Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/07520975-b84f-3eb7-a1aa-c2201a0d6580.roa
File:                     07520975-b84f-3eb7-a1aa-c2201a0d6580.roa (raw, json)
Hash identifier:          7TaIbfMDWK6VlgycfXTCctWQX61MHqN5d8bvA8DWmd4=
Subject key identifier:   73:F7:31:27:EC:32:69:1E:FC:20:30:F9:19:D6:D5:A4:7D:00:DE:88
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584B715CF24AAFC18386A8D12480
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/07520975-b84f-3eb7-a1aa-c2201a0d6580.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     7029
IP address blocks:        64.178.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:f2:4a:af:c1:83:86:a8:d1:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=719b8347-8eff-456a-b1d4-ce9817af98a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:4c:08:f2:e1:2f:a7:61:68:7f:6a:5e:75:f9:
                    c1:df:7f:94:9b:fd:87:04:41:15:1f:a8:8e:f5:f6:
                    f9:5e:ae:ed:6b:b9:2f:c8:d7:32:8a:a0:89:4a:37:
                    3f:bd:e0:ed:07:57:77:c3:98:ee:b9:7f:a3:72:b1:
                    7e:67:1d:91:b2:67:ba:5a:f7:2e:af:57:33:09:56:
                    9b:67:0b:8d:90:42:5d:7a:9d:c3:cb:bb:8a:04:a8:
                    6e:5b:06:2b:22:9f:3e:85:e2:5d:5f:6c:ca:48:68:
                    14:80:f9:54:42:88:b2:db:13:f6:e1:a9:34:25:b6:
                    2a:62:4f:c2:aa:21:37:7f:b4:db:30:1a:76:7d:95:
                    6c:0c:8e:bf:34:30:60:81:6e:4e:b5:99:ef:cd:7a:
                    fc:3b:8c:08:25:67:ac:18:d8:b2:4b:8f:bc:3a:66:
                    02:53:a4:c3:4a:5b:98:f5:3a:ad:50:cf:09:cf:19:
                    1b:43:08:ab:72:98:f9:0a:66:41:4b:8d:64:a0:04:
                    29:c7:15:41:8a:e0:f4:83:ce:c0:cf:8e:68:8f:c0:
                    3a:50:48:64:b1:6d:75:9f:8a:4a:f0:40:57:b6:6c:
                    c2:53:2f:6f:15:31:af:c1:7c:f9:a7:34:5e:17:19:
                    70:bd:f9:5b:8a:ac:b5:1c:da:e0:f4:bf:60:a5:ad:
                    1b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F7:31:27:EC:32:69:1E:FC:20:30:F9:19:D6:D5:A4:7D:00:DE:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/07520975-b84f-3eb7-a1aa-c2201a0d6580.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.178.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:20:fd:06:43:fb:ba:ed:c9:16:03:bb:dc:f5:f6:a8:ae:d3:
         c6:12:24:81:5e:0d:86:82:51:95:72:f1:0e:d9:79:d3:56:ed:
         00:d6:83:79:ec:b5:f1:e6:9d:63:6a:2d:d3:6a:58:b3:df:b0:
         28:0b:5e:88:37:e7:78:20:1c:c1:b8:c6:db:df:9b:e1:72:6f:
         33:04:f7:3f:c1:2d:f2:f5:f0:a2:a7:fb:0a:2d:0e:e5:85:ad:
         71:77:cd:28:e7:eb:a9:d7:0a:88:a3:2d:d5:6f:80:a9:2f:eb:
         40:9c:f8:bb:57:f3:1f:f6:46:ed:15:67:84:c6:1e:5d:a6:6f:
         7a:32:8d:ea:3b:37:95:2a:c7:66:a8:d8:41:29:f0:1f:5b:f1:
         6d:1a:4a:d0:9c:64:1c:e2:60:f9:40:4d:1d:bf:fc:22:59:dc:
         4e:ae:db:a9:38:da:0b:2d:3a:fb:22:5f:ed:ec:7c:f1:10:8e:
         43:82:9a:41:72:d3:14:95:04:5a:18:fe:81:08:b6:3c:57:57:
         13:97:76:77:5d:33:29:88:18:86:43:0d:7d:eb:eb:d3:dd:08:
         32:33:b6:e9:67:0c:cd:80:bb:87:e0:b8:bb:a9:c3:d2:12:ec:
         e6:c6:55:25:6e:a5:fb:4e:3f:34:d0:82:9e:18:1d:9d:4b:40:
         a6:21:7c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:06:47 2025 by rpki-client