Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6fded691-206d-367e-b48d-5819974e035b.roa
File:                     6fded691-206d-367e-b48d-5819974e035b.roa (raw, json)
Hash identifier:          Z+mYNg1MkTpmvjw2LuX1lJ+qRoz6DvvQeKzF+2SYmOs=
Subject key identifier:   AC:B2:76:7D:22:01:E0:6B:8C:CA:07:65:87:68:F0:C2:5C:8E:2B:16
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285848E0069F65367670ACB5ACD500
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6fded691-206d-367e-b48d-5819974e035b.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     7029
IP address blocks:        173.187.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:9f:65:36:76:70:ac:b5:ac:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=26b94563-4be0-4c4e-8d22-b63f16df4ca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:bd:cd:af:f2:62:86:3c:7c:68:4f:08:9b:cf:
                    b8:06:ea:0e:07:8d:3e:3b:00:82:bd:81:78:42:ce:
                    d8:66:cc:41:39:bf:c9:6b:aa:ef:6f:5a:2e:35:06:
                    81:86:58:c1:4b:f9:d3:f0:21:30:a9:c6:90:8d:31:
                    6b:a8:cc:8d:f5:a2:b1:f7:da:04:81:09:e7:bd:ee:
                    79:ee:6b:02:a9:3b:48:d0:57:db:97:8f:42:c0:9f:
                    45:5a:a5:a6:8b:59:5c:a0:01:f1:ea:cf:fc:66:d5:
                    be:41:e4:2d:55:55:c6:c5:85:1c:f3:cd:a4:48:c4:
                    7c:cb:f6:74:55:86:f8:8f:01:12:63:d1:bb:4f:71:
                    33:8e:22:29:2c:83:46:11:29:55:87:e7:a0:95:93:
                    c7:cb:d0:ec:5c:bf:f2:fc:ab:e2:8a:ca:8e:4d:21:
                    72:f3:31:29:69:50:0e:72:a4:68:4e:54:09:68:81:
                    54:d2:aa:2e:58:d1:93:be:43:db:bc:6b:02:5f:55:
                    1c:fd:f8:cb:40:9f:7e:a6:ec:f0:4e:1e:eb:bc:fe:
                    e6:f0:e5:a6:2d:e6:bd:2d:2a:b6:32:56:b9:eb:f8:
                    a9:5b:60:27:9b:d0:b5:e2:92:b1:43:15:bd:6b:6f:
                    0e:2a:de:d9:07:82:44:f7:35:1b:ad:40:56:11:6d:
                    b7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B2:76:7D:22:01:E0:6B:8C:CA:07:65:87:68:F0:C2:5C:8E:2B:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6fded691-206d-367e-b48d-5819974e035b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.187.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:ee:29:fc:86:fb:8f:17:e9:61:8f:7d:9f:4f:8a:ec:73:45:
         32:29:93:08:84:90:66:8e:49:fe:a7:0d:17:33:ea:e5:db:9c:
         c7:a9:b2:f0:ea:54:cb:b1:c0:93:8a:6c:d5:2d:ca:5a:f9:c7:
         34:d6:09:e6:3d:15:37:8b:4a:63:a8:bd:1f:a6:c0:96:8b:ef:
         09:35:26:81:b3:30:ad:e5:09:05:9e:dc:94:93:b6:1a:ad:a6:
         a1:86:c4:3f:77:20:e5:35:a0:90:a9:0a:67:b1:12:89:6b:8c:
         d0:44:df:71:e5:16:92:28:4e:97:f4:8c:de:50:49:28:57:7f:
         ee:35:db:c2:74:6f:fa:a6:20:07:b1:54:a3:fb:72:34:b7:19:
         1a:75:c7:40:62:f5:a9:d3:73:fd:71:4f:8a:81:be:1a:39:1d:
         fb:b2:04:96:ab:ce:7f:04:2b:8c:3a:67:25:fe:a8:88:5e:f7:
         b8:54:a7:80:68:18:32:a2:d5:11:6d:25:6c:e4:93:5a:a4:c6:
         01:e3:59:b7:61:2e:2d:a9:37:9d:c6:58:2f:80:56:39:6e:f1:
         8f:b7:ec:11:99:0f:e8:80:e4:22:11:a6:6f:e6:04:59:79:a5:
         5d:43:63:56:3c:7f:f7:47:53:2f:80:21:54:05:4c:10:77:ce:
         5a:40:13:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:01:16 2025 by rpki-client