Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/73ca3710-9c95-3950-bbf5-d834ab5be8e4.roa
File:                     73ca3710-9c95-3950-bbf5-d834ab5be8e4.roa (raw, json)
Hash identifier:          O9zSWI3xU2n1twb6wF/3zYbJe2IC+WE10MggabLZaM0=
Subject key identifier:   6C:25:CF:60:C3:0A:10:3B:EE:83:B0:1E:8A:0E:5F:E0:63:DA:10:5A
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584E9A7FDBA2CCCF271E7CABCC80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/73ca3710-9c95-3950-bbf5-d834ab5be8e4.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     7029
IP address blocks:        139.55.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:db:a2:cc:cf:27:1e:7c:ab:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=295dc69e-b26d-440e-9bdd-ef7af2bd7d19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:64:ea:4a:db:41:2f:82:2c:18:07:9f:79:3b:
                    5f:2e:9d:da:4a:cb:20:7b:b8:42:3d:cb:21:54:fd:
                    0b:cc:7c:9e:75:5d:ad:42:17:ff:d3:b1:ee:7a:fa:
                    cb:fb:eb:a9:86:67:b0:36:9d:2b:77:e4:0c:35:4d:
                    f5:64:87:8c:24:02:2a:22:6b:89:07:a9:35:30:e3:
                    af:48:e6:7f:e2:f0:b7:1e:e5:f1:e5:72:3a:ff:df:
                    fd:49:31:4a:8f:18:47:00:32:c4:d6:8e:78:e4:af:
                    e7:5f:14:11:09:84:34:59:e3:5b:b9:4c:43:94:25:
                    d7:82:fc:e1:f2:2e:bd:d0:08:2c:05:84:45:b3:cb:
                    7a:9a:9c:4a:f4:e3:14:5b:96:ce:81:0c:ad:42:65:
                    f3:f7:f3:3f:d6:b0:91:fd:ff:20:7b:b5:17:c7:bb:
                    fd:5c:b8:34:a5:39:c4:48:ac:5d:b0:81:91:fc:05:
                    3b:6d:07:17:13:7a:ef:a7:1c:1a:56:08:ae:85:04:
                    d9:0a:67:85:7d:7c:8c:1a:8d:41:58:ca:e6:48:78:
                    b3:94:37:d3:49:c7:1e:64:e5:76:12:2f:18:3b:40:
                    26:42:1f:ae:ba:1a:61:58:d2:24:04:cd:f4:93:0c:
                    c7:4e:ac:c5:d8:4c:83:eb:a7:ce:62:49:9d:4c:20:
                    d6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:25:CF:60:C3:0A:10:3B:EE:83:B0:1E:8A:0E:5F:E0:63:DA:10:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/73ca3710-9c95-3950-bbf5-d834ab5be8e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.55.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:b5:aa:36:04:9a:e4:cb:82:06:35:74:b8:e5:3f:8c:7a:48:
         63:e5:83:38:e5:ad:5a:29:16:b8:5d:aa:92:7e:50:13:37:d4:
         1e:83:75:45:6b:c2:12:a1:ce:db:f8:73:8f:c0:68:d2:e1:90:
         95:12:e3:96:d0:f0:82:ce:91:e5:a6:03:e6:3c:6e:f7:45:59:
         4a:1f:c6:a4:b9:be:ae:0b:64:08:f9:cf:7a:36:00:57:ab:4b:
         f5:9c:5a:23:f5:9a:78:5e:36:84:9d:bc:83:90:9a:45:82:bb:
         c4:c4:ca:4d:25:18:3e:f6:c6:ee:c8:a9:c9:f6:04:39:d1:75:
         79:e2:9f:fd:51:3a:6b:0e:cc:e2:81:f3:75:64:ec:b1:6b:ec:
         33:71:75:e7:45:0d:5e:a3:b7:8b:e9:aa:21:52:a5:45:5c:a8:
         7a:d2:b3:a0:ca:a2:ec:e6:07:31:c6:28:0e:37:89:12:f1:29:
         c6:35:f1:c3:65:63:1c:1b:ca:7f:45:03:29:3d:b5:65:de:f4:
         2b:f4:c7:57:25:fa:18:d3:08:3b:14:8d:27:82:9c:a0:d0:e2:
         9e:13:05:87:9c:e1:99:b3:f2:5d:6f:f9:1d:78:60:69:62:88:
         b8:f6:12:3c:49:ae:85:6e:23:48:9d:92:0d:f2:7f:29:4d:43:
         96:86:35:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:55:05 2026 by rpki-client