Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49e78f01-b3b1-3697-8835-3d892d709ebd.roa
File:                     49e78f01-b3b1-3697-8835-3d892d709ebd.roa (raw, json)
Hash identifier:          Ym9QZ8dt3cxmlrLovyvOOKjjAc7ea8XkI0Va+iRgh00=
Subject key identifier:   24:83:3D:84:55:11:98:70:80:23:E1:17:01:71:2B:F3:42:5E:62:4D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA78D58EE2831859689DC4300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49e78f01-b3b1-3697-8835-3d892d709ebd.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     33667
IP address blocks:        173.10.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8d:58:ee:28:31:85:96:89:dc:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4aae89a4-86ef-426b-b9e9-a17a2130d3c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3f:7e:e7:33:1b:b1:10:3d:e6:10:f7:fd:65:
                    b7:c1:97:55:34:7a:80:53:80:40:4c:bd:01:e5:a3:
                    51:ee:a6:90:8e:de:ff:5d:99:1c:2b:f0:ba:af:d1:
                    2c:c2:29:c9:ca:51:c6:1b:52:80:12:73:61:21:0e:
                    18:c5:88:e8:5e:51:ae:e6:ae:66:c9:45:99:28:f8:
                    09:f9:79:c7:d2:40:a6:0b:de:05:9a:67:ae:07:b8:
                    6d:27:94:95:4f:4d:96:e8:ad:3d:1d:e1:19:ce:fb:
                    b6:98:27:a9:6f:ab:36:b0:0e:e5:35:b4:5f:36:08:
                    e2:dc:71:2b:47:35:9d:18:5f:d5:c5:55:d4:38:18:
                    f9:b3:7c:46:86:3c:51:e7:8b:8e:e1:86:31:f1:0a:
                    02:c5:13:42:9d:5e:23:76:f4:0a:bf:28:c5:25:a0:
                    00:00:c2:a7:16:42:97:a7:b5:16:81:1f:f5:c7:5a:
                    79:2a:e4:b4:fb:bf:39:07:9f:d6:85:f3:1f:5b:9d:
                    51:3a:69:83:12:45:77:de:0a:7f:82:db:e3:6d:46:
                    fd:07:83:f6:88:57:eb:a9:68:c8:28:c1:d5:cb:8c:
                    73:5a:6b:7e:cc:22:1e:2b:f2:b0:9b:97:0e:84:a8:
                    30:11:de:80:ae:f4:ff:9e:b3:7e:c3:86:88:ce:f3:
                    35:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:83:3D:84:55:11:98:70:80:23:E1:17:01:71:2B:F3:42:5E:62:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49e78f01-b3b1-3697-8835-3d892d709ebd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.10.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:f3:4a:df:d8:ed:41:a8:85:f8:51:aa:8b:42:24:6d:27:ec:
         cb:82:5a:c0:47:19:e6:82:33:13:b5:3b:6d:e4:ce:46:0f:61:
         17:ea:7b:9d:19:8b:0b:90:93:6c:e1:11:80:2f:75:99:c9:6e:
         fc:38:51:08:9a:4d:f8:40:32:90:25:cf:99:1a:32:c0:15:39:
         58:73:e5:4d:86:19:f5:9b:f2:e7:6f:7c:db:5d:2f:0f:d7:9b:
         c5:c9:cc:69:62:fe:64:26:fb:5d:b7:12:0d:e5:de:dd:82:74:
         d0:df:8e:f7:81:b5:d1:76:bd:c4:c3:51:ce:7e:71:f3:6c:a8:
         69:c4:20:cd:a1:f1:ba:e7:5d:9e:0c:1d:eb:1e:1e:2b:27:b6:
         9e:96:52:96:0c:b0:19:a1:a8:68:15:82:ab:dd:ca:d9:5b:b8:
         1e:a0:60:7e:07:db:ee:65:52:3f:3e:89:8b:86:fe:bd:b5:a6:
         7d:a8:e7:ad:b4:40:81:45:93:75:f0:a5:13:3e:98:69:42:33:
         ff:f9:9a:51:12:b7:bc:b1:16:7c:cd:c8:3e:a8:0f:a4:75:5e:
         1b:56:c9:69:15:c5:f3:17:5a:c0:9a:12:84:ad:39:8c:9a:74:
         75:5e:6d:70:aa:84:54:65:0e:63:31:70:a7:73:91:5c:f3:49:
         0d:ef:98:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 12:24:00 2026 by rpki-client