Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cc591ba8-70c5-3874-aed2-1a2e13b76126.roa
File:                     cc591ba8-70c5-3874-aed2-1a2e13b76126.roa (raw, json)
Hash identifier:          zyF+rYwCMTNKOCIxa0Nh03HANTk3YFFPse3GTrDQe9M=
Subject key identifier:   AE:8B:6D:66:50:F7:BC:14:D9:83:5C:99:08:A7:41:A7:E2:B2:2D:01
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584ECBD1BFE5571BFB4FF3ED6700
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cc591ba8-70c5-3874-aed2-1a2e13b76126.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     7029
IP address blocks:        173.190.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:bf:e5:57:1b:fb:4f:f3:ed:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=7c54aa25-a144-4d2c-be49-88192834348a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b3:4a:d5:e3:42:09:5f:6e:e7:03:c6:9c:80:
                    17:ef:a1:0a:fa:89:fd:c6:3a:be:10:e0:e6:db:a8:
                    b1:61:00:88:48:c0:82:50:cf:6b:ee:63:b7:5e:82:
                    ca:f9:3f:e9:85:df:62:8e:9f:cc:d1:1e:a6:5f:5e:
                    df:23:67:d5:7f:b7:96:48:ca:1e:81:e3:59:e9:d0:
                    68:ac:6a:72:15:17:31:f3:fb:59:d8:83:87:ba:39:
                    1d:e9:3e:48:ee:e2:2d:f4:86:a4:70:81:1d:cd:62:
                    d6:4c:80:46:42:a8:b7:ec:53:df:78:f4:d6:92:17:
                    7c:63:2d:e1:fd:9f:44:ce:b5:72:c2:73:32:1f:55:
                    7c:f5:69:d9:55:28:41:1f:2c:c0:e7:a6:89:4e:04:
                    78:cf:3f:fe:c0:28:e0:22:9f:b1:c7:eb:ce:3b:ae:
                    8c:0a:0b:5b:2e:fc:db:e7:b2:76:2b:12:3f:97:5b:
                    66:55:16:7c:91:98:da:6c:85:ad:ae:85:d1:17:c3:
                    43:bf:bc:00:d1:b4:ad:74:88:d6:d8:f3:33:a0:31:
                    55:53:a2:c3:a9:f6:0d:0e:4b:41:d3:42:a3:a4:ba:
                    54:97:7a:3f:53:86:85:5f:f6:95:1f:fd:f7:42:23:
                    71:69:35:01:b8:40:e5:3e:44:56:9e:b2:a4:c6:1f:
                    e3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:8B:6D:66:50:F7:BC:14:D9:83:5C:99:08:A7:41:A7:E2:B2:2D:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cc591ba8-70c5-3874-aed2-1a2e13b76126.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.190.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:1d:71:59:1f:eb:eb:34:6e:d5:1c:81:1c:58:e9:91:7d:a4:
         18:f5:59:4b:9b:fd:71:f4:d9:58:86:9e:61:22:ea:6e:10:33:
         5a:1c:69:e2:24:00:6b:d2:59:ed:67:91:0f:b0:a2:0f:16:93:
         a1:93:24:cc:79:dc:47:d3:ab:86:cc:54:b4:72:72:01:ee:ac:
         14:73:d6:b3:1b:2e:0b:58:b5:d5:c5:97:48:da:c0:5a:5d:3c:
         1a:f0:11:98:21:97:6e:eb:85:a1:f9:af:e3:8c:64:66:31:7b:
         38:17:4e:30:eb:9c:2a:06:c1:b3:00:0b:0f:da:b7:b2:6c:82:
         02:0a:35:4b:8c:e5:aa:a0:c3:7e:1d:07:e6:7c:c7:7d:4f:08:
         4f:47:74:c6:57:c8:cb:32:85:e8:74:18:ab:2f:05:21:4f:fc:
         6b:3f:35:51:56:cf:47:79:67:f7:32:63:94:1c:ec:40:6e:50:
         8e:8c:6e:bd:d3:27:b7:83:5b:0d:3c:57:03:5b:ac:02:59:73:
         ff:d5:40:f3:d4:73:0e:a9:55:dd:1d:0d:21:e0:64:a4:86:bd:
         85:38:d0:ab:f1:10:0b:4d:27:20:08:0e:e6:c4:0b:5e:7e:e9:
         cd:b6:21:b6:ab:3a:ce:6a:76:9f:fb:1f:ba:54:b2:85:27:0f:
         5d:5e:5d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 12:31:47 2026 by rpki-client