Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a247f56-b1dc-3ee6-aeef-1edd281752db.roa
File:                     4a247f56-b1dc-3ee6-aeef-1edd281752db.roa (raw, json)
Hash identifier:          4PCLG/ARjoaYDrsfdH3b2hp7joHMay9Q+/9os1SqAuE=
Subject key identifier:   3C:32:21:1F:6D:57:58:F4:01:41:EF:52:58:3E:DB:92:74:79:36:05
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584B5DD2071440B9E479C0205C80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a247f56-b1dc-3ee6-aeef-1edd281752db.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     7029
IP address blocks:        71.31.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d2:07:14:40:b9:e4:79:c0:20:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=d9d44ae6-fe98-4952-a1a4-66ea57a12f19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d2:56:88:b8:ff:2d:92:9c:fb:84:7d:93:24:
                    0c:d4:97:81:ee:8d:a4:49:65:92:d1:d9:20:dc:ad:
                    3d:63:16:39:49:f9:f2:89:0d:7b:f7:1f:dd:b5:b1:
                    ed:27:4d:2a:c2:8a:ee:80:0c:27:7b:c0:c1:a2:58:
                    1c:be:7d:3e:6d:0f:0e:4f:78:1c:1a:89:46:e4:45:
                    01:7b:a9:4e:83:b0:94:58:99:fc:67:18:9f:94:ca:
                    41:c6:8c:48:ae:46:ed:d1:d1:9d:26:8b:16:78:27:
                    71:1c:93:0c:8a:08:58:50:02:de:77:27:b9:7b:69:
                    cc:cf:6a:80:48:dc:54:5b:3d:4c:c4:8a:81:52:ba:
                    34:d8:38:82:87:e7:70:9f:16:2d:0a:4b:05:f2:a3:
                    44:42:1c:60:55:ff:1c:a3:f1:30:fc:86:d1:4a:f6:
                    61:c3:6d:ac:ea:17:f6:17:27:69:30:65:f8:ab:75:
                    02:1e:69:1c:d7:fd:de:37:0d:68:4d:11:d7:24:6e:
                    c0:a5:bd:7f:fb:76:2b:b4:b5:39:a5:0b:d6:31:54:
                    dc:5c:8b:fb:87:27:7e:89:6f:0a:05:32:ec:19:86:
                    0e:d7:40:c0:1b:00:87:bb:ec:22:c1:ff:c2:79:71:
                    a5:5d:df:7c:76:f0:84:df:99:6a:13:67:8d:c8:05:
                    07:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:32:21:1F:6D:57:58:F4:01:41:EF:52:58:3E:DB:92:74:79:36:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a247f56-b1dc-3ee6-aeef-1edd281752db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.31.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:15:71:41:74:90:a5:df:fe:f6:f7:46:d5:0c:66:ff:4f:a5:
         9e:cc:db:63:0f:ab:0f:f6:64:2f:5f:7d:77:e0:58:90:aa:86:
         76:ed:8b:71:1d:32:c8:34:c5:2e:67:73:94:12:1e:22:3f:97:
         76:87:df:d0:83:0c:78:37:62:c1:67:ae:44:49:b2:02:51:08:
         92:c4:fe:f2:1e:4c:20:fc:50:fa:b1:2a:ae:1d:9e:c3:3e:6d:
         13:4a:94:b3:a3:37:86:38:26:5a:84:96:af:10:eb:71:df:a2:
         80:98:27:c6:0a:4e:13:19:fd:06:bc:74:51:78:d1:24:38:82:
         6c:f0:e5:4a:61:82:bb:f5:b7:68:ca:b0:5d:64:49:5a:1e:9d:
         8f:cf:ba:82:54:c9:60:5c:38:c5:61:d8:30:92:4e:7c:a7:0a:
         2a:30:ff:f5:27:00:0d:37:70:59:58:e5:90:62:31:cc:1a:17:
         3b:c1:3a:1e:e1:5c:81:c7:4b:0c:fb:21:58:b3:58:f2:60:37:
         bb:9d:b4:eb:43:64:67:8c:4b:23:6e:eb:ae:83:5a:33:28:39:
         87:a6:bd:0d:f8:ee:ca:3a:45:16:b7:a7:70:56:5f:a0:fc:f8:
         11:47:89:ff:48:3b:f6:63:d9:df:87:ac:cc:3a:c3:72:58:a6:
         fe:d5:45:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:06:00 2025 by rpki-client