Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/168fb363-2bc0-3944-8737-5c7cd6752691.roa
File:                     168fb363-2bc0-3944-8737-5c7cd6752691.roa (raw, json)
Hash identifier:          ZzBRJ+4L+a0UVu9HRwNym5G/gQiHHdNNXb70OKAgfGM=
Subject key identifier:   23:39:96:C4:FB:85:B7:F7:3D:4A:A0:F4:E4:03:FF:CF:F7:9E:04:7C
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584EAE8193E2585EC643C9287500
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/168fb363-2bc0-3944-8737-5c7cd6752691.roa
Signing time:             Fri 31 Jul 2026 13:00:12 +0000
ROA not before:           Fri 31 Jul 2026 13:00:12 +0000
ROA not after:            Thu 29 Oct 2026 13:00:12 +0000
asID:                     7029
IP address blocks:        98.18.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ae:81:93:e2:58:5e:c6:43:c9:28:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 31 13:00:12 2026 GMT
            Not After : Oct 29 13:00:12 2026 GMT
        Subject: CN=82bb7ce7-13b9-40d2-ba9d-beb785bce822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:47:d7:e1:89:2f:f5:02:76:37:bd:ef:2f:49:
                    37:24:9a:d1:01:06:6c:0b:22:5d:fe:e7:55:9f:be:
                    a1:96:04:5a:9e:70:52:c2:b3:ff:8f:57:b5:35:26:
                    17:ef:7e:27:d7:50:7c:08:76:2d:e8:8b:ed:a6:9f:
                    be:2d:77:b3:c9:6a:db:81:b6:76:76:07:eb:a2:c6:
                    2d:48:fb:3f:ad:db:fa:a3:cb:d2:ca:81:b1:de:a9:
                    8d:1c:ac:1b:f6:80:79:fd:d2:8f:87:6d:40:12:fc:
                    76:fb:f6:0d:12:c7:3f:59:20:ba:a3:67:61:c3:58:
                    1c:06:b8:4d:63:74:8a:cf:16:42:e3:d3:af:38:08:
                    f4:4d:db:18:56:d9:6f:41:71:28:34:3d:d1:80:32:
                    d9:9e:d1:a6:f9:d8:41:1f:14:bf:a6:28:a8:88:b2:
                    93:c1:b4:89:af:7e:8d:79:56:f6:52:2b:d1:b1:63:
                    58:4c:67:98:cd:1a:92:08:98:19:0b:61:df:ed:0e:
                    8e:61:dd:dd:93:4e:35:7a:3d:69:64:10:ba:fd:32:
                    72:4c:40:6c:99:a5:bc:d7:a7:79:26:76:e6:3d:66:
                    dd:d3:b4:db:98:6d:a8:6a:7c:d6:11:67:02:05:4f:
                    3c:b3:38:e5:ee:04:72:41:51:4b:3b:9d:34:ba:11:
                    a4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:39:96:C4:FB:85:B7:F7:3D:4A:A0:F4:E4:03:FF:CF:F7:9E:04:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/168fb363-2bc0-3944-8737-5c7cd6752691.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.18.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:15:ba:06:08:4d:6a:1b:9a:b2:c1:ec:81:52:73:72:cc:f9:
         c6:a7:c4:f4:eb:6b:bd:6a:7e:ed:5c:a1:39:d3:0b:c1:19:0e:
         91:80:7f:33:a3:c3:62:10:86:46:0f:90:51:4e:67:14:bb:b9:
         87:5b:e4:91:d5:fd:8f:ff:43:95:3e:b8:03:ad:62:98:c2:79:
         e2:0b:1d:40:6b:e6:88:5f:07:b1:b5:bb:22:fb:07:02:7d:89:
         4b:d5:c9:9d:d0:e9:ac:ba:3d:13:80:c8:4f:51:da:80:92:67:
         69:68:6f:96:4d:45:05:81:49:a7:bb:b8:44:58:e5:5f:10:e8:
         68:5f:cf:6d:25:e0:d9:ee:fc:1e:76:a7:a8:65:24:ce:08:a0:
         a5:1c:95:bf:0f:5d:da:b3:3e:4d:ca:eb:ce:97:d3:30:dc:f9:
         d2:d3:89:9e:f2:1a:17:10:ce:56:41:6f:23:3f:92:67:c8:13:
         9f:c3:a8:85:e8:d0:5a:75:99:0a:d7:eb:fb:69:99:3c:e5:f3:
         aa:62:84:56:15:64:0e:8b:c9:6f:b9:2e:af:1a:14:b9:21:6a:
         a3:bc:cd:29:b8:12:2e:db:4b:e6:aa:7c:c0:6f:14:2e:93:81:
         c5:f2:9a:ea:94:fd:10:a7:a1:3b:f1:8d:ae:60:36:e5:8b:1d:
         88:a0:1f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 09:50:36 2026 by rpki-client