Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca680b6f-d40e-316c-b986-e0c0fb556767.roa
File:                     ca680b6f-d40e-316c-b986-e0c0fb556767.roa (raw, json)
Hash identifier:          a0TCn6I9OKDLXRw2bNRQFwXXLNGbf23WCZrqLLMzqTo=
Subject key identifier:   F5:52:06:E9:DF:25:72:06:32:D9:8E:0C:A2:07:BE:E9:02:F4:C8:3D
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584AADF0F5695B4A28AF499B448C
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca680b6f-d40e-316c-b986-e0c0fb556767.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     7029
IP address blocks:        216.96.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f0:f5:69:5b:4a:28:af:49:9b:44:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=e2f73ff9-d6f6-4c4c-8c81-a956251b99ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:89:29:11:60:c8:fd:83:0e:07:74:69:e0:fc:
                    37:65:37:81:f8:41:f3:1c:ca:67:18:a5:ad:ce:7f:
                    6f:00:80:5a:9d:59:df:a3:21:da:78:80:92:0c:b0:
                    77:a5:06:56:7f:33:de:bb:43:26:f5:e8:d3:76:0d:
                    5e:09:e6:49:8e:d5:a2:d0:40:43:26:c6:d5:d9:a3:
                    de:d4:db:bc:d6:6c:1f:34:d6:2c:8c:d9:20:02:e9:
                    17:cd:a5:2a:45:a7:00:fb:b0:63:1d:4c:f4:4d:5c:
                    ea:de:a4:a8:e7:5b:58:37:da:ad:d2:4e:17:d3:9c:
                    11:38:6a:0f:ba:94:35:13:a4:bc:2a:a9:d8:a5:e6:
                    1d:b8:d8:85:17:63:6b:51:41:da:c3:4e:8d:ca:a1:
                    10:af:ca:42:43:d3:54:3e:14:13:ac:1c:c2:a8:dc:
                    84:af:eb:6f:79:d6:ba:96:9a:8d:0f:46:95:80:43:
                    0e:59:bd:74:16:41:11:9c:2d:8b:1b:63:42:97:6f:
                    8c:5c:5d:1f:5d:b5:4e:6d:03:a7:3e:74:ac:bf:64:
                    21:8d:84:b1:97:38:87:2f:5b:10:96:21:18:98:a4:
                    ec:0d:3f:14:93:2f:db:bc:d8:f8:39:fb:fd:2c:70:
                    04:35:90:76:fa:60:fe:bc:59:f4:d0:94:fb:5e:46:
                    9a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:52:06:E9:DF:25:72:06:32:D9:8E:0C:A2:07:BE:E9:02:F4:C8:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca680b6f-d40e-316c-b986-e0c0fb556767.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.96.54.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:95:6b:58:84:36:c8:08:05:0d:3e:55:49:6c:57:58:89:63:
         41:65:7d:50:bf:4e:59:ec:c2:a3:62:ec:d7:dd:36:59:9b:09:
         32:55:27:0b:6b:bb:f0:dc:4b:d7:3b:6e:8b:df:ef:ef:fc:94:
         9b:99:27:5f:ae:9c:80:08:28:fb:6e:bf:36:db:84:57:04:4c:
         19:e2:10:c2:6d:c7:8a:92:85:ed:41:b0:2c:b2:e4:bf:db:13:
         91:15:cb:21:0b:ec:12:d6:1c:b4:d1:c9:78:d2:47:36:45:44:
         8d:fa:6b:c7:80:52:d1:34:19:fe:6f:8a:15:8c:be:0c:f5:02:
         2b:8f:b1:b0:6d:aa:99:ea:62:fc:52:10:97:ea:bc:6b:ac:ad:
         e7:76:aa:54:65:93:f6:ec:d8:34:0c:43:15:18:97:0f:a4:f4:
         2c:d5:ce:65:c8:c7:b6:13:04:7a:da:c3:50:b0:21:57:e9:82:
         5b:33:af:2a:d6:8f:ea:1a:6b:31:3f:59:38:79:94:3f:78:c9:
         d9:96:01:48:da:e6:b8:34:5d:ec:02:f5:6b:1a:37:73:87:b6:
         d4:83:56:63:1a:e2:86:50:05:bb:14:57:c2:15:7d:7f:78:45:
         ad:da:b9:7c:be:eb:85:fc:07:b3:6f:7d:d1:dd:30:66:e4:3e:
         d3:1a:c9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:16:12 2025 by rpki-client