Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c11b6e2-846f-3039-9c54-9c9b269eaaa8.roa
File:                     5c11b6e2-846f-3039-9c54-9c9b269eaaa8.roa (raw, json)
Hash identifier:          KN3JFA+IQCjt9sHUZjy4fIQ3FwnXVWBwYJXCazZ+SUw=
Subject key identifier:   0B:53:13:79:0B:FF:58:A8:16:00:20:8F:43:DA:7B:74:DB:45:65:0F
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584EA7871CF147268CE823217E00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c11b6e2-846f-3039-9c54-9c9b269eaaa8.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     27338
IP address blocks:        74.10.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:1c:f1:47:26:8c:e8:23:21:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=775c8d38-bda5-4722-894a-2b2fed23370a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ad:ee:c0:f8:fd:6c:61:0c:d8:67:2d:75:a3:
                    50:88:cb:50:fe:b1:01:26:ff:93:36:96:5b:ed:cb:
                    61:45:09:e6:c4:50:7f:0b:bc:b8:b1:51:d7:42:99:
                    aa:d3:f0:45:ed:60:32:d2:85:8e:5b:f7:dd:d0:30:
                    92:d7:9b:4e:fe:f1:d2:51:5e:63:ed:61:4f:c1:7c:
                    61:ae:55:9a:13:2c:aa:aa:29:40:4e:ea:72:50:d6:
                    91:89:ce:01:01:84:d8:22:1e:cb:c9:a0:0c:77:03:
                    9d:a8:5c:51:c7:68:bf:65:e0:24:51:6d:65:8b:3a:
                    d2:e1:30:84:25:22:5b:34:97:a8:8b:97:12:70:dc:
                    0d:75:af:9f:5e:db:ba:58:56:94:47:dd:76:43:47:
                    88:36:ab:ed:46:bd:1b:7b:fa:58:6e:07:16:3d:c4:
                    17:18:ae:e2:2e:5c:f4:bf:db:58:a8:91:ee:ad:cf:
                    c3:06:f4:1f:dd:e3:1b:ad:62:8c:9f:06:18:de:28:
                    8a:c1:cc:24:7a:a0:b6:74:52:b2:a5:b4:8b:fe:d1:
                    19:a3:45:f2:bd:e8:85:b8:4b:b7:e3:e3:06:c2:3b:
                    ac:91:ab:cc:0b:fd:32:78:48:75:15:b2:c8:70:e6:
                    16:28:34:16:b4:a3:90:9a:ad:65:60:24:11:d2:6e:
                    27:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:53:13:79:0B:FF:58:A8:16:00:20:8F:43:DA:7B:74:DB:45:65:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c11b6e2-846f-3039-9c54-9c9b269eaaa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.10.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:38:f3:b2:88:a8:9c:49:a7:14:be:0a:03:1c:9b:c7:0f:b7:
         50:f0:dd:15:eb:d6:7b:91:61:e4:b5:bf:5b:07:8a:9e:4a:1c:
         ec:10:f7:54:97:45:15:bb:34:ec:98:06:07:f7:cd:e0:6f:88:
         cc:25:2b:98:27:20:2b:59:e4:be:53:94:51:b8:4c:29:d6:7d:
         d3:da:5f:f0:a6:57:e0:ce:10:2d:a5:2d:75:dc:87:a6:6e:38:
         00:96:85:94:7a:c3:3c:44:00:fa:07:eb:7d:f3:aa:84:1f:e5:
         ca:3e:9b:64:d3:24:d6:4d:6a:17:f4:cb:fc:98:b8:be:cd:a6:
         0c:5f:78:a1:5e:34:3a:3d:3b:5e:2e:51:91:bc:8c:59:a5:5c:
         ab:b8:ff:f2:6f:52:3f:3d:26:2b:58:bb:81:c2:c6:eb:6f:d9:
         97:3c:a2:2e:39:81:16:c9:df:b1:fc:5a:d0:e5:10:eb:9b:5c:
         07:01:58:9e:aa:5d:41:4a:7a:f0:ba:ed:c0:bd:3d:a7:d9:c2:
         c6:ae:e7:10:48:6a:e3:4d:94:1d:0c:69:69:d9:c4:63:8f:e2:
         69:bd:fe:3b:0f:68:99:2d:06:e6:90:a2:d1:1a:e2:fa:5e:e4:
         d3:ac:8a:2c:87:5f:d2:9c:fc:5b:4a:74:10:7c:31:c5:ed:06:
         e8:77:97:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 10:33:46 2026 by rpki-client