Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5356367-625f-35f1-a378-86cbb89c2343.roa
File:                     b5356367-625f-35f1-a378-86cbb89c2343.roa (raw, json)
Hash identifier:          k3Petsbsn21eYptldRr7KRvBDDLTvX9yFbHGGiHKN+M=
Subject key identifier:   70:A9:F5:30:37:AB:91:19:06:52:B8:B8:9B:32:BD:02:04:39:99:74
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584E0D842BC2E17F84E0B61DBB80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5356367-625f-35f1-a378-86cbb89c2343.roa
Signing time:             Wed 03 Jun 2026 21:00:12 +0000
ROA not before:           Wed 03 Jun 2026 21:00:12 +0000
ROA not after:            Tue 01 Sep 2026 21:00:12 +0000
asID:                     7029
IP address blocks:        173.188.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0d:84:2b:c2:e1:7f:84:e0:b6:1d:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jun  3 21:00:12 2026 GMT
            Not After : Sep  1 21:00:12 2026 GMT
        Subject: CN=9e887b09-9c8d-472b-b2fc-37ac12050853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a6:8f:b4:5b:b7:1f:e4:d1:20:d3:a4:95:a5:
                    1f:49:a1:95:5a:cc:64:64:2e:79:30:35:95:f8:df:
                    5e:53:76:89:47:18:9b:7b:1e:f8:bd:75:bb:f4:42:
                    51:08:66:6c:16:ab:07:1d:c2:73:53:2f:b7:c4:d7:
                    45:d3:4f:56:54:bb:21:44:a9:c8:34:56:b6:7f:4b:
                    f7:cf:a9:80:fc:5a:85:82:ec:7e:81:d6:76:71:d9:
                    d2:e4:28:57:1e:12:1f:e1:47:9d:7c:a9:19:2f:ba:
                    ad:2b:a7:f1:0a:09:3f:b1:d9:44:33:a8:be:26:ef:
                    88:f3:95:34:a5:12:5d:cb:93:01:27:63:7b:68:7b:
                    85:21:11:4f:3c:6c:9f:b9:13:3e:29:ab:3c:95:7f:
                    0d:90:00:02:87:42:47:d6:1b:64:a9:ee:b7:ca:14:
                    98:b1:43:6b:7b:6b:55:17:78:5f:0c:45:bc:cc:0a:
                    55:21:5b:ce:00:51:f8:5a:83:28:34:0a:17:68:41:
                    df:fe:a8:e4:4a:b0:4d:8d:d9:fe:97:20:97:c3:c3:
                    ed:80:a5:68:f6:79:4c:9f:f9:f5:b3:18:70:ae:7f:
                    a6:63:2e:51:5d:3a:0b:da:cc:af:fb:74:62:ce:49:
                    7b:b7:c0:8f:11:0a:d5:32:ee:48:c4:3c:bb:21:f3:
                    26:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A9:F5:30:37:AB:91:19:06:52:B8:B8:9B:32:BD:02:04:39:99:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5356367-625f-35f1-a378-86cbb89c2343.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.188.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:e1:9b:87:8c:2e:db:13:1f:c2:3c:20:d8:bd:88:06:89:1e:
         a6:9f:87:73:26:8f:69:8f:58:2a:d2:f4:42:1b:0a:c0:5a:87:
         85:c0:43:05:fd:38:51:c5:5c:f3:1e:36:f5:b3:28:a3:f7:f6:
         a0:91:c0:c5:1d:45:a3:82:e9:da:3d:46:04:4f:4e:5e:c5:b7:
         64:fc:66:67:50:06:87:bb:ee:b4:de:ab:55:bd:e0:f5:cc:0a:
         0e:c3:33:39:59:cc:f0:55:e2:d1:16:b1:ca:63:98:25:79:82:
         9d:10:e1:02:b1:dc:34:70:c1:06:6d:73:24:14:19:a9:89:d0:
         81:94:14:e3:bc:f7:c0:7e:2f:f6:ef:5b:b6:87:13:b4:04:8d:
         63:1e:a6:80:be:31:a9:f9:13:db:db:f2:90:c9:ea:c1:07:ff:
         9d:9e:93:fc:d0:cf:a2:46:55:da:69:2d:20:df:7a:95:4b:15:
         8e:f6:dd:70:72:8c:a4:8b:fa:e7:8c:7c:b7:16:cb:64:3a:8f:
         ea:da:88:16:91:59:ce:d4:9f:c3:26:e2:7f:f2:1a:28:fe:a0:
         f0:8b:32:f0:eb:34:78:6f:7c:60:16:26:4c:81:3a:87:08:d4:
         81:7f:48:ac:89:e1:bf:54:89:d4:f9:dc:ba:9d:a4:44:5f:59:
         d9:40:4f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:26:10 2026 by rpki-client