Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/75938e3a-d7d0-3def-92b2-56df898cf315.roa
File:                     75938e3a-d7d0-3def-92b2-56df898cf315.roa (raw, json)
Hash identifier:          UdGI4/yA3fiWR6W90dPACWhZus4ZSf7JFitUSIdzbB0=
Subject key identifier:   41:34:7F:33:CC:43:33:CF:7A:D5:CC:3A:34:39:85:E7:0C:8C:DB:9E
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584EB2B1E5BE640805332D676180
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/75938e3a-d7d0-3def-92b2-56df898cf315.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     7029
IP address blocks:        162.245.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:e5:be:64:08:05:33:2d:67:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=47b95b2f-02be-4e0e-9ef5-d2847f99a111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c2:8d:e0:1d:fd:9d:fd:f2:77:68:9d:9b:4d:
                    e1:e1:8b:9e:ee:e1:f5:ce:73:1a:a9:62:84:86:4c:
                    fa:6e:ff:89:45:5a:ce:1e:7f:bc:58:b3:2d:92:1a:
                    91:a0:36:9b:43:8e:b3:ba:24:1c:0c:0a:53:41:cc:
                    5f:79:61:91:47:7c:f1:cb:5e:c8:cb:57:8e:b8:9e:
                    e4:17:64:25:07:2a:b7:5a:92:8e:7b:fd:02:3a:8d:
                    37:0c:a8:e7:9e:e9:13:95:05:9d:b8:c6:be:3b:2a:
                    1b:34:77:0f:51:cf:b8:1e:3d:11:87:69:56:a0:44:
                    2e:ff:94:9e:cb:fd:e7:0b:d4:db:46:94:f5:d9:ab:
                    65:af:43:24:cf:b9:e8:d6:49:92:50:78:71:52:b6:
                    68:c0:5a:f0:c2:ca:fa:66:bc:e5:6e:0f:06:ca:7f:
                    1d:38:2a:04:b2:ae:d0:a5:59:00:81:2d:fc:f2:27:
                    3e:47:6d:aa:90:3c:70:b7:24:a3:1d:b9:a5:23:c7:
                    27:41:bf:5c:aa:e1:03:8d:5c:50:07:c8:6c:bd:56:
                    ea:21:0b:4f:3d:c5:e3:2f:9b:f3:66:0c:4f:e5:31:
                    aa:c9:37:8e:da:fb:ac:07:f9:03:85:b3:b4:8d:37:
                    80:11:c1:df:96:07:b8:94:ec:47:77:fb:60:22:5f:
                    c9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:34:7F:33:CC:43:33:CF:7A:D5:CC:3A:34:39:85:E7:0C:8C:DB:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/75938e3a-d7d0-3def-92b2-56df898cf315.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.245.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:cb:80:3a:0e:7d:14:85:91:78:36:1d:52:7c:d1:7b:61:ad:
         4a:68:5f:ec:fd:8b:2f:cf:b1:47:54:e8:c8:e4:4d:aa:c0:0d:
         34:b3:03:a3:1b:3a:3c:8d:6b:aa:4b:3b:b5:17:be:ee:5a:02:
         a1:78:bd:6e:dc:35:2b:c8:dd:f2:fb:5e:42:55:65:3a:03:b2:
         03:c4:1a:18:32:7e:cb:a4:1c:08:76:01:28:cc:8f:7d:18:14:
         ff:0a:9f:68:53:1a:a6:da:2d:4d:0c:79:8b:11:c7:c5:ab:58:
         05:39:a3:3d:13:8c:3d:62:2a:50:04:bc:7b:df:73:b0:13:56:
         61:84:4d:d3:f8:f4:93:db:45:72:28:55:57:f8:b7:5a:33:3e:
         fe:2d:c7:e5:b9:64:d9:d6:f0:44:27:2e:05:2b:35:ba:f4:20:
         f7:1f:63:6b:cc:9a:be:86:a7:61:ea:ec:c3:13:bb:cf:12:4a:
         3b:71:a2:96:ca:a2:0e:70:d7:1e:d5:dd:11:f6:1f:ae:1c:af:
         3f:12:b7:88:f2:57:a1:03:fb:0f:d1:5f:ca:2d:3a:ec:63:fa:
         2b:53:bc:9e:ca:ab:2b:c1:78:91:ab:e4:9c:8f:ba:b0:9c:63:
         68:b5:dd:f0:6a:c9:53:f6:56:31:88:16:d9:7b:37:8d:4e:03:
         5c:bf:79:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 12:31:20 2026 by rpki-client