Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/51103c09-b130-39f4-ab32-0e03b2d423bf.roa
File:                     51103c09-b130-39f4-ab32-0e03b2d423bf.roa (raw, json)
Hash identifier:          AeslGZP5+NXY2MyXAT4b9a3BRAS3G42uon6aSCdCRLA=
Subject key identifier:   D5:23:91:5C:47:D8:D7:C7:9A:99:40:26:AD:B8:E9:01:CD:3F:F6:A1
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584E0D842CED8D259967F453D120
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/51103c09-b130-39f4-ab32-0e03b2d423bf.roa
Signing time:             Wed 03 Jun 2026 21:00:12 +0000
ROA not before:           Wed 03 Jun 2026 21:00:12 +0000
ROA not after:            Tue 01 Sep 2026 21:00:12 +0000
asID:                     7029
IP address blocks:        173.191.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0d:84:2c:ed:8d:25:99:67:f4:53:d1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jun  3 21:00:12 2026 GMT
            Not After : Sep  1 21:00:12 2026 GMT
        Subject: CN=136a855e-ccfb-41b9-a65b-4de1e1e8eea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fe:ff:9e:43:b7:af:5f:82:ff:f3:af:2f:9e:
                    69:e6:65:dc:de:05:28:72:8c:aa:22:ae:ca:c0:31:
                    10:c3:b7:87:de:6f:c9:22:33:95:17:f5:5e:60:ab:
                    71:87:81:b0:58:28:99:fc:af:77:81:72:ab:3c:a1:
                    1a:0c:e9:cc:f4:7a:1a:36:05:2d:50:33:0f:e9:5c:
                    67:26:56:11:de:19:bf:29:13:b4:7f:4a:d9:f2:28:
                    03:5d:6a:0c:e8:ab:b8:34:1c:3c:1a:e9:5e:e8:9d:
                    c0:48:44:5c:85:d5:29:da:be:99:f7:e6:69:64:e2:
                    4f:50:90:6e:2d:11:7c:de:88:a5:ef:aa:44:dd:9e:
                    b8:bb:88:9a:5f:df:dc:90:8c:18:9b:8f:02:90:29:
                    30:1e:64:fd:65:5b:12:37:84:af:87:dc:66:81:fc:
                    98:2f:13:0e:35:1d:a6:09:ea:22:e9:6d:cd:14:89:
                    d7:c5:3c:1c:c5:62:82:c2:4f:f8:a7:39:19:d7:2c:
                    6a:22:ad:8a:af:03:f2:01:e7:41:57:5a:44:43:0d:
                    75:b2:f3:85:3c:20:c1:bc:b0:fc:3c:4c:63:68:9f:
                    3f:a8:9b:a3:e4:cc:1c:57:dd:21:ab:63:4f:b3:31:
                    88:21:08:d8:03:7c:00:a1:c5:4e:b1:3a:f9:d9:ea:
                    a3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:23:91:5C:47:D8:D7:C7:9A:99:40:26:AD:B8:E9:01:CD:3F:F6:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/51103c09-b130-39f4-ab32-0e03b2d423bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.191.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:25:67:13:36:70:30:01:26:b9:e9:c4:7f:2c:52:01:82:cb:
         97:39:5d:70:92:60:78:23:87:5e:63:a0:5d:ef:58:24:40:ba:
         75:45:53:ac:62:cc:c9:30:aa:4e:3d:7b:58:15:53:e5:9e:d1:
         89:aa:90:1f:64:e0:f2:2f:70:d0:ce:88:19:2b:ce:57:5d:2b:
         7a:94:0f:be:9b:46:59:66:11:26:70:40:16:8b:fc:be:1e:30:
         e1:e9:bb:31:61:d6:0a:7a:fc:c7:73:14:0d:ef:39:26:1d:34:
         28:81:07:98:18:5f:35:5f:78:46:84:2e:05:f7:a5:da:6c:3a:
         a8:98:75:2a:e2:e2:6a:e5:54:7b:87:d5:c7:78:86:78:f4:47:
         dc:60:8e:9f:2e:05:cd:54:87:9f:aa:8f:79:4e:d0:40:e8:a1:
         0b:99:30:82:08:ed:55:f7:7c:5b:82:e3:77:9a:78:7a:70:5a:
         2f:8d:1f:10:78:0f:a2:fd:82:20:41:b4:07:c0:18:e3:76:08:
         6e:7e:2e:c3:39:a5:e3:3d:a9:2f:ae:ff:a4:37:5e:9b:52:e8:
         cd:e2:d1:59:34:9d:16:48:00:46:65:d4:29:56:1a:cc:b1:32:
         35:bd:f3:ba:75:f3:24:25:9d:bc:0a:3b:9d:2a:a7:03:a2:59:
         6a:3e:c9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:27:59 2026 by rpki-client