Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e6c8d05d-9f46-35d3-afe0-7f720cae81c9.roa
File:                     e6c8d05d-9f46-35d3-afe0-7f720cae81c9.roa (raw, json)
Hash identifier:          gSPmDD+jCjKFBYUIyVY17f6zCdAw3nY+I006tPKrKw8=
Subject key identifier:   F6:B0:54:AE:D2:3C:44:44:D7:87:1B:EE:64:26:4D:C8:0F:1D:BD:7B
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584A90A0CDA9A5F6E9E7D517B480
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e6c8d05d-9f46-35d3-afe0-7f720cae81c9.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     7029
IP address blocks:        139.55.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:cd:a9:a5:f6:e9:e7:d5:17:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=bf8eb55a-3bc9-4c68-8c2f-507d79f79044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:de:04:b8:2a:f2:d4:07:99:6c:07:75:fb:9b:
                    b9:f3:e4:b4:ac:1d:25:30:d8:97:60:c1:61:13:3f:
                    62:9c:3d:26:42:e7:09:cf:ec:d4:0d:c1:a3:3c:d1:
                    df:1e:f2:a5:64:f7:87:27:1a:df:12:7c:87:7f:82:
                    69:b9:b6:84:79:6b:8f:71:55:5f:64:71:89:f0:1a:
                    17:86:61:ce:9b:ed:b0:1b:99:ce:0b:32:7b:95:e9:
                    c5:2e:52:38:ec:92:3a:ea:88:35:50:f5:60:42:a0:
                    c5:8a:c2:e1:c1:99:51:55:85:c2:74:fb:b1:6c:f3:
                    26:72:bc:e5:c0:99:14:e9:b3:33:7c:94:13:64:28:
                    07:bc:57:93:9d:4b:69:43:8d:fb:88:2a:1d:31:c0:
                    3b:bd:7a:3c:da:cb:da:83:56:46:4c:7f:1d:aa:13:
                    96:60:d4:8d:4d:ff:3e:a6:f2:27:7f:ef:14:85:77:
                    f0:cc:2e:41:cb:90:5e:5e:11:0f:34:15:15:59:60:
                    ba:a5:9e:01:fc:2a:04:7d:cb:bc:c4:66:b9:92:62:
                    fb:b2:d1:34:b6:0b:40:3c:73:6a:84:6c:e4:5e:f8:
                    dc:bf:d0:f1:14:7b:ac:76:09:0d:f2:6d:fd:79:b1:
                    5e:37:ae:b6:9b:40:ae:ec:6b:27:46:a6:de:27:5f:
                    5a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B0:54:AE:D2:3C:44:44:D7:87:1B:EE:64:26:4D:C8:0F:1D:BD:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e6c8d05d-9f46-35d3-afe0-7f720cae81c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.55.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:06:63:b7:7a:5b:f3:95:13:1f:63:6b:5e:f4:f1:9c:cf:47:
         fa:d4:31:d6:bc:7d:e7:d1:df:01:03:d0:ce:1e:d6:17:b1:71:
         19:07:2d:54:17:52:c8:ec:9a:23:25:a9:b6:ae:be:93:e2:b7:
         0c:a9:37:2e:6a:eb:3a:1d:d1:5f:99:43:6d:23:b8:07:0a:06:
         23:03:3e:9d:fc:16:75:ef:cc:9c:df:4c:61:d3:a0:7d:f3:f7:
         ac:75:e5:11:80:b6:7f:e2:1a:21:c3:43:4f:0d:0e:ce:9f:71:
         1d:c4:d6:9b:d4:91:50:08:62:ed:28:29:69:54:5d:75:1f:a3:
         d9:76:4c:11:b8:49:11:be:84:03:7e:b4:23:10:c9:18:a6:7d:
         a0:fb:20:f9:13:8c:ce:7e:48:d6:4c:1f:3f:28:9a:ca:9b:16:
         21:ba:a7:0d:0e:83:a9:67:ee:db:e6:c7:6e:7b:53:3d:64:6a:
         2a:1a:45:42:fe:56:8f:6c:58:49:3f:6d:96:62:e1:e9:ae:8c:
         b1:61:54:17:62:12:9a:e7:51:43:f9:fa:b0:77:17:39:41:8a:
         dc:44:63:70:a4:64:f4:72:24:23:51:cd:b5:68:1f:e0:28:22:
         08:78:81:ed:e0:c8:11:43:6d:03:33:bc:34:75:5d:9b:3d:55:
         93:f1:9c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:23:23 2025 by rpki-client