Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/26697dd2-5a2c-3486-befc-374cf6078f50.roa
File:                     26697dd2-5a2c-3486-befc-374cf6078f50.roa (raw, json)
Hash identifier:          lO8qvYTtHrpsR2NJK2lSmiHfrfkHvdBaQp0y662IcxM=
Subject key identifier:   21:40:0D:C5:80:39:53:0A:E4:A0:3A:A9:42:6F:DB:69:2F:17:E5:6D
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584F71EDBFFD8E4810A7D6FAE900
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/26697dd2-5a2c-3486-befc-374cf6078f50.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     7029
IP address blocks:        173.185.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:bf:fd:8e:48:10:a7:d6:fa:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=7dfa5c2f-8be7-4bcf-9b9e-1f897714a971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:32:2a:76:b8:59:ab:c3:d4:99:ec:94:fe:b0:
                    14:cd:51:85:cd:cc:10:f7:43:ff:39:f7:88:89:54:
                    a1:e3:b8:8a:3b:64:e7:69:05:93:78:bd:b8:46:1f:
                    02:7e:96:cb:e3:0d:5b:a5:38:01:1b:b3:2e:25:79:
                    ed:78:2b:47:dc:4d:80:ba:38:79:54:7c:72:54:81:
                    dd:53:82:23:58:5f:dc:e9:4d:4b:84:a4:9d:cd:e7:
                    73:d6:6a:86:20:73:83:ed:9c:da:9c:39:28:5c:54:
                    c4:e0:76:29:86:99:29:6a:9f:56:6e:c8:0f:d9:39:
                    b7:bb:7e:18:0e:60:8b:53:c7:f9:7e:e4:dc:fc:e5:
                    5f:f7:6a:bb:6b:47:24:af:67:8c:de:87:55:b6:ff:
                    4d:98:aa:4d:59:3e:df:6a:39:65:70:f3:0b:9a:e3:
                    01:fd:c4:ac:b0:2c:01:a9:c6:27:e0:58:a9:38:c1:
                    13:33:c5:64:5a:b6:8b:b8:db:a3:cd:4b:79:09:2f:
                    7d:9d:47:d3:0a:b1:a4:c2:ee:48:77:4b:fd:b2:db:
                    78:3c:2a:0a:69:43:0e:f4:37:dc:12:81:1d:85:d6:
                    28:b1:c1:f0:3f:e2:26:45:d8:cb:83:37:6a:9b:ac:
                    8f:39:4d:65:da:68:dd:46:27:18:df:7b:4e:6c:a0:
                    99:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:40:0D:C5:80:39:53:0A:E4:A0:3A:A9:42:6F:DB:69:2F:17:E5:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/26697dd2-5a2c-3486-befc-374cf6078f50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.185.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:9c:78:ca:13:4e:aa:af:77:df:5f:fd:46:e1:42:02:aa:98:
         d5:53:b6:e1:91:40:24:d6:3d:1f:ee:30:3e:94:93:23:a0:ec:
         5b:83:75:dd:cd:91:d1:f2:14:65:38:d8:d2:89:b7:2a:49:80:
         6b:6e:58:96:8b:39:c5:86:32:db:22:4c:6d:3f:89:28:d0:34:
         c9:c2:19:25:2e:d2:97:21:ad:79:53:09:9a:15:79:d7:84:ca:
         c4:0a:c1:29:3f:ab:d1:73:e8:43:2e:73:f2:9c:3a:55:74:5b:
         4e:af:30:39:e9:b5:ba:53:66:c6:7a:58:9e:ee:d7:f5:0b:5e:
         97:ae:72:a8:8a:a8:b6:3b:c1:fd:2c:18:ac:e3:c6:4d:8a:65:
         57:43:23:73:bb:82:fd:bc:4c:80:ba:b6:29:21:df:2c:ec:a3:
         a0:a8:9a:c7:9b:f6:15:75:f5:35:62:64:e9:0c:80:b4:76:7c:
         91:ed:86:6f:2f:27:29:b7:52:75:ed:cb:7b:cd:e9:f2:68:b2:
         81:72:14:f6:c0:23:84:5a:7f:b3:3c:a7:0c:78:fa:64:c9:c5:
         80:33:7d:14:36:30:87:19:a9:4e:84:b3:5a:90:f0:b2:ac:b2:
         da:71:62:c5:ce:c6:a8:ac:86:b9:d7:f1:8a:5c:aa:99:c6:1d:
         76:59:cf:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 06:20:51 2026 by rpki-client