Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/77d474fd-ebb3-3b7b-b204-ebac69261727.roa
File:                     77d474fd-ebb3-3b7b-b204-ebac69261727.roa (raw, json)
Hash identifier:          AdLHDVqzzFXxhWAmNrlNiVORYFYQopj7raWLYiqU3U4=
Subject key identifier:   D0:94:6F:BE:87:56:18:DD:1A:19:E1:F9:F5:12:DB:D4:B7:8F:89:94
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584EA7880C8FCDA2334983232F80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/77d474fd-ebb3-3b7b-b204-ebac69261727.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7029
IP address blocks:        67.141.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:0c:8f:cd:a2:33:49:83:23:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8742cd13-ab38-453a-8d07-9e1e7da8af54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ce:fe:d1:4d:19:bb:04:26:56:78:a6:b8:91:
                    1b:a5:ef:da:2d:32:01:8a:8c:5e:d6:e0:08:8f:27:
                    b6:62:bd:c9:9e:93:ce:61:0c:8c:27:e9:db:65:e8:
                    a7:87:9d:4e:94:12:c8:3c:89:39:a3:5a:35:3d:88:
                    8c:44:58:4b:dd:69:99:13:89:6d:43:77:c9:ea:a6:
                    2a:cd:8e:d1:39:62:a5:49:32:d0:09:2d:94:52:f1:
                    0c:eb:41:ea:a8:6f:bc:cd:6f:8c:87:d8:2b:69:40:
                    77:bc:c1:99:97:8a:e4:b7:8a:24:5a:73:5b:cc:22:
                    27:96:0f:f2:e7:79:32:58:fc:71:e7:05:f3:e2:4f:
                    d5:c4:1c:ac:df:b0:c9:69:40:88:fd:28:ce:9a:89:
                    6c:b6:08:24:aa:c3:cd:dc:3d:39:76:e0:2f:7c:47:
                    08:6d:db:22:0d:5e:e1:4a:5b:09:2b:de:5d:a6:64:
                    70:ed:6c:85:95:ce:6b:d1:1b:ee:fc:87:a3:90:7f:
                    ef:2a:8b:27:1a:e4:1e:23:14:f1:0c:9b:4c:16:24:
                    b1:e5:e6:a5:32:01:6a:f7:31:57:ef:a8:f7:e2:57:
                    12:e6:38:e5:4f:4b:87:ce:64:fe:6b:0b:2b:67:41:
                    ee:41:e5:cc:f5:e4:c2:6b:b4:2b:6a:26:e6:ca:12:
                    6c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:94:6F:BE:87:56:18:DD:1A:19:E1:F9:F5:12:DB:D4:B7:8F:89:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/77d474fd-ebb3-3b7b-b204-ebac69261727.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.141.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:4b:ab:54:8e:1a:8d:98:ec:17:67:62:61:58:97:95:e6:05:
         4b:6b:67:d5:2f:6a:23:34:48:b6:f6:19:37:ac:ac:62:d2:00:
         74:b2:a5:2e:98:9a:59:26:f1:d8:54:f6:3d:63:f4:ab:58:91:
         8a:da:9e:8d:22:d4:6b:f9:9f:16:e6:b8:68:89:03:d1:9f:d4:
         e9:a8:08:9d:01:96:eb:be:ef:78:18:01:6a:4e:8e:7c:65:2a:
         30:30:d5:0c:bc:b9:a0:54:21:b5:50:46:33:d7:35:1f:b2:6d:
         c2:1d:e6:48:17:44:fe:3c:4e:76:27:c6:b9:21:4b:b2:c6:bd:
         03:5b:b3:92:e3:1c:b1:89:2f:1d:b1:1a:10:e6:bc:d9:80:7d:
         0e:cf:f2:41:78:fe:47:74:10:47:0e:ce:84:0d:40:e0:17:ce:
         72:82:2e:2f:39:1b:7c:b6:a6:68:8a:2b:78:ff:8e:94:68:3e:
         fc:6b:8d:37:5b:00:0b:cb:ef:2c:ca:a7:24:3b:05:d8:54:15:
         d3:f6:57:6b:8f:3b:5c:26:15:42:84:c1:15:b0:c0:a9:f6:56:
         bd:ad:58:71:35:07:94:a6:60:8e:65:63:d3:1d:68:e1:bc:13:
         f6:ab:ff:a9:d0:7d:51:b5:02:53:9a:8c:69:8c:33:93:1b:bc:
         1c:16:cf:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 12:28:38 2026 by rpki-client