Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fa789c5f-c113-3a33-8f1d-b792d26d31fa.roa
File:                     fa789c5f-c113-3a33-8f1d-b792d26d31fa.roa (raw, json)
Hash identifier:          VTRdHxQuG5VQgU8agjoIvzB3v3V2UpftbwrqDCVEH5w=
Subject key identifier:   C3:39:F4:FE:80:85:C6:40:88:F9:E6:6B:A4:A5:F1:7C:88:70:00:41
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584EB2B1EA6452C3DC917FC99D00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fa789c5f-c113-3a33-8f1d-b792d26d31fa.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     14822
IP address blocks:        40.129.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:ea:64:52:c3:dc:91:7f:c9:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=a8d196c4-39a2-4cbf-a426-0f0af4238b7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9d:a7:60:c0:20:40:cd:60:a1:eb:65:b3:45:
                    b7:b3:bb:01:d9:7d:60:ca:14:15:a0:78:81:72:03:
                    6d:e3:7c:6d:40:4f:a8:2c:8c:e5:bc:a6:5a:95:dc:
                    3c:0c:d6:a7:66:56:00:96:fd:df:bf:cb:8d:3b:ab:
                    58:28:9b:ea:5a:70:a7:df:3f:e5:91:5c:6a:1b:75:
                    bc:6c:3a:11:84:6f:ef:73:a7:81:aa:a8:30:b5:cd:
                    1c:75:b1:56:c7:a9:e3:af:80:31:70:b8:13:d2:0e:
                    88:83:2d:7a:69:4b:5a:13:1b:be:f7:db:78:33:56:
                    35:6d:01:af:d6:b3:0a:8f:72:a7:a4:f8:6c:cf:05:
                    df:29:72:14:12:08:54:59:7d:e4:00:40:21:3e:de:
                    f7:71:96:54:1d:78:f3:8e:7c:fa:c7:a0:ae:ae:d9:
                    24:9b:8c:1c:12:13:04:dd:64:7a:4a:95:73:49:f3:
                    57:00:e0:32:8d:d1:be:42:f0:93:74:6b:44:9a:2b:
                    91:16:31:84:f4:8a:79:db:f4:2f:5a:e1:ba:98:1d:
                    a2:cd:90:b2:5c:36:fc:39:64:04:df:cc:5c:33:27:
                    fe:49:4a:ba:25:bf:a1:f0:0b:a5:9f:16:a2:83:06:
                    97:d0:0d:40:8a:61:4c:04:30:eb:73:39:59:b5:9a:
                    e9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:39:F4:FE:80:85:C6:40:88:F9:E6:6B:A4:A5:F1:7C:88:70:00:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fa789c5f-c113-3a33-8f1d-b792d26d31fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.129.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:b6:f0:90:3c:ff:aa:94:ac:fb:56:6a:5a:ab:a3:4e:dc:04:
         c4:d8:df:c1:e4:2d:9c:7b:38:de:79:66:5f:09:dc:50:45:2a:
         1e:e7:47:7f:f8:92:87:2b:4e:2d:b6:cf:f4:b3:71:2d:8f:32:
         97:09:00:70:2e:f8:8a:ec:68:89:3d:cd:d4:a9:a0:c2:3e:0f:
         8f:ad:5a:49:53:63:e8:b3:ee:f0:e6:19:b8:2a:ef:37:87:11:
         da:56:e5:50:96:b6:b5:82:bb:b6:1a:5c:3a:5d:be:59:b0:38:
         00:4d:5c:56:b5:08:05:62:bf:e1:64:5d:be:9d:c3:5d:c8:b9:
         7e:8b:26:83:62:c7:31:73:38:5b:0c:13:c8:6a:35:36:3e:41:
         bf:34:3f:54:74:12:8c:9b:12:c0:16:e1:7d:f0:02:95:61:c7:
         b0:9c:46:18:11:03:ed:ec:b1:59:9b:3b:4f:7d:89:93:ef:02:
         e6:c7:c2:98:ce:63:7b:56:74:36:bf:44:71:d5:d4:6e:ef:72:
         26:19:8e:bc:8f:76:33:d1:5f:da:5e:7d:02:16:f4:44:a0:b9:
         03:70:da:fe:1f:8a:1e:21:90:09:3e:d8:7f:aa:76:11:cf:75:
         3b:75:9e:52:8e:b1:1f:0e:27:ae:50:5d:71:cf:af:03:50:d4:
         95:c2:8d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 10:37:03 2026 by rpki-client