Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/73ff7f87-71dd-30e4-ba84-a385111f9ee9.roa
File:                     73ff7f87-71dd-30e4-ba84-a385111f9ee9.roa (raw, json)
Hash identifier:          lDDcbgqDhgQN4hkkptdhf9Orp+JeEmFopoeZGt7IjjU=
Subject key identifier:   7A:D9:C6:D3:97:BB:9E:7D:E8:36:7A:94:9C:57:A3:B0:5F:C4:8C:B7
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584CDB023887DD861BE68C17A000
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/73ff7f87-71dd-30e4-ba84-a385111f9ee9.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     7029
IP address blocks:        173.185.32.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:02:38:87:dd:86:1b:e6:8c:17:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=1eaf6436-0642-4ce4-a164-39a2b00b47cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cf:82:ef:33:e4:c2:5b:a0:37:70:42:6e:8a:
                    da:fc:be:9c:29:0f:15:24:ef:c9:b8:d8:c6:1f:70:
                    e1:74:77:91:84:81:8e:72:80:0e:81:08:3d:bd:4e:
                    2c:be:0e:b5:c5:c0:e3:29:d7:ce:a8:45:44:a6:3d:
                    55:89:23:24:48:30:c2:90:71:6e:4a:c4:9e:ec:10:
                    d8:f9:40:47:71:91:45:55:81:bc:22:3e:06:c0:4b:
                    ad:69:71:01:c9:fb:a9:6d:ee:00:d3:40:af:c9:c7:
                    b7:79:34:a2:6a:f5:92:bb:5a:05:fa:2d:13:50:4b:
                    73:37:f2:df:aa:e3:1b:ef:13:ac:cc:01:e3:37:7e:
                    41:41:31:33:7a:f2:77:aa:c7:86:8e:3d:06:e0:2e:
                    79:a8:5a:ef:39:61:2a:81:2a:15:73:22:c1:31:40:
                    68:ad:47:fe:5b:74:cb:5e:00:21:84:ac:18:0d:15:
                    b0:4c:c8:9a:35:a8:b5:db:2c:25:73:06:dd:bf:92:
                    69:74:aa:17:df:8b:88:40:bb:45:ce:c8:d0:f2:95:
                    fb:f8:5c:e1:c7:04:b4:d5:12:42:7b:73:58:ec:04:
                    7b:92:78:b5:f5:dc:50:ea:33:70:a4:b3:4c:d9:5c:
                    18:d9:5a:67:04:ef:e2:78:24:59:c1:41:03:ee:e6:
                    03:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D9:C6:D3:97:BB:9E:7D:E8:36:7A:94:9C:57:A3:B0:5F:C4:8C:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/73ff7f87-71dd-30e4-ba84-a385111f9ee9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.185.32.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:3d:d9:ae:56:be:16:48:96:d0:71:26:84:0d:5c:80:34:26:
         3a:99:93:e5:5f:20:cf:0b:c1:4a:50:9d:7f:7b:dc:c7:f9:6b:
         63:dd:41:b5:cc:d7:3f:c8:e9:9f:80:f2:1b:ef:72:d0:9b:95:
         18:99:c3:98:f3:fc:28:3e:a6:d2:19:5d:eb:68:d6:fd:0a:18:
         d7:98:ec:f7:92:a5:58:f2:4c:e5:b1:28:9c:06:da:42:12:79:
         00:4f:8d:95:e0:20:c9:2a:ce:72:d7:66:70:f1:be:b9:8a:72:
         c1:46:6f:74:e5:03:2d:9e:98:04:7e:5f:b5:5e:b6:93:05:9c:
         7d:3d:45:28:b3:bf:f2:8f:c9:dd:91:5d:7a:07:6b:0d:3c:31:
         e0:ad:ee:8b:f7:ff:35:fa:8a:96:ab:ce:73:7a:43:90:aa:a1:
         63:a4:c5:fd:c4:1a:5e:d6:bd:89:4f:2c:c0:97:29:1f:34:ee:
         72:50:11:5e:26:c8:d0:9e:98:d0:fc:e2:6c:c2:c9:de:fd:39:
         4d:54:9e:35:76:44:97:f3:9b:99:1b:ef:0d:25:9e:8a:9b:3b:
         11:62:02:4b:36:88:ac:9d:6b:0b:ed:96:91:2c:5f:57:fe:b5:
         28:9b:9c:f4:16:7a:dd:fd:5e:7e:bf:b6:73:57:ad:eb:9b:fa:
         f7:44:f9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 06:30:39 2026 by rpki-client