Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/27eab759-63b0-3761-8653-43a5cbfa9310.roa
File:                     27eab759-63b0-3761-8653-43a5cbfa9310.roa (raw, json)
Hash identifier:          H/6BVL5QQm+yUnPKgiRweDsVnqO3W8i+1/E4cU6eTTs=
Subject key identifier:   6E:F3:BE:BD:97:8A:30:CF:33:DC:BA:22:65:27:75:BC:9F:80:4F:BE
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584B8AAC3B502BB98A9E2B12FDF0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/27eab759-63b0-3761-8653-43a5cbfa9310.roa
Signing time:             Thu 16 Oct 2025 14:36:17 +0000
ROA not before:           Thu 16 Oct 2025 14:36:17 +0000
ROA not after:            Wed 14 Jan 2026 15:36:17 +0000
asID:                     7029
IP address blocks:        75.90.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8a:ac:3b:50:2b:b9:8a:9e:2b:12:fd:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Oct 16 14:36:17 2025 GMT
            Not After : Jan 14 15:36:17 2026 GMT
        Subject: CN=60a0b415-cbea-46f7-88d8-28c9c377a055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:13:7e:b1:46:55:1a:e0:7b:8f:64:01:46:13:
                    6d:c9:10:5e:f3:6a:65:a7:14:7a:a1:14:55:b0:a1:
                    d8:95:8c:f6:f4:34:d9:3b:9d:e2:4b:02:0a:cd:7a:
                    2e:f6:58:f1:f0:cd:30:e2:f0:4b:78:07:6f:b7:a8:
                    e6:02:78:da:21:a9:0b:f2:f9:6b:95:23:aa:a2:34:
                    c9:7e:8c:c9:99:54:40:10:e9:f3:45:c3:d8:ec:15:
                    57:72:ac:8d:b1:a7:9d:81:ea:a3:d6:cc:ca:bf:67:
                    44:24:5f:c1:67:d7:1d:51:db:bb:26:cd:37:01:a0:
                    53:b6:30:42:e4:28:05:6d:19:0b:e4:c4:6a:1f:b4:
                    be:e4:9a:a1:fe:be:5c:9f:17:d2:bd:fb:c8:c6:1a:
                    f6:27:05:94:1a:1b:c5:79:bd:ec:40:06:53:23:01:
                    4d:9f:ef:d3:fc:8f:21:31:22:fd:97:f5:c9:de:21:
                    f1:85:7e:8f:d7:42:57:d9:b2:77:84:3e:a2:56:4b:
                    d8:bb:62:18:16:ec:8b:93:2b:2e:3e:44:bd:4a:87:
                    fc:62:70:8a:61:e2:22:c2:94:df:0a:be:06:e3:a4:
                    8e:7e:d0:ff:60:55:e7:1d:3a:47:bd:8b:36:f0:5b:
                    77:19:f0:50:c3:fb:ad:ef:c4:dd:43:37:52:0d:25:
                    ff:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F3:BE:BD:97:8A:30:CF:33:DC:BA:22:65:27:75:BC:9F:80:4F:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/27eab759-63b0-3761-8653-43a5cbfa9310.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.90.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:5e:74:55:30:2e:86:8b:5c:3e:c0:7d:42:75:bb:d3:0a:d9:
         0b:29:f7:fa:20:2f:87:6f:b5:40:47:5c:cc:3d:b3:2b:bf:72:
         6e:35:b1:fe:10:b6:d5:b2:08:e9:93:bb:2c:cf:20:a2:ca:aa:
         8c:0b:51:c7:2b:d2:74:f9:f3:c3:9b:cb:87:c5:23:12:44:b6:
         c8:cc:a9:34:14:4e:d1:a8:88:fe:37:b6:23:37:4c:22:4c:74:
         59:d9:9b:3d:10:56:59:c0:42:84:06:3a:a6:a7:79:15:7c:d4:
         55:9e:65:92:c3:66:ee:12:1c:7e:49:62:a9:3c:5d:28:88:ea:
         06:f6:27:97:db:fd:fe:24:28:2d:84:cb:3a:ca:0c:62:46:db:
         c4:65:b3:24:9e:d5:63:e0:2b:60:ed:e6:8b:9c:6b:5b:d4:8a:
         d4:a7:20:4d:b9:26:31:2f:3e:84:31:16:53:b3:70:24:86:7f:
         2b:53:b1:d7:a3:08:f3:f1:29:1b:b1:79:1c:75:4c:f2:de:71:
         b4:26:43:86:e4:d0:60:ad:39:cc:2e:a5:da:5c:14:80:33:67:
         7e:c2:b2:1e:c2:5f:4f:80:cc:3c:24:05:60:51:bd:f9:c2:53:
         c4:4f:3d:ee:18:f3:5f:7a:d5:da:40:d4:b3:84:ca:00:d0:12:
         40:e4:d6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:25 2025 by rpki-client