Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/584dc552-bf81-3462-998c-fcee1ac19d73.roa
File:                     584dc552-bf81-3462-998c-fcee1ac19d73.roa (raw, json)
Hash identifier:          SjeR05HbSDxDww2eLNZESwTpnLZZZugEEc8Nj++U0HQ=
Subject key identifier:   B4:77:8E:A0:15:F3:32:4D:96:94:AE:B1:88:EE:0B:86:EA:9B:9F:C1
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584B715CFAB7B694FEA3AD54AE80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/584dc552-bf81-3462-998c-fcee1ac19d73.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     7029
IP address blocks:        207.7.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:fa:b7:b6:94:fe:a3:ad:54:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=dfbe5f56-047a-4fa4-87e0-877c86277389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6b:e0:f8:0c:18:90:d7:07:38:d2:c5:54:39:
                    fa:7a:30:5b:bb:a8:fa:54:30:6c:8a:c6:a6:46:b9:
                    59:28:23:39:52:52:18:0a:9e:c4:64:49:38:08:54:
                    e1:ac:4b:9f:c3:63:69:03:5b:32:99:48:b6:94:3b:
                    3f:68:1e:79:32:ce:aa:d3:20:5a:ec:7e:76:55:2d:
                    22:ec:50:d5:19:76:d7:56:d9:c0:2a:34:fa:38:92:
                    55:2b:1c:6f:ca:e6:16:40:ac:51:00:a2:7e:64:98:
                    93:a4:62:79:88:53:06:09:3e:e5:c1:cc:7f:91:f1:
                    ec:94:d7:33:82:a0:db:19:8f:96:30:49:5b:e4:88:
                    e0:73:c0:d3:64:41:b1:4b:3c:f7:e1:fa:c0:f5:c6:
                    b4:48:24:b4:fc:c2:98:12:b6:ac:43:fb:5c:6b:bd:
                    e0:b4:21:63:48:b9:fd:03:6e:2f:8d:d4:81:9f:58:
                    fb:d5:d7:d8:1a:a0:b2:b0:7c:65:86:35:fd:3c:33:
                    09:eb:c3:0f:97:2c:11:f9:84:4a:6a:47:68:18:7f:
                    4f:42:3b:ef:57:7a:e5:87:52:ee:ca:ed:6b:41:6e:
                    71:cd:b8:34:3a:ad:8a:1a:28:1b:0e:7c:dc:5d:78:
                    da:6f:35:b9:8f:82:6e:75:85:9a:15:59:8e:50:2e:
                    db:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:77:8E:A0:15:F3:32:4D:96:94:AE:B1:88:EE:0B:86:EA:9B:9F:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/584dc552-bf81-3462-998c-fcee1ac19d73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.7.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:e1:f8:8d:75:9b:54:9a:20:8f:b4:0b:6b:e6:65:91:38:e0:
         a1:6c:f8:5e:5c:e4:77:7d:d7:ce:8b:fd:16:23:64:54:e6:71:
         a1:59:45:78:3a:dc:32:70:22:84:3e:82:2a:c4:0a:01:1d:c3:
         7d:a4:d0:cc:bf:b3:8e:2b:90:6a:6d:85:6c:b5:e0:fd:92:92:
         9b:4f:83:bb:fe:a4:75:c6:ef:bb:75:f1:a6:d7:6b:3f:58:a1:
         fa:8e:6f:ce:11:26:19:d4:d6:27:52:84:be:ea:bf:52:75:05:
         64:0f:22:01:44:b3:c8:ed:88:f3:03:09:fb:ff:be:97:a3:7e:
         32:f4:7e:94:36:22:d8:38:42:c3:7c:dc:cd:fd:1e:26:c4:c4:
         91:8e:45:2c:05:4c:ca:8b:88:35:7d:5a:a4:b4:b6:90:fc:8d:
         54:31:90:7a:8c:6d:dc:24:cf:fd:84:1e:87:0e:df:cf:fc:0f:
         ab:a9:78:9a:4f:05:39:9e:1f:61:9d:c8:b3:18:54:44:9d:96:
         44:5e:e9:b8:ad:30:6b:6d:70:b6:df:5e:de:f0:bf:b3:a4:a6:
         97:b1:c0:e7:1e:ad:4b:cf:1d:2d:0f:f6:18:b6:4b:eb:a4:17:
         a0:36:94:1c:51:22:9f:5b:2e:04:1e:7e:22:b4:4e:86:d1:51:
         bc:68:ba:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:06:51 2025 by rpki-client