Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6cfeb479-6156-3053-9f57-31da125d1de6.roa
File:                     6cfeb479-6156-3053-9f57-31da125d1de6.roa (raw, json)
Hash identifier:          1mM0p23aIfrpXdkmpiVLpOU+tubl68YsxRQ+fcEoQHc=
Subject key identifier:   5E:81:98:CE:46:A3:AA:A2:28:12:53:C5:79:3F:4D:79:23:E6:E1:46
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584F497F1512977D29C48336E180
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6cfeb479-6156-3053-9f57-31da125d1de6.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7029
IP address blocks:        173.190.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7f:15:12:97:7d:29:c4:83:36:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=bc56bfdb-760e-4615-87a3-207cf3f07f97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2d:78:2d:ba:b1:97:95:2d:6f:18:e2:21:25:
                    51:e7:bb:71:51:bd:5d:d8:32:e7:9b:fc:34:1e:73:
                    d3:80:b5:a5:80:a6:d1:78:ee:06:8a:03:57:17:25:
                    95:2a:47:85:e4:8f:d2:d0:06:e3:03:cb:a5:c8:8c:
                    57:c7:b8:2d:ed:ee:4f:c7:ea:b4:a7:c4:96:e7:af:
                    0a:b7:84:45:76:8c:50:06:cd:a8:7e:2c:7d:70:06:
                    32:b9:69:d8:14:24:44:f7:26:01:d0:e8:cc:49:da:
                    c8:a9:57:5a:e6:a4:f3:33:f7:3c:a7:77:12:e8:7f:
                    27:da:32:d7:67:b7:b9:89:28:bc:0d:21:97:8b:89:
                    fd:96:bb:8f:da:7a:36:63:81:25:d2:7c:7f:06:d7:
                    4a:4b:a1:ca:8e:b0:be:e6:4f:24:bd:90:22:e5:6e:
                    9c:2e:d7:4e:c5:7a:c2:1f:55:7d:4c:84:3c:ec:06:
                    e1:d6:78:4e:83:e4:71:8d:c3:f7:66:87:ed:b9:d2:
                    7f:2c:6c:62:c8:d8:11:2c:c4:c2:e7:91:2a:9d:1f:
                    8d:a8:74:96:68:fd:eb:6a:1e:0f:fd:7f:1f:a1:f7:
                    f7:91:f6:06:4e:af:9d:68:e0:b1:5f:e7:a4:43:f9:
                    5a:29:aa:f9:b2:d3:91:a9:a5:91:ea:c2:57:cd:ba:
                    30:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:81:98:CE:46:A3:AA:A2:28:12:53:C5:79:3F:4D:79:23:E6:E1:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6cfeb479-6156-3053-9f57-31da125d1de6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.190.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:a6:c7:7c:fd:b8:60:43:8b:2d:51:ae:07:fd:ad:ef:e8:ba:
         b4:42:da:0b:e9:91:95:97:c0:3b:d2:ba:eb:f0:d6:c8:0b:5a:
         74:ec:68:7a:cb:75:0c:ec:d1:c7:4a:54:a9:f1:d5:47:b2:04:
         a8:b7:f3:f5:f1:bd:87:bc:2e:58:29:88:7c:7a:5e:5d:de:d3:
         92:c7:71:be:7f:8a:d6:24:78:28:f2:5a:d2:2f:b9:b8:2b:79:
         6b:e6:68:73:98:ad:6e:8b:4e:97:95:35:b6:87:02:55:fe:81:
         f6:7b:9a:e7:a4:ed:0c:d3:ac:73:dc:ae:c4:a4:9e:ca:b0:9d:
         68:ae:da:c0:3f:4a:2c:44:10:e4:8a:1a:a8:ab:e4:e2:af:bb:
         40:d2:9a:02:6a:3b:a6:22:b3:07:c8:e8:0f:0f:e2:0f:49:21:
         8f:7c:b9:ba:73:43:88:f4:10:80:e5:6a:24:b0:64:56:1d:48:
         bd:d2:e8:ea:04:c8:79:8e:8e:0f:ec:dd:1f:a8:d2:cd:5f:ff:
         61:10:bd:7f:90:6c:f4:55:57:9d:f0:a3:dc:c8:bf:9f:a2:69:
         43:90:e9:2a:d9:e6:dc:7b:be:6e:70:a4:ec:51:55:c3:ff:ab:
         5b:e9:e8:62:8c:62:85:59:ec:f4:48:8d:07:cc:27:e6:0b:c9:
         f7:49:2c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:48:08 2026 by rpki-client