Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9fe2032b-02a1-37ad-a386-655ef1884c8c.roa
File:                     9fe2032b-02a1-37ad-a386-655ef1884c8c.roa (raw, json)
Hash identifier:          A/L0J6e8nDYyY38ans+HL3yjf2HJcZTTUiigwC7qWA0=
Subject key identifier:   F4:49:D3:13:65:BE:98:8B:97:D6:80:66:B7:E7:D2:27:17:3E:2E:92
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584F498621C3E78D33D35C35F580
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9fe2032b-02a1-37ad-a386-655ef1884c8c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7029
IP address blocks:        173.184.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:21:c3:e7:8d:33:d3:5c:35:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=1c7a9ab1-3115-4d4d-a7cb-0ad1ca56fdf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8c:a9:9b:33:2d:5f:6a:f3:a1:6e:be:ce:4f:
                    86:47:96:ca:65:68:3a:96:0a:4c:52:48:3b:44:b0:
                    af:a3:2d:d0:69:34:5d:89:c7:76:f9:86:b1:36:b4:
                    6d:e5:1f:05:59:2e:63:07:9b:a8:98:dd:e4:ec:9f:
                    60:6e:a3:29:49:65:98:82:02:fb:a3:54:e9:64:8f:
                    e8:17:36:1a:3d:ef:8a:6b:2a:73:9c:db:1a:15:aa:
                    f1:69:19:e7:99:43:f2:b5:3c:fa:04:fc:09:42:f6:
                    b6:c9:aa:2d:a4:98:14:6c:1e:eb:18:3b:cd:b2:cd:
                    b6:ca:56:ce:86:67:17:df:98:2c:af:1c:b8:e8:0d:
                    ef:60:5d:e1:52:04:f2:43:68:1c:1f:8d:3e:7c:a3:
                    cd:6e:fe:98:38:77:70:41:03:f5:5a:36:90:6f:c0:
                    90:23:5d:be:e2:e6:7b:eb:c7:11:a1:ec:90:d3:00:
                    d2:16:ca:11:0b:d0:7e:55:9c:fe:9e:38:80:b7:e1:
                    8e:d9:88:d8:78:a5:fe:01:f0:6e:54:77:79:93:58:
                    1d:dd:72:52:ce:af:1d:94:b8:0d:70:ac:60:98:97:
                    e7:c3:99:5f:29:57:e7:44:d1:f4:20:19:41:17:01:
                    5e:24:a2:a1:9e:e1:7f:e7:0d:3b:10:08:42:b6:a9:
                    c6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:49:D3:13:65:BE:98:8B:97:D6:80:66:B7:E7:D2:27:17:3E:2E:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9fe2032b-02a1-37ad-a386-655ef1884c8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.184.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:df:3d:e5:80:19:24:0c:4f:f4:81:2b:d2:09:50:56:68:fb:
         63:35:da:dd:6f:de:62:65:c0:01:8d:97:36:2a:d2:19:79:af:
         7f:82:8b:14:41:d7:ed:a8:57:8d:4b:a4:30:d3:0e:dc:41:85:
         94:4e:61:b9:df:06:6b:0c:6d:e4:7d:00:d3:ac:c7:ff:b5:f8:
         a5:1b:e1:65:f2:18:b7:5b:b2:0a:fd:a5:b4:0b:f1:8f:b8:36:
         23:56:b3:43:9b:99:e9:30:87:b1:94:8d:ec:63:0e:36:28:03:
         13:38:58:81:09:19:05:ee:33:05:bf:9f:0e:d3:99:3b:2a:24:
         a4:59:64:13:5d:99:f5:ce:74:ca:38:ac:f6:fa:8d:ab:d5:7b:
         51:a4:ec:7d:bf:7b:02:da:8d:13:42:0e:57:6d:90:7f:a0:82:
         c4:8a:cd:0d:3b:3a:f7:64:e2:e8:b8:77:64:87:20:bd:3a:a6:
         58:0c:ac:97:5f:14:f5:4d:c2:e2:a6:39:f1:ea:68:95:e7:7a:
         c5:4e:20:ad:97:d7:72:97:b8:a5:64:2e:61:fe:a1:3e:af:09:
         fa:e3:b9:d6:d8:d0:60:c7:20:ab:01:0c:b1:1c:ec:dd:31:af:
         07:71:38:f6:6e:00:aa:9d:ce:e3:e1:f0:32:d8:c9:0e:fc:26:
         d8:a7:d0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 03:23:00 2026 by rpki-client