Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/90bb4e83-7ef6-34ad-aa8a-f1fa4972363c.roa
File:                     90bb4e83-7ef6-34ad-aa8a-f1fa4972363c.roa (raw, json)
Hash identifier:          oLNQphLWUxDnKF35cop1opqDzWhl+S22dqUVGh9w8qw=
Subject key identifier:   C5:28:28:69:0B:D8:FE:AF:FC:60:B2:25:E4:27:91:D4:DD:87:FE:A8
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584E104EF95908863B903EB5F300
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/90bb4e83-7ef6-34ad-aa8a-f1fa4972363c.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     7029
IP address blocks:        173.186.244.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4e:f9:59:08:86:3b:90:3e:b5:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=f1f335dc-31c6-4f03-aa8f-255e4a803656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f9:4b:b4:94:6e:69:60:3f:90:8f:34:73:02:
                    ac:0e:6a:95:6a:25:25:4e:93:a0:35:46:2b:ae:6a:
                    13:1d:f6:54:12:1c:d4:56:1f:61:6a:d4:b9:5c:d4:
                    4a:21:11:09:27:29:27:04:0c:0c:fe:ae:21:33:3b:
                    22:24:c5:17:a4:a4:c8:5f:23:40:f2:a8:61:ec:87:
                    94:d7:25:48:30:bd:e2:74:e6:42:e2:9d:de:46:26:
                    5a:21:31:29:b0:d0:8f:71:19:42:ab:54:c3:4a:fb:
                    aa:53:ee:9b:40:e7:59:46:1b:69:d7:5b:37:35:db:
                    6d:a9:82:a3:5e:69:32:58:0b:b4:d4:bc:c0:a4:e0:
                    a5:5b:a1:f6:ab:01:a3:94:a8:55:68:bc:f4:3b:6a:
                    24:59:7c:4e:a2:71:c0:83:12:9a:5a:56:c6:74:87:
                    1c:6b:3b:b4:3d:4b:78:14:c1:36:dc:ec:1e:d6:86:
                    ec:a8:15:55:41:50:3e:3f:38:ef:b1:ce:4a:1e:53:
                    6b:c2:11:31:a9:22:58:96:94:ee:24:a9:fd:96:04:
                    47:4f:1e:de:68:10:d9:cc:18:f3:b9:0f:6c:46:5d:
                    1f:96:60:f7:a9:ad:a9:a2:71:25:bf:77:37:f8:8d:
                    a3:00:74:f5:52:be:f9:20:77:12:a8:23:bd:82:eb:
                    ce:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:28:28:69:0B:D8:FE:AF:FC:60:B2:25:E4:27:91:D4:DD:87:FE:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/90bb4e83-7ef6-34ad-aa8a-f1fa4972363c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.186.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:4e:66:f2:9b:81:a5:d5:20:94:6c:2d:74:a7:f3:7c:d8:8c:
         9d:6b:94:e7:32:d5:00:07:f5:fd:b0:52:5f:8a:15:59:49:fe:
         aa:a6:92:57:87:3c:0b:a3:e8:9e:93:7e:89:5b:13:b1:8a:21:
         b4:da:90:6f:2b:bc:fb:9a:26:88:ee:78:e6:61:fa:a1:76:56:
         fe:39:b0:da:7b:ba:a5:c5:30:dd:8a:f3:aa:e3:cf:88:a5:1a:
         0a:2c:c7:d7:16:98:1b:5e:d5:87:9b:b5:1e:61:8f:c1:60:26:
         18:a6:1f:71:e4:14:8e:b9:3c:44:b4:12:8c:18:93:4f:0f:3e:
         8a:2f:08:7a:35:91:da:c9:91:a2:86:3e:50:32:3a:82:a1:5c:
         3a:fb:0e:10:61:77:28:85:b8:eb:04:bb:ac:c9:0d:91:51:dd:
         d0:c0:a9:d5:13:57:f1:12:3b:04:da:25:9d:da:e7:4d:4e:33:
         1d:75:2a:ee:cd:84:6a:39:67:1f:72:14:05:3d:df:0b:f4:9d:
         33:c0:fe:27:9a:bf:fb:ce:9d:43:96:ca:1c:48:77:83:12:59:
         f4:d9:11:60:b5:8e:5b:15:e8:d1:0d:71:22:22:65:33:25:c3:
         c9:5f:31:db:8c:94:cb:1e:17:85:f5:9c:8d:5d:cc:91:74:99:
         3d:c6:75:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:23:51 2026 by rpki-client