Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7a8deb21-8cbc-3dac-8945-0e5bba038511.roa
File:                     7a8deb21-8cbc-3dac-8945-0e5bba038511.roa (raw, json)
Hash identifier:          zc0F6DuhpDMea6OGTe7nGVtX78J6ejKcjQbl9+6FZ3o=
Subject key identifier:   65:B6:12:18:1F:41:C8:56:F1:8F:56:E7:5E:95:A1:1D:88:61:C1:58
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584E62A9FCAFAC7C341F79AF8400
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7a8deb21-8cbc-3dac-8945-0e5bba038511.roa
Signing time:             Sat 04 Jul 2026 09:00:11 +0000
ROA not before:           Sat 04 Jul 2026 09:00:11 +0000
ROA not after:            Fri 02 Oct 2026 09:00:11 +0000
asID:                     7029
IP address blocks:        174.130.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:62:a9:fc:af:ac:7c:34:1f:79:af:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul  4 09:00:11 2026 GMT
            Not After : Oct  2 09:00:11 2026 GMT
        Subject: CN=413bb050-1983-43ad-8c86-dcc704b01b7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:52:46:8c:3d:87:e0:ec:76:7d:3b:a7:20:b7:
                    80:60:9e:a3:be:f6:17:4a:9f:a3:36:02:f2:0c:ab:
                    64:3f:cc:50:12:ed:71:f1:4e:13:c4:a2:1e:60:bc:
                    80:92:47:29:58:32:26:7b:14:00:02:6d:43:ca:16:
                    97:9e:87:b6:d0:c0:a8:e0:83:0f:9b:a3:71:34:62:
                    7f:2a:ce:07:da:e5:00:49:5f:10:ca:32:0f:9f:bb:
                    db:31:27:2f:74:3d:ee:ed:12:9a:97:14:84:4f:5a:
                    5c:b7:f8:7e:97:ec:b5:67:7e:3e:dc:0b:99:7b:14:
                    21:29:f3:8b:b5:52:d0:76:ee:ba:7b:35:91:4c:82:
                    a3:c0:7f:c2:b4:99:eb:93:ab:0b:f2:86:47:8d:2c:
                    ef:5e:75:69:19:fe:d4:e5:9d:6f:5c:3d:cf:3e:d5:
                    ce:60:b5:85:a4:7a:ad:c8:ce:5b:05:ad:d0:b0:54:
                    b8:75:98:d2:d7:9c:85:a8:5a:ae:8f:94:9b:5c:f6:
                    64:1f:0a:88:cc:83:2a:15:e3:bb:ff:e9:b6:19:c4:
                    83:35:53:5b:22:17:1b:53:25:1a:43:04:3a:ce:14:
                    23:71:d8:50:12:2d:41:5a:a5:55:22:d7:b3:f2:00:
                    a7:c2:39:58:fb:8c:0c:fc:f1:46:5e:e0:3e:64:c0:
                    3c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B6:12:18:1F:41:C8:56:F1:8F:56:E7:5E:95:A1:1D:88:61:C1:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7a8deb21-8cbc-3dac-8945-0e5bba038511.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.130.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:70:b6:c8:46:a2:d2:f8:db:0b:dc:83:d0:d1:5d:47:7e:55:
         77:d9:fb:2d:d6:5a:74:ed:42:1b:84:2d:cf:d9:02:f3:52:09:
         44:c5:f1:c0:22:31:89:b2:02:45:3b:96:f2:35:cf:b5:af:91:
         25:25:5b:43:0d:eb:fd:82:e3:5a:11:70:45:72:ad:92:8a:42:
         2c:b5:12:d0:83:87:f6:84:ef:cf:57:b1:28:c5:9c:f7:eb:1c:
         e3:ad:5b:e8:21:3a:27:e9:b8:a5:23:6f:81:b9:1d:ad:76:22:
         8c:cc:9f:da:8e:7a:24:bc:50:90:e7:51:ef:8a:08:d2:f9:0a:
         e7:c4:8c:c7:82:96:5e:eb:c1:df:dc:07:da:9d:74:33:a2:99:
         01:2b:c3:1a:bb:ee:6e:25:25:f1:bf:a8:7b:84:90:65:40:f1:
         e5:04:53:4b:d7:b9:d3:bd:cb:96:0f:28:1e:c1:32:5f:08:af:
         64:4d:dc:eb:36:92:b5:79:43:13:fa:00:37:5e:ad:b5:2d:30:
         b4:48:be:0f:2c:8c:23:b6:8f:14:2c:7c:c6:9e:06:82:46:8f:
         71:62:6a:39:89:5b:3f:67:92:38:8c:d2:eb:60:f7:d3:a5:02:
         50:a2:56:78:e7:81:dc:c2:42:6a:db:34:03:6f:75:36:41:f7:
         eb:5b:eb:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:19:05 2026 by rpki-client