ad62-f8abb6b24fc8.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     398741
IP address blocks:        40.136.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:dc:91:74:c6:9f:8b:e5:8b:07:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=6f9295af-985f-4a8c-af0b-cadefbebc8fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c1:c3:9b:5c:84:60:e4:d6:1a:97:aa:9c:f3:
                    da:5e:91:06:7a:e7:91:a8:2f:01:fc:1f:cf:be:ff:
                    71:d5:01:88:55:e3:b8:2d:af:15:23:65:71:5e:1d:
                    51:7b:2e:c3:b7:79:50:5d:48:a5:71:00:db:45:28:
                    5b:48:83:af:f3:2e:61:15:c1:f3:3f:de:3e:5f:35:
                    24:69:7a:fc:29:c5:1d:6d:81:c3:25:13:5a:1f:bb:
                    c4:74:c3:40:90:6d:0e:11:7d:e0:6c:c4:71:f9:cd:
                    58:ee:f0:a5:b4:cd:17:cf:f6:74:46:7d:3f:d3:55:
                    bb:9b:21:66:ca:73:22:af:09:2b:3b:33:7c:1c:e1:
                    16:d7:8e:a8:d0:d4:f7:83:bb:3e:9a:ae:5f:6a:9b:
                    e7:eb:00:37:bf:f6:12:9e:64:69:2c:1b:d6:2b:64:
                    ce:2f:1a:d1:f3:39:4a:08:04:f4:02:4e:70:8b:4a:
                    76:92:26:f8:13:d8:3f:e6:f5:56:a3:82:d8:53:dc:
                    4b:f7:21:73:0e:bc:eb:b2:e0:55:d2:e8:0c:a1:a6:
                    a8:cc:eb:de:f7:9f:40:b2:12:7a:b4:17:32:be:81:
                    14:f5:52:ae:6a:f1:c9:c9:7e:b5:32:76:58:54:13:
                    8b:4a:e8:df:58:ee:a3:2f:da:df:37:03:1a:7e:5a:
                    c6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:AB:D6:43:AE:F1:F4:F1:AB:96:6D:2A:39:88:57:24:2F:7D:3D:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9cea1be-73cb-3bce-ad62-f8abb6b24fc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.136.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:52:49:7b:87:47:27:c2:6f:21:5c:bc:c7:dc:c3:07:69:b5:
         16:85:38:cf:e4:31:19:a6:e8:f9:8c:55:2e:70:f4:5d:4d:91:
         73:88:97:be:dc:8f:a5:6b:c9:76:7b:b1:0e:26:3f:74:5f:fa:
         b9:4a:78:78:10:f6:cb:51:68:db:13:70:91:8b:10:72:eb:5a:
         44:5f:43:ee:ea:10:e2:36:f0:0e:c9:5c:cd:33:41:4c:c1:96:
         20:07:71:87:a5:1f:88:8b:32:81:c1:9e:b9:b7:3a:e3:0c:96:
         87:0c:3c:a6:34:d2:0c:02:dd:6d:94:18:1a:95:ba:17:79:5e:
         19:85:e1:88:a7:6a:07:13:b4:ca:3b:29:b1:f6:ac:d8:1b:5e:
         26:89:7f:26:8b:66:22:31:19:ed:58:09:f3:45:47:f5:07:4d:
         35:68:13:86:7d:cc:bf:ea:9b:e7:74:55:bd:70:fc:7d:e8:dd:
         53:4e:43:69:4d:de:73:1f:fc:cd:a6:52:07:40:6d:bb:96:fc:
         0f:7e:11:96:ba:98:74:45:f0:63:f7:9f:38:7b:87:31:38:be:
         3a:df:c9:09:52:45:a3:43:32:90:2a:b5:85:0c:02:73:15:85:
         68:12:ef:f7:aa:bd:a1:2e:8f:04:59:7f:19:2f:ae:47:3d:dd:
         75:36:28:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:24:25 2025 by rpki-client