Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/55e61ddb-50b7-3538-8e5d-910498a94583.roa
File:                     55e61ddb-50b7-3538-8e5d-910498a94583.roa (raw, json)
Hash identifier:          Y7eNIjHVjQIi2N0YSidqeNu2RYqbvEHIzralexOj6Js=
Subject key identifier:   40:6F:C7:CD:44:05:E2:6B:24:FF:B2:96:9F:2F:F2:A5:2B:91:4F:86
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584E87F782F62BD36A0BD11C3508
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/55e61ddb-50b7-3538-8e5d-910498a94583.roa
Signing time:             Fri 17 Jul 2026 17:41:21 +0000
ROA not before:           Fri 17 Jul 2026 17:41:21 +0000
ROA not after:            Thu 15 Oct 2026 17:41:21 +0000
asID:                     7029
IP address blocks:        162.40.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:87:f7:82:f6:2b:d3:6a:0b:d1:1c:35:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 17 17:41:21 2026 GMT
            Not After : Oct 15 17:41:21 2026 GMT
        Subject: CN=b29a4ea4-1eab-4e91-9e09-298a0f712750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:54:1c:6c:db:a0:1b:f7:b5:01:ee:21:4d:76:
                    f4:d6:28:65:23:04:7d:bf:83:76:65:1b:cb:02:b4:
                    57:75:91:05:26:4c:f0:27:8a:ba:d1:ed:76:5a:93:
                    04:ff:98:22:c7:34:70:47:b4:2f:5e:48:27:dd:b5:
                    7c:2d:52:7d:7b:aa:52:7d:3a:36:31:ae:ad:e0:ad:
                    d2:e1:85:a6:be:43:da:20:94:87:99:41:3c:cc:9a:
                    6b:22:1b:53:1f:3c:dd:37:8c:ef:7e:59:35:13:1c:
                    04:11:00:64:bd:b9:84:c1:d7:7a:06:ff:51:4b:82:
                    ca:75:c5:d3:7b:46:23:bb:9a:31:95:b9:6c:30:0b:
                    01:57:4e:26:fc:1d:3b:e8:3a:6d:32:03:f9:23:de:
                    fb:3d:56:50:89:ad:db:73:a6:2d:56:8d:b1:f7:84:
                    5c:ad:02:6f:93:e5:64:b1:c8:d3:8e:91:97:2c:be:
                    19:2d:e6:7f:38:da:7a:58:d4:f2:e3:d3:57:6e:32:
                    9a:17:8a:f2:f6:d0:85:4e:48:ee:66:9e:3d:d7:7e:
                    82:e7:36:70:5b:cd:8b:79:ed:69:92:53:9f:f0:1f:
                    c9:80:ca:4a:24:2c:74:de:2f:2e:f1:49:84:c0:01:
                    4f:30:cd:b0:63:a5:26:65:c6:e8:90:ad:c5:2f:7f:
                    ff:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:6F:C7:CD:44:05:E2:6B:24:FF:B2:96:9F:2F:F2:A5:2B:91:4F:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/55e61ddb-50b7-3538-8e5d-910498a94583.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.40.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:05:74:59:68:8f:2a:f7:0d:4f:82:40:d6:93:b5:87:f7:5b:
         e7:62:a9:11:69:88:d4:e0:e0:6c:7f:0e:b5:da:2f:d3:42:45:
         ce:0d:84:4f:40:44:b5:a5:4d:3e:1e:c8:43:a2:f2:90:e1:f8:
         f4:8d:fb:f6:a5:ec:a8:60:14:cf:2d:85:ca:6d:98:14:1c:11:
         4d:4f:e9:b6:39:c6:5d:00:db:c8:f2:82:18:cc:29:44:fa:c3:
         64:99:9a:b1:a6:45:ee:0e:9b:09:12:d9:6c:a1:8d:da:fc:31:
         fa:49:14:41:cf:fd:9d:c0:93:3b:f5:47:ac:a5:93:89:f7:7c:
         cf:14:7f:41:6f:85:85:29:33:d0:dd:ea:67:ad:07:2f:2d:3f:
         e0:bb:d6:0b:50:ae:88:ab:93:59:1a:ee:90:f3:f3:48:1a:be:
         44:dd:6c:2b:21:16:4e:96:2d:e5:50:8c:57:85:f6:dd:f2:ad:
         5e:ab:6d:a6:ef:70:a0:97:5e:00:27:df:11:29:7b:c8:bf:b0:
         60:7f:42:b3:e7:68:9f:36:57:55:76:7e:7f:6d:e0:93:77:15:
         0a:eb:e5:b6:ce:c6:30:16:4e:0f:94:b4:6b:74:ed:90:f7:24:
         86:c4:62:bf:8e:b2:b5:a6:d8:87:2a:dc:cd:8b:f5:50:30:7b:
         00:33:6d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:14:26 2026 by rpki-client