Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ea66b86-5648-3598-868f-d655bca90280.roa
File:                     0ea66b86-5648-3598-868f-d655bca90280.roa (raw, json)
Hash identifier:          WHnf5Yqb/dl/EkLfLYD/QTrpXKZlGhSGdwrlrPEHCf4=
Subject key identifier:   66:11:AC:03:5D:D8:AB:60:2C:63:7D:32:58:58:C0:33:55:A6:26:27
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584ED863B700A9EEC30061D05680
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ea66b86-5648-3598-868f-d655bca90280.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     7029
IP address blocks:        64.24.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:63:b7:00:a9:ee:c3:00:61:d0:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=5ec94825-cb2c-4bcc-8398-9bbd7745f4fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dc:11:78:e3:59:95:21:49:d5:14:aa:64:eb:
                    ba:f8:e0:e6:58:28:cb:cb:e2:3f:00:ed:6d:30:08:
                    33:a3:b9:0e:3c:e0:ab:22:46:c2:77:37:fe:4e:a3:
                    9e:92:b3:51:f6:f8:12:80:38:d7:d1:97:8d:61:16:
                    de:0a:85:ca:a5:30:6a:30:8b:57:70:bf:6d:ca:f7:
                    e8:01:87:93:a1:97:bd:34:67:1e:da:f1:69:90:b9:
                    1a:99:22:c7:26:42:de:4f:f6:7e:77:44:ef:2c:61:
                    3c:73:20:1c:3a:17:b1:4f:83:1a:76:bb:f8:ad:36:
                    7e:07:7f:f7:ad:7f:ff:be:79:33:59:de:7f:69:78:
                    c1:40:e7:53:83:a3:ab:53:32:11:18:91:e8:f3:55:
                    5b:46:d5:aa:0b:42:1b:dc:87:2d:24:49:7d:7d:e9:
                    ed:57:2a:a1:93:b6:00:97:fd:be:d5:34:f7:1a:5b:
                    96:b6:f8:fe:86:4b:8a:a7:85:67:95:3a:ba:72:ee:
                    b7:3e:3d:df:c9:16:01:1a:db:e5:45:0c:06:2b:c0:
                    ae:ea:88:5e:cf:f3:b2:24:27:14:e2:9a:2b:e4:dc:
                    da:1f:c9:00:2c:cb:25:f0:b1:1a:49:30:28:31:e2:
                    63:7b:1c:7f:9f:9e:13:ed:3e:71:fe:ad:f9:c0:7a:
                    62:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:11:AC:03:5D:D8:AB:60:2C:63:7D:32:58:58:C0:33:55:A6:26:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ea66b86-5648-3598-868f-d655bca90280.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.24.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:53:aa:13:db:29:ff:c2:68:9b:07:86:d9:cd:3d:13:38:ed:
         81:0b:e4:27:69:83:e1:c7:39:af:04:0d:8a:03:bc:6f:21:ae:
         65:c5:1e:df:19:40:50:43:c5:41:9a:31:33:07:8c:e5:3f:d7:
         ca:c7:14:8f:48:33:4d:40:2e:dc:41:0f:54:6b:2a:5c:d4:9d:
         ae:c4:5b:9a:0e:51:8c:ee:eb:4a:0b:ce:d7:22:45:b4:98:4d:
         2f:2b:70:c7:4a:06:f1:1e:88:38:85:53:52:43:1c:b0:6d:81:
         de:3e:e9:26:0d:eb:44:10:ca:00:89:04:d2:ab:48:07:9f:fd:
         5a:a4:96:bc:3e:61:93:7b:6e:c2:e2:c1:74:5b:f5:95:9f:c5:
         bb:73:dd:e2:0c:28:3c:e5:92:ab:39:51:2e:7a:27:0c:ac:60:
         0b:8f:40:ac:fa:58:47:0e:b6:1c:4a:da:69:3b:1b:02:7a:a2:
         81:b9:5d:a3:0d:90:60:40:81:14:24:fa:04:f7:39:91:25:3c:
         d3:ad:53:bb:66:79:9e:0f:7f:b6:09:f2:b1:5d:d7:81:55:19:
         1d:db:ad:b0:d9:d7:7e:5d:d9:1e:55:e6:27:93:10:6f:20:f5:
         8f:4f:20:51:d7:fa:c9:20:8b:18:8c:47:eb:bf:3a:df:62:d3:
         46:d2:e3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 16:10:02 2026 by rpki-client