Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea73acf6-66b6-3fb9-85c5-c4a32aff65cd.roa
File:                     ea73acf6-66b6-3fb9-85c5-c4a32aff65cd.roa (raw, json)
Hash identifier:          2qBK7fbajtVLF1U2e8m7VT55k4HkOXe3PNXnh86aykM=
Subject key identifier:   37:45:69:46:C4:0F:4A:0D:D8:AD:6A:CA:AC:5C:CE:4A:94:01:DE:B0
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584EAE81B3784F10F860C2CC9AC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea73acf6-66b6-3fb9-85c5-c4a32aff65cd.roa
Signing time:             Fri 31 Jul 2026 13:00:12 +0000
ROA not before:           Fri 31 Jul 2026 13:00:12 +0000
ROA not after:            Thu 29 Oct 2026 13:00:12 +0000
asID:                     7029
IP address blocks:        75.89.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ae:81:b3:78:4f:10:f8:60:c2:cc:9a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 31 13:00:12 2026 GMT
            Not After : Oct 29 13:00:12 2026 GMT
        Subject: CN=4f3a6911-354a-4207-b357-4ce0dc9e0731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:36:c1:99:17:11:ca:12:ed:5f:69:50:1c:90:
                    b9:bd:0f:59:9b:79:57:74:18:b6:0b:f1:eb:6c:4b:
                    0a:1b:60:71:d3:44:39:90:5d:fe:98:8a:82:a8:72:
                    1c:ca:f3:af:08:02:b1:af:75:ad:72:70:8d:3c:d8:
                    eb:5e:04:52:72:61:93:8e:43:06:66:69:02:58:10:
                    fb:f0:83:de:ec:ed:58:c7:2d:8e:da:48:03:c2:85:
                    e7:a7:98:ee:0e:a9:a8:fc:41:8e:b5:06:22:5b:cb:
                    e5:5b:f9:5e:98:cf:e3:94:2a:00:6b:d6:c2:79:4f:
                    da:2c:1e:d8:0c:50:3c:ad:6c:92:05:70:72:b2:41:
                    64:62:c4:5a:f5:7f:00:50:98:b0:90:df:94:77:97:
                    2b:75:25:95:93:51:7f:34:a5:56:1a:44:b9:51:14:
                    3f:bb:49:ce:38:6a:b9:b0:aa:1b:21:24:8f:5d:dc:
                    c2:ac:fa:93:ff:11:a4:63:c1:b5:de:59:4c:08:c8:
                    da:61:bc:68:a7:2a:03:7c:f8:4c:aa:3f:6e:f4:26:
                    15:24:d5:46:28:d0:78:c9:7c:aa:d6:72:9c:96:c0:
                    5e:e2:f6:53:ab:8f:1b:a4:09:96:f7:88:e8:a1:8e:
                    c8:db:c4:7a:74:ba:a6:17:ba:10:ae:e8:87:1b:19:
                    9b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:45:69:46:C4:0F:4A:0D:D8:AD:6A:CA:AC:5C:CE:4A:94:01:DE:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea73acf6-66b6-3fb9-85c5-c4a32aff65cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.89.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:9a:69:d7:45:05:5f:45:30:60:38:b2:f1:35:c7:9f:31:1b:
         d9:34:d2:df:af:0c:99:34:98:73:0e:16:c4:ee:7a:53:00:e2:
         13:95:50:d1:b5:07:f9:ba:bf:1e:27:5c:e9:5f:15:3e:23:af:
         7b:cd:d1:d7:a6:19:5e:1b:2c:89:fb:0f:49:73:c5:a5:72:53:
         89:58:61:fd:6c:de:49:2a:64:96:aa:f7:d9:74:92:fc:65:0d:
         4f:6d:18:32:d1:12:38:49:59:4d:20:06:d5:8b:97:16:c9:12:
         f9:2f:19:83:96:61:7b:a6:ce:35:da:6c:0d:ff:05:db:63:c8:
         dc:3e:f4:d2:75:35:ce:8e:cd:a2:80:2c:a0:d9:11:e7:e1:9a:
         4e:7c:2b:99:cc:a3:f6:c8:56:e4:e2:64:ca:14:ce:0f:cb:8f:
         66:5f:2b:55:6e:6f:a9:75:d8:32:18:44:cf:51:65:4e:b3:c4:
         23:a2:18:58:30:83:1b:bf:95:f2:55:87:68:f5:98:b0:a5:4a:
         82:fb:f9:f1:1e:6f:53:6c:87:aa:79:57:2f:34:ea:70:aa:27:
         1e:3c:2d:ce:16:5f:73:be:ad:f1:81:90:c6:69:5c:95:f3:f4:
         f2:fe:2c:51:09:20:86:91:37:d1:ca:7a:b9:e9:55:74:1b:d1:
         34:6a:1e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 09:48:38 2026 by rpki-client