Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7029d70-d556-3ba1-983d-457b97a89e40.roa
File:                     a7029d70-d556-3ba1-983d-457b97a89e40.roa (raw, json)
Hash identifier:          CmJvMZPYrVEY507zSVmyi13MdNTpbQyY/bhbcFVhtR4=
Subject key identifier:   83:5A:C9:16:AA:91:70:8F:0F:E8:86:38:D5:96:D3:CF:E5:C1:27:5A
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584EA7871CD02BFE2FE9D89A4740
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7029d70-d556-3ba1-983d-457b97a89e40.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     27338
IP address blocks:        74.8.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:1c:d0:2b:fe:2f:e9:d8:9a:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=87cfb956-a637-4164-9b79-1e614513fe26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b3:c1:79:3f:f3:0e:c5:06:a5:a2:da:8f:1e:
                    6a:65:1c:b3:fe:e2:59:7b:9c:4b:1c:8f:13:b3:47:
                    a7:12:4f:91:59:c1:75:23:ad:a5:41:bc:51:1c:82:
                    67:59:3a:cb:c4:09:18:6e:27:40:92:f5:ee:30:1b:
                    34:c6:6e:02:70:75:a9:ff:39:85:ad:4f:b1:6d:b1:
                    dd:17:90:68:f2:a7:d4:1b:64:6d:8b:aa:65:3e:4d:
                    ed:c7:a0:d5:4b:51:c5:f0:9d:a7:e2:72:cc:cd:77:
                    b8:f1:de:a7:62:5e:18:b2:9d:2e:07:31:d7:35:ca:
                    6c:f2:e5:3c:b7:a9:6f:3e:67:cb:72:5a:ec:71:66:
                    3a:a5:cf:21:1c:ac:55:44:b8:60:5c:c8:20:c0:50:
                    16:fc:2d:9c:fa:87:2e:73:c0:dd:99:d9:fa:a7:fa:
                    f0:d4:71:a7:77:42:1b:ea:26:1e:8e:1f:3e:9a:56:
                    12:37:48:b3:97:67:4f:55:c8:08:f0:9f:d2:0c:d3:
                    71:ba:25:50:cb:18:a4:67:57:9c:34:16:9c:d8:35:
                    40:33:ef:cf:56:9b:e9:16:60:b8:91:97:be:20:92:
                    99:68:7a:55:5a:de:8d:0e:fb:80:a7:bc:d5:68:38:
                    b5:77:ef:62:cd:1a:ab:05:46:51:b9:4e:f6:6e:b3:
                    d8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:5A:C9:16:AA:91:70:8F:0F:E8:86:38:D5:96:D3:CF:E5:C1:27:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7029d70-d556-3ba1-983d-457b97a89e40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.8.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:d8:f2:d6:6d:f4:79:9f:93:b7:46:30:74:7a:6b:78:a8:30:
         67:4c:0e:6e:4d:a8:58:12:33:80:65:91:5f:4a:5f:97:0e:c0:
         bc:bd:34:32:a5:83:e6:7d:f1:cb:4c:1f:f1:bc:32:1b:8e:ad:
         3e:ba:d3:a3:39:13:e7:7e:a9:ea:1d:50:5a:03:b0:4c:df:a0:
         2b:c3:f2:56:3b:5a:51:f6:06:9a:a9:62:86:99:88:a7:1f:4d:
         2d:2d:91:11:0b:1f:5b:4e:0c:db:82:a0:ae:3d:73:06:32:41:
         40:3a:2a:6b:d7:c0:fe:34:9d:c8:31:10:2e:47:ca:51:3a:63:
         79:7f:21:f1:a6:e3:f5:c6:d4:42:7f:90:8f:ed:fa:69:c0:27:
         82:4d:a7:30:23:96:2b:61:2a:79:71:82:f9:61:b7:e3:a5:4e:
         a6:41:36:0e:b4:96:aa:2a:fd:e0:e4:f2:b3:a7:6a:b4:70:1c:
         67:8a:70:55:e4:2f:5b:dd:48:53:20:20:f5:e8:27:c2:e0:97:
         91:76:3c:07:cf:ff:9d:22:07:9d:f4:89:b4:46:0f:4d:b2:0a:
         55:eb:36:a9:29:f3:e6:7b:ec:a3:4b:75:cc:cb:26:88:aa:2b:
         4a:f1:7e:d0:e4:f5:9a:c5:1e:9e:01:55:be:15:69:cd:bc:20:
         b8:51:4d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 16:11:12 2026 by rpki-client