Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7771f857-ab4a-3270-a1cd-e6c00ac02cc4.roa
File:                     7771f857-ab4a-3270-a1cd-e6c00ac02cc4.roa (raw, json)
Hash identifier:          ogBdqaJ5KpdQe8di8wpvT1oQsw/UmIh0Yojsx8vEfr8=
Subject key identifier:   F3:D5:70:DF:01:B3:57:8A:17:38:AE:0E:F7:2F:90:55:89:E8:72:8F
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584EC0A758604A0C64737D6BDAB0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7771f857-ab4a-3270-a1cd-e6c00ac02cc4.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     7029
IP address blocks:        173.188.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:58:60:4a:0c:64:73:7d:6b:da:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=00e0b768-b4f7-473a-8b40-6e299cdd5114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:21:d9:9f:84:c7:f5:14:65:11:00:cb:26:49:
                    df:0b:c4:e5:d0:5a:dd:97:d9:0c:46:79:61:43:3f:
                    29:83:a7:58:e8:f8:8b:d5:0b:f9:f9:c1:18:1d:40:
                    45:45:e9:33:f4:6d:1f:ac:01:dd:bf:3e:82:48:f2:
                    7b:7f:a8:69:f2:e0:41:49:22:ae:3e:66:75:b9:59:
                    f9:86:5e:98:14:da:1d:a6:f7:b2:bd:e9:ed:ba:aa:
                    d5:a1:0b:a0:15:d7:e2:98:88:58:c0:1e:de:f5:d4:
                    c7:2c:b4:4f:e1:81:9b:f7:22:bf:17:5b:bf:ee:fc:
                    a4:2f:4a:3f:4d:ed:4e:83:9c:4d:6d:d9:90:a0:94:
                    ce:ea:d6:52:32:c4:39:41:83:17:ff:21:63:19:3c:
                    8c:5f:56:83:20:9e:01:b7:b3:93:7e:50:2b:b0:e6:
                    d7:68:30:61:a2:f4:1e:90:91:9f:3c:f1:ef:95:31:
                    b7:45:11:ac:15:15:7d:1f:69:62:7d:a9:02:fa:4b:
                    5a:3e:32:13:e6:db:c7:b6:29:0e:9f:49:4e:a9:c8:
                    26:ec:00:aa:40:41:08:1c:e3:95:9c:f2:fc:d7:5b:
                    49:dd:6a:31:aa:42:d4:06:69:2d:4e:d8:ec:fc:e3:
                    ec:b6:63:88:1a:eb:21:f4:c5:e3:4c:bc:36:8b:b0:
                    0e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D5:70:DF:01:B3:57:8A:17:38:AE:0E:F7:2F:90:55:89:E8:72:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7771f857-ab4a-3270-a1cd-e6c00ac02cc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.188.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:2e:20:c3:c1:c6:14:60:76:1e:70:00:89:97:46:b1:f4:03:
         cc:67:a6:32:6b:ae:de:5f:1f:1f:26:95:b9:06:36:0b:cc:44:
         ba:3b:87:27:e0:ee:f0:b4:51:21:3e:f5:13:7d:c8:39:ff:71:
         03:a2:3d:69:16:23:6b:16:b7:f0:fb:11:92:13:fe:79:53:8e:
         11:02:8e:5d:7e:b6:33:8f:b0:07:a6:f4:1a:21:8c:8b:51:2f:
         36:00:ee:06:38:8e:df:3f:8b:ab:b6:a4:53:a1:a8:55:0d:10:
         25:d4:2e:41:59:2d:45:47:aa:c7:58:23:da:12:b0:dd:b2:db:
         0c:9d:e6:5e:75:9e:19:4e:ca:75:40:82:30:2a:a6:ad:39:43:
         c5:bf:4d:b0:a5:d8:96:86:4e:65:df:9c:45:91:b2:12:ad:b2:
         90:14:09:19:8f:23:7c:ce:fe:fe:22:be:82:a9:98:37:da:ec:
         79:d1:15:76:cb:79:49:91:bf:66:9d:45:f3:eb:39:f5:91:2e:
         75:9e:c2:47:0e:99:77:61:ee:3f:15:97:cc:db:ab:08:25:d8:
         ab:e1:4f:9e:01:00:6f:db:52:48:25:24:a6:69:f6:32:27:d2:
         7d:35:6e:b2:32:6c:da:e2:3f:ff:b0:6f:2b:f5:47:41:d2:c6:
         f6:dc:e0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 09:48:23 2026 by rpki-client