Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/eb6df380-1fee-36d1-9572-f09cbae22092.roa
File:                     eb6df380-1fee-36d1-9572-f09cbae22092.roa (raw, json)
Hash identifier:          fklQNA4z7uDmThSJignvTtyHdRQ/vUEmwrS54UlXG+E=
Subject key identifier:   CC:64:F1:9A:EE:52:E4:A2:2F:B3:B8:95:A9:8A:1B:D4:20:86:34:91
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584A90A10783432DBA34930CB210
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/eb6df380-1fee-36d1-9572-f09cbae22092.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     29922
IP address blocks:        205.232.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a1:07:83:43:2d:ba:34:93:0c:b2:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=563039c3-66ff-40a2-ad60-3e49238cb16e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4c:53:24:4b:6d:95:df:e9:17:c3:e1:6d:c7:
                    e4:85:30:b5:13:86:23:48:32:7e:59:9f:9a:7f:58:
                    2f:be:05:d0:bb:f0:4f:41:42:b0:1d:b3:d0:db:4b:
                    f7:21:0e:9e:45:6a:c1:fb:08:da:e7:bf:9f:5c:df:
                    a3:64:fe:15:1f:2b:3a:5c:1a:90:9c:00:89:ff:75:
                    da:e7:54:7d:cc:2a:53:bf:a9:cc:43:d0:45:b8:9e:
                    cc:02:70:e7:a1:16:fe:11:e1:dd:95:0e:52:62:32:
                    d7:e6:9f:97:af:fc:98:1f:85:b7:16:7c:60:d1:f0:
                    1f:4c:28:6e:89:68:00:ea:00:a1:50:c2:ec:33:0a:
                    55:51:07:c8:3a:30:77:aa:03:de:7a:71:d5:ab:50:
                    e3:09:23:d4:e2:dd:d8:51:02:e4:85:de:2e:22:15:
                    0b:ab:43:b9:33:e7:6a:59:2f:c7:a1:5b:c3:d0:fe:
                    49:2f:63:52:3e:da:59:ea:6d:93:d0:12:a9:37:6b:
                    75:bd:77:e1:d0:81:45:85:33:31:0e:b2:fd:3a:7d:
                    4f:5a:16:50:5d:5d:db:a5:77:03:30:bd:68:75:63:
                    8e:1a:c7:07:97:0e:1d:64:12:1e:76:02:30:50:de:
                    6c:63:1b:76:bc:a1:a2:ee:31:47:a9:c1:cc:c6:57:
                    20:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:64:F1:9A:EE:52:E4:A2:2F:B3:B8:95:A9:8A:1B:D4:20:86:34:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/eb6df380-1fee-36d1-9572-f09cbae22092.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.232.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:2a:20:1a:90:9e:8b:a8:51:dd:c4:29:79:54:b6:89:e6:78:
         64:a2:7a:7c:9b:51:a5:bc:a5:28:20:ca:fe:7e:91:b1:ea:1f:
         b7:68:97:d0:e9:32:79:6d:a5:1a:60:7c:33:af:64:9a:76:4c:
         29:04:b7:cc:cc:15:4c:6f:03:d6:16:e7:ed:e6:ad:d4:d1:47:
         98:d3:70:6a:3c:e9:01:42:ac:c7:e2:35:cf:c2:2f:23:88:e5:
         dc:2b:9a:ca:d3:1c:a7:30:e1:4e:2d:c3:bb:a3:9e:f8:16:1c:
         b3:bb:93:6c:fe:1a:5f:d1:fe:a2:4c:9f:2d:d4:bf:bd:0a:aa:
         6e:11:2a:fa:8b:47:e9:30:5d:af:0a:a9:9f:1a:9c:0b:59:10:
         d3:df:b9:58:2c:65:b7:d0:7c:7f:77:78:19:b0:56:6f:de:06:
         04:35:24:3c:e4:a8:45:3d:5a:38:b9:7f:99:bf:d2:77:e1:64:
         4f:7d:0b:91:61:49:70:28:57:14:89:57:38:cf:38:92:1f:a9:
         e3:c2:4e:c3:fb:a0:e6:30:b9:87:95:06:56:70:95:6c:5e:b4:
         29:fc:d6:cb:81:23:c3:c8:2e:b7:9f:de:be:df:e9:fd:c7:cb:
         55:cb:45:79:93:21:33:2f:e6:cf:0d:ee:53:05:c7:c0:22:6e:
         b3:b4:89:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:07:18 2025 by rpki-client