Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cc0c1dd-cb09-3709-bb88-090ec6e939dd.roa
File:                     9cc0c1dd-cb09-3709-bb88-090ec6e939dd.roa (raw, json)
Hash identifier:          Uvm2b9xQZ9OloxRXI3uBMh5fsrd3gnM8vEqhjqCre9Q=
Subject key identifier:   9C:57:5F:64:A4:39:48:06:F6:D3:B0:BB:4A:62:72:B5:6D:AE:D0:D1
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584EC371B669A4258BEF13F31BC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cc0c1dd-cb09-3709-bb88-090ec6e939dd.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     7029
IP address blocks:        173.185.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:71:b6:69:a4:25:8b:ef:13:f3:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=7820f362-3c78-4ad9-87f0-b1310879772e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cd:d2:8e:72:b4:06:19:28:67:e9:ea:cc:4c:
                    dd:b7:39:6c:b7:50:86:2d:cd:48:0e:bf:f5:92:6a:
                    1c:b8:e4:1d:eb:ce:ba:db:54:e1:a6:3d:23:1d:40:
                    bb:63:c6:d6:e7:25:41:e3:69:8b:06:b7:12:fa:04:
                    f2:17:6f:d1:a1:9a:d0:e4:93:a5:d7:cc:35:47:dd:
                    65:dd:23:0c:b8:85:66:cf:81:0e:5c:8f:44:70:67:
                    8f:e9:db:f1:b6:96:13:6e:f1:56:73:cb:a4:b9:84:
                    16:0a:15:f0:92:ec:13:0f:0c:81:6d:7c:3b:9b:8a:
                    a7:f3:dc:56:0c:5f:9d:1a:07:84:71:db:4f:5c:f8:
                    70:17:f9:b1:46:a0:8a:60:cc:de:84:34:90:d4:2f:
                    b4:76:5c:85:68:93:9f:a2:af:62:47:83:d4:c0:3d:
                    d6:cd:4e:bf:67:d5:36:ea:ad:32:f5:9e:11:ce:55:
                    c0:fe:69:ff:9e:33:83:88:7e:38:31:09:91:7b:77:
                    d3:71:8e:38:79:fd:be:45:4e:dc:f0:b2:e4:02:44:
                    a8:e1:a5:83:04:f0:26:2f:ac:b9:05:8e:40:9e:a6:
                    ab:52:57:aa:a9:af:a1:c1:f2:c6:6e:cf:9c:c7:58:
                    fd:e0:46:cc:d2:16:d7:9d:ec:e9:1f:c9:78:30:49:
                    37:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:57:5F:64:A4:39:48:06:F6:D3:B0:BB:4A:62:72:B5:6D:AE:D0:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cc0c1dd-cb09-3709-bb88-090ec6e939dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.185.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:d1:5d:fb:1d:69:23:76:ac:37:97:1c:97:6f:90:52:dc:1e:
         eb:d7:04:c6:b3:ee:81:53:16:ad:32:ce:1b:f7:b5:b2:5f:77:
         f6:c7:b1:e5:2c:a9:1a:59:35:6c:4a:ca:57:23:c3:96:52:e4:
         04:a3:b4:52:a1:0e:2e:bb:24:b5:50:56:51:29:f2:c9:6d:5f:
         6f:6a:f3:10:ee:64:b3:52:a4:fe:68:0a:05:98:73:43:42:88:
         49:4c:34:2e:47:24:c7:78:3a:7b:ea:13:00:52:71:28:c5:ff:
         1a:a7:f0:17:9b:18:f8:2f:45:f3:28:7c:bf:2f:a3:60:21:68:
         bc:e4:13:ee:a5:eb:57:a6:80:7a:61:d3:5d:56:c5:c0:1f:b6:
         3e:f2:5b:a9:ce:f5:46:60:e6:47:e8:15:9a:c0:a9:fe:bf:18:
         fe:64:c5:21:25:58:48:55:a4:5f:4a:b4:b7:f7:60:37:0a:b5:
         85:ab:db:2a:41:bb:8d:ee:18:72:30:8a:90:c4:1f:fd:6e:1a:
         88:92:90:bd:b5:cb:8e:38:05:ed:e0:d8:15:a8:1a:66:0e:e9:
         b4:e9:a9:aa:66:4d:d4:06:d4:e4:6a:7a:1e:46:99:21:04:d2:
         89:de:f5:b6:c6:ec:5f:11:86:ba:20:9e:3a:dd:3b:5b:fb:4f:
         b5:9b:fd:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 16:10:14 2026 by rpki-client