Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a77b1095-a1f5-3866-aefe-cf4e31a6512a.roa
File:                     a77b1095-a1f5-3866-aefe-cf4e31a6512a.roa (raw, json)
Hash identifier:          lOj91KwCdiQ5CrRjs1+Ky5+5c4JGvhOI0fplwNJXZK4=
Subject key identifier:   C1:49:55:07:BC:49:6F:F8:DE:EE:16:B4:22:7A:E9:01:6D:76:60:76
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584B2C6658AD8A2F88F54808B140
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a77b1095-a1f5-3866-aefe-cf4e31a6512a.roa
Signing time:             Fri 12 Sep 2025 20:09:29 +0000
ROA not before:           Fri 12 Sep 2025 20:09:29 +0000
ROA not after:            Thu 11 Dec 2025 21:09:29 +0000
asID:                     7029
IP address blocks:        71.31.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:66:58:ad:8a:2f:88:f5:48:08:b1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Sep 12 20:09:29 2025 GMT
            Not After : Dec 11 21:09:29 2025 GMT
        Subject: CN=33c0f3bd-24c4-434f-8fc7-2bca413a479b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:49:4f:f0:88:04:d9:05:60:db:6e:73:22:05:
                    88:45:c3:05:28:a7:53:ab:66:e3:48:e8:c5:71:56:
                    ac:48:2d:53:b5:1e:8c:bb:46:17:e5:02:1b:cd:e9:
                    74:32:b3:28:5e:af:29:b6:b7:d2:d3:e8:91:b5:00:
                    09:ea:6b:79:7c:52:13:46:a6:50:93:66:1f:92:6c:
                    57:33:1f:b7:19:67:07:9a:e0:cf:af:c4:01:81:30:
                    78:6e:c1:ab:ed:db:63:54:1d:cc:ef:1b:5b:68:1c:
                    cb:d5:96:09:55:96:91:1d:d0:3e:bf:1d:45:72:1a:
                    2c:79:a4:45:36:c4:f8:0a:33:e0:87:92:cb:f4:fb:
                    37:54:1f:60:fe:ee:9d:9d:af:81:8e:62:0d:a0:37:
                    7a:b1:25:e5:2d:e6:df:6c:53:ff:06:83:7e:96:59:
                    a8:02:5e:39:50:7b:07:c4:2a:a5:e5:25:4b:30:32:
                    08:26:f7:cb:41:26:cb:04:11:59:73:4c:14:d8:0c:
                    69:03:23:b7:b0:54:39:be:73:75:95:85:b0:84:b2:
                    75:49:ed:f6:61:d6:2a:dd:a6:39:ab:28:06:19:97:
                    f1:50:59:c3:2a:a4:2c:e5:ef:f5:7a:f2:e8:ff:bb:
                    76:14:28:2a:0b:e7:3f:63:1f:11:24:51:b7:02:79:
                    cf:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:49:55:07:BC:49:6F:F8:DE:EE:16:B4:22:7A:E9:01:6D:76:60:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a77b1095-a1f5-3866-aefe-cf4e31a6512a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.31.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:46:57:0c:25:2a:f2:34:11:0a:66:09:e5:e5:1b:cb:64:f9:
         16:93:7f:26:d6:13:21:88:47:05:c3:46:4f:d3:50:67:59:ca:
         71:f8:c9:dd:5d:d5:c7:48:9a:cf:68:50:8f:a4:ba:1d:e7:42:
         b2:73:5a:69:21:ca:bd:06:59:3e:e7:dd:84:2f:2d:b9:dc:9a:
         2a:dc:ca:cb:a3:90:f0:21:eb:a0:6e:47:70:1a:93:ae:2d:ae:
         5c:76:63:35:9c:04:30:c3:b1:09:e9:4e:e1:51:8a:44:06:c2:
         cc:fc:14:53:b2:68:b6:83:8e:af:97:3d:87:2b:e9:31:44:ff:
         a8:d3:80:31:68:29:38:f8:35:b3:24:47:5f:21:9c:c3:2f:2e:
         74:57:07:8f:25:a2:a6:ee:5a:b0:8a:9a:41:b7:69:d1:75:6c:
         0e:a5:ae:e5:73:95:18:1a:b9:1b:c2:4f:3e:c6:e6:d7:85:55:
         ac:bf:34:1c:9a:0a:9a:84:39:5d:a6:54:25:5a:95:84:cb:21:
         d2:26:cd:67:7c:ef:3a:29:23:3f:f2:ad:68:5a:49:f9:b7:46:
         cf:82:ec:36:9d:08:07:a5:d4:c0:98:08:f6:19:26:7e:95:83:
         00:aa:15:e5:e1:42:95:b5:7c:f2:1d:a2:d5:ad:c4:af:29:4b:
         72:02:b8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:47:35 2025 by rpki-client