Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/65820e26-08d3-39ca-84f8-de5a4f299c38.roa
File:                     65820e26-08d3-39ca-84f8-de5a4f299c38.roa (raw, json)
Hash identifier:          t6payH4h/s7/5n8l7AKh5GLhv/Qioiuo+e4RijpnJGo=
Subject key identifier:   8C:3A:F4:92:02:1E:5A:45:63:76:98:05:A2:5E:D9:E3:F5:65:9E:55
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584EB2B1E89CF9BA002B10159880
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/65820e26-08d3-39ca-84f8-de5a4f299c38.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     7029
IP address blocks:        208.101.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:e8:9c:f9:ba:00:2b:10:15:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=f52e6bc3-e408-4330-8e1c-6901a444c679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5b:16:c6:98:0e:23:1c:d4:9f:43:11:2d:3e:
                    73:65:61:fa:63:68:49:41:13:30:30:d4:cc:e4:59:
                    be:2d:1c:67:6f:bc:7a:a6:0b:22:d8:55:6c:fb:07:
                    b1:a1:e1:71:49:b6:28:29:ed:2e:84:45:8e:b1:de:
                    c1:05:62:d0:99:96:f7:97:93:f6:b3:87:bd:b2:cf:
                    83:d3:20:a0:35:81:69:03:2e:67:ab:85:2b:d0:90:
                    1f:f2:89:29:31:91:c0:14:4d:b3:1a:3f:b7:21:72:
                    37:fa:5e:f3:c8:82:a5:ad:de:de:ab:92:31:94:99:
                    ae:9c:bc:77:19:49:17:5b:4f:02:3c:e9:8d:7e:bd:
                    42:2f:d5:13:c0:56:23:51:26:e7:2b:97:a7:61:fb:
                    70:20:09:64:d2:51:46:dc:22:2d:96:5f:0c:74:eb:
                    13:a7:d2:a9:e2:b5:0c:a6:a9:60:6d:40:18:a1:72:
                    d7:a9:22:80:a5:62:19:10:24:67:20:bf:28:23:00:
                    5b:26:f8:54:fa:31:b9:d0:2f:cf:03:ad:67:d3:7b:
                    ff:58:5f:80:cf:ee:c0:8a:6a:ef:3f:f6:ff:3d:1c:
                    13:f7:e4:93:b0:10:3d:34:ab:4d:da:ed:7d:99:64:
                    42:69:82:bf:07:f5:e4:1e:e5:3f:ba:14:64:a2:10:
                    ed:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:3A:F4:92:02:1E:5A:45:63:76:98:05:A2:5E:D9:E3:F5:65:9E:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/65820e26-08d3-39ca-84f8-de5a4f299c38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.101.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:84:31:b9:94:60:8c:ec:08:db:a5:ba:ef:8d:f5:6a:e0:0a:
         83:6a:35:a3:ee:f9:3e:ad:f6:1a:e9:78:1c:ae:c5:f6:6d:84:
         75:ab:05:f1:a7:a2:a9:2b:a4:22:0f:79:58:89:fe:67:d0:5f:
         d5:83:35:51:ae:74:4a:c9:a9:46:ea:3d:3e:64:2b:ec:8b:3c:
         d1:95:5d:bf:65:cd:f4:fe:cc:70:28:57:70:2e:e2:46:28:94:
         be:26:5e:cc:18:f8:32:68:e9:cc:20:d2:b8:f6:b6:a1:10:05:
         fc:e5:95:50:78:f8:10:22:c8:9c:dc:62:eb:47:42:23:97:7a:
         84:eb:4b:ff:a8:73:33:86:90:54:55:c0:da:ef:6c:76:89:68:
         d4:28:62:bd:4c:72:0a:f8:54:cd:aa:40:b1:74:6a:34:8a:8f:
         2f:35:4d:d0:de:98:04:34:4d:7f:3c:29:f3:0a:f0:4f:fd:74:
         d0:76:74:99:e3:e2:56:45:29:05:14:c8:08:ac:b6:86:e7:91:
         ad:43:68:1c:93:30:60:3e:5d:2a:63:c4:bc:2e:2c:9c:41:d8:
         53:6c:a5:fe:f7:92:3c:2e:75:2a:71:1e:57:72:f4:3d:81:e4:
         2a:03:19:ce:36:e1:2a:40:44:d8:ab:7d:87:61:62:11:8a:e8:
         a7:cf:2c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 12:31:40 2026 by rpki-client