Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6d00fd81-08b9-3c8d-9c92-f0581974db31.roa
File:                     6d00fd81-08b9-3c8d-9c92-f0581974db31.roa (raw, json)
Hash identifier:          1JLpQILXF6jgHlnrZ7rABYq761elG5u8aF+gNS+nUGE=
Subject key identifier:   12:9A:97:96:23:5C:AF:E6:C7:05:D5:A2:04:82:DB:E8:FA:9D:81:90
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584AF7EBE7DB7F1FE05D6DF952D0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6d00fd81-08b9-3c8d-9c92-f0581974db31.roa
Signing time:             Mon 25 Aug 2025 01:00:33 +0000
ROA not before:           Mon 25 Aug 2025 01:00:33 +0000
ROA not after:            Sun 23 Nov 2025 02:00:33 +0000
asID:                     0
IP address blocks:        216.75.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f7:eb:e7:db:7f:1f:e0:5d:6d:f9:52:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Aug 25 01:00:33 2025 GMT
            Not After : Nov 23 02:00:33 2025 GMT
        Subject: CN=f0d21029-da0e-45b2-bbe1-03e16f8ff6ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f0:f9:83:12:0e:7b:5e:d0:60:6a:75:38:48:
                    a8:5d:61:88:68:2e:4e:25:2d:9d:4e:e1:b0:2e:8b:
                    89:d7:fb:cb:66:d6:06:c3:b6:b1:73:46:a7:e2:cb:
                    92:69:0c:a4:a2:b4:ba:fc:4d:bc:1b:6c:e4:7b:58:
                    ac:29:25:25:f4:ef:3e:04:c9:39:ed:6f:e2:07:b5:
                    37:d3:d4:ed:10:73:b9:c3:0d:d2:30:91:f1:31:13:
                    cd:1f:ea:3b:19:2c:17:4e:a9:bf:4c:7d:cf:e6:00:
                    5c:ac:98:99:e3:bc:ea:cf:d3:21:26:82:10:d1:e6:
                    9d:80:34:b8:e1:ba:3d:77:05:13:cf:40:26:47:0d:
                    28:a2:31:63:28:ee:92:f9:e2:e9:a0:b6:ed:c1:dc:
                    1c:4e:cb:e0:05:63:f2:4b:56:92:4b:b5:7d:0c:ad:
                    68:53:d4:9a:6d:76:fa:a0:19:d2:75:dd:79:14:36:
                    51:3f:d0:9e:a7:d0:88:b5:b7:01:11:cf:ab:de:3a:
                    aa:3c:cb:92:07:03:d5:fb:1d:75:76:7a:7c:4f:68:
                    11:c9:ac:d9:97:c2:de:3f:4c:e3:ed:14:a0:fe:54:
                    e0:eb:e9:18:c2:8b:27:65:c2:a7:34:b3:bd:12:26:
                    35:ce:8a:91:1d:ca:d8:9a:95:9a:13:e2:98:bf:36:
                    49:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:9A:97:96:23:5C:AF:E6:C7:05:D5:A2:04:82:DB:E8:FA:9D:81:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6d00fd81-08b9-3c8d-9c92-f0581974db31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.75.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:60:1e:f0:b3:4e:df:33:fc:41:15:76:e9:a7:fb:22:d9:c4:
         72:be:7a:68:af:21:a0:3f:b3:4c:fc:2e:92:bc:5b:ab:ec:6e:
         3e:78:fa:36:10:e1:c6:d0:88:e9:aa:f5:f1:1e:70:f3:a3:a8:
         e6:d5:a4:59:47:c1:e3:d7:79:1d:57:63:be:26:28:fa:24:42:
         76:29:95:a4:ba:88:2e:0d:51:76:a2:d9:e8:d4:9e:37:c4:00:
         08:62:2c:8c:2c:7b:66:8c:b6:0c:c9:7a:a9:07:e6:9d:fe:d3:
         c1:c8:51:47:f2:5d:ea:36:1b:96:0b:a1:77:2b:68:14:b3:1b:
         07:2e:a6:ec:51:b9:58:4d:80:52:08:e0:35:c1:ea:4a:59:5d:
         8c:ba:6b:49:34:47:9b:1b:5b:dd:86:14:2e:0a:cb:4d:bd:b3:
         0b:80:0d:a1:dd:2b:f0:97:d7:d5:ed:4e:8f:91:88:f5:70:8e:
         e5:40:e2:42:02:25:fb:3b:39:8f:a8:77:72:c5:97:d6:fb:5b:
         65:43:03:ad:46:b4:f4:b5:85:17:a1:4f:31:90:81:d6:ba:47:
         1d:41:97:3f:50:80:e2:22:c2:57:41:e6:bd:69:09:fc:ad:e0:
         f5:44:47:58:15:ef:e8:d5:2a:9d:05:2d:b8:99:0a:b5:ea:f0:
         5a:45:12:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 26 01:32:55 2025 by rpki-client