Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9f194c11-ef5e-3220-9514-d688c7d7c487.roa
File:                     9f194c11-ef5e-3220-9514-d688c7d7c487.roa (raw, json)
Hash identifier:          ah3KMZ7kPpufaVlZyMi1qrtZgFZicz9Llb1pO3gbunY=
Subject key identifier:   8D:20:A0:F4:F9:52:D5:EC:F0:E4:5F:AC:FE:71:E1:04:DF:89:90:6F
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584F6E4419DD5D5F5D2AF2E22980
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9f194c11-ef5e-3220-9514-d688c7d7c487.roa
Signing time:             Thu 08 Oct 2026 05:31:35 +0000
ROA not before:           Thu 08 Oct 2026 05:31:35 +0000
ROA not after:            Wed 06 Jan 2027 06:31:35 +0000
asID:                     7029
IP address blocks:        162.40.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6e:44:19:dd:5d:5f:5d:2a:f2:e2:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Oct  8 05:31:35 2026 GMT
            Not After : Jan  6 06:31:35 2027 GMT
        Subject: CN=2d36132d-eae1-46d6-910b-a5126e49b44a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:57:b3:2f:52:e1:5d:13:0c:f5:9c:61:8f:63:
                    7f:3b:5c:86:fb:23:7a:7b:bd:51:ea:21:76:1a:3e:
                    11:c1:d1:b1:15:3a:da:37:eb:47:c3:77:a0:11:f0:
                    2a:9a:dc:94:bf:8a:87:3a:44:df:71:0d:a3:b0:e7:
                    d9:93:c0:84:9d:d4:c3:b4:a3:dd:0e:91:71:59:f4:
                    ba:62:c8:6b:22:16:c1:a7:d6:bf:2b:90:0e:6b:6d:
                    61:18:87:10:77:6d:8a:f9:f9:fb:44:44:e8:ba:2a:
                    22:20:bb:2b:36:c1:76:18:4a:a0:c6:14:3a:a5:00:
                    b1:6d:b2:aa:ae:3c:ac:b0:07:a2:a3:05:2a:ce:74:
                    de:d6:55:04:5f:a3:a0:73:f7:0f:8c:91:5c:0d:2b:
                    db:cc:a4:5d:4e:b6:71:8b:3d:a1:44:18:5b:69:bc:
                    ed:e3:7a:70:ef:e0:db:60:93:98:a7:36:93:74:d5:
                    9b:31:e6:60:83:f7:08:74:32:5f:a6:62:8b:9b:c9:
                    40:73:3a:e9:ca:24:0c:87:99:93:64:fd:29:84:3c:
                    8f:d8:c6:bc:57:c9:53:20:5f:95:95:e0:2e:28:4a:
                    e9:93:7c:4c:83:d7:ba:73:1c:56:be:22:d0:db:e0:
                    4b:fd:1a:a2:52:18:a1:88:46:6f:81:05:f4:03:2d:
                    23:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:20:A0:F4:F9:52:D5:EC:F0:E4:5F:AC:FE:71:E1:04:DF:89:90:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9f194c11-ef5e-3220-9514-d688c7d7c487.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.40.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:71:f9:14:6c:bb:64:8b:5c:41:22:47:22:a8:81:d1:33:f3:
         6b:ed:46:0c:3d:c6:9d:e2:ee:a8:15:ad:ee:8c:bd:22:89:ab:
         aa:2f:f2:5d:9a:4e:21:c1:2d:1f:48:cc:79:a6:a9:f9:cd:45:
         11:c8:b6:fc:fe:c6:24:d5:5f:37:7c:f5:4e:6b:08:d1:8d:e1:
         df:f0:99:b8:1b:cd:34:8f:5b:3f:03:21:ec:51:22:30:30:50:
         5d:b5:de:10:5e:dd:c1:e4:c3:d9:35:92:98:df:08:7e:57:3a:
         10:94:94:4f:4a:66:ff:2f:25:b3:ed:65:04:da:4f:1c:95:ae:
         e6:be:8f:5c:72:fc:b8:5f:75:7b:ad:6a:a6:10:a8:b3:30:f3:
         f2:db:68:80:ac:11:90:56:4a:d4:f6:28:34:e7:be:59:36:1d:
         47:99:54:26:0c:f6:0f:13:69:b0:04:ce:ab:43:a7:ab:17:fd:
         3b:82:d4:6e:c8:cc:33:df:9b:a2:63:76:01:90:28:0e:07:ab:
         a9:ee:e5:66:4f:63:74:88:bb:3f:f2:23:2b:b6:08:c1:8e:07:
         e2:1d:a0:10:c7:62:d6:c9:83:c4:b7:09:ef:c6:13:4a:f2:1c:
         e7:3d:7b:87:79:ea:04:bf:49:b5:62:ee:bb:14:d2:47:b1:d4:
         77:d4:8e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:30:37 2026 by rpki-client