Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b7574509-07d2-3b87-8fb2-24340597ec22.roa
File:                     b7574509-07d2-3b87-8fb2-24340597ec22.roa (raw, json)
Hash identifier:          OvQgPYe1Fl8ItksskDUqoz4gZmM60rAOhl03z2Hyiy8=
Subject key identifier:   6A:19:83:B8:A6:FA:DB:09:30:A6:A1:23:1B:5C:52:EA:3C:D0:67:A8
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584E016B28C02F9F7E7979C85B80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b7574509-07d2-3b87-8fb2-24340597ec22.roa
Signing time:             Sat 30 May 2026 13:00:10 +0000
ROA not before:           Sat 30 May 2026 13:00:10 +0000
ROA not after:            Fri 28 Aug 2026 13:00:10 +0000
asID:                     7029
IP address blocks:        75.88.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:01:6b:28:c0:2f:9f:7e:79:79:c8:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: May 30 13:00:10 2026 GMT
            Not After : Aug 28 13:00:10 2026 GMT
        Subject: CN=19c0340c-0c52-4883-8096-1d8ad75f634f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:55:91:1a:21:d2:e8:1a:5c:58:e5:fa:10:ab:
                    ab:33:b2:e9:51:35:68:88:d9:31:66:4e:49:1c:99:
                    24:ec:75:be:0f:43:55:b9:ac:38:65:e6:86:99:a8:
                    76:ed:63:0b:db:47:a7:7f:65:2f:2c:7c:be:95:3d:
                    32:dc:eb:cc:85:57:b1:b2:66:1c:d5:62:2c:50:4b:
                    a1:a6:75:d0:37:e8:e4:4d:bc:7f:87:ab:c2:ed:a1:
                    e9:4b:f2:3f:67:99:b0:ee:f5:79:81:76:51:2d:bf:
                    54:4b:21:11:25:dc:d3:0f:24:2a:94:64:8b:61:ed:
                    21:f3:19:de:df:dc:d5:ce:dc:2f:a3:ed:c6:b3:01:
                    00:28:e3:3b:bc:1e:8d:c0:5d:21:44:c2:8c:bc:36:
                    2c:9a:9b:18:52:03:13:04:34:2f:69:88:6c:0e:b1:
                    9e:e3:d3:61:6b:a5:ee:93:b7:42:27:1a:d7:53:6a:
                    0f:a1:94:14:94:1c:30:5a:fd:4e:92:0e:c6:68:11:
                    0f:37:d8:75:df:81:26:5d:60:02:ac:2b:91:70:fe:
                    28:10:8a:88:53:b3:23:df:55:0c:21:af:4f:0e:d6:
                    3c:24:df:79:5b:7d:22:43:aa:7c:29:06:bf:ee:48:
                    93:f8:97:33:10:2c:ba:ab:15:72:ef:6a:65:74:85:
                    d8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:19:83:B8:A6:FA:DB:09:30:A6:A1:23:1B:5C:52:EA:3C:D0:67:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b7574509-07d2-3b87-8fb2-24340597ec22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.88.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:29:fd:25:28:52:2b:b2:d9:47:54:a7:5e:99:b1:bb:8f:0d:
         41:e5:e5:5d:9b:e8:cb:9f:e8:70:29:f6:db:af:aa:01:fe:47:
         9d:fe:7c:13:01:73:03:17:a6:6d:d1:51:8d:eb:e3:f5:e1:d4:
         6e:c9:ac:41:2c:fd:9f:35:89:ac:45:bd:55:91:0c:87:2e:df:
         75:92:6f:df:46:fa:b4:f1:bc:08:86:11:85:b9:52:d4:35:7e:
         f6:ea:a7:18:4a:b2:0b:3c:b5:d6:7d:a9:18:1a:36:22:2a:29:
         82:ba:f4:0e:ab:84:fa:76:56:b1:05:d9:0e:02:ac:5b:d2:87:
         08:b8:17:5e:5e:c3:46:9c:49:a7:46:5b:41:67:2d:e0:d4:aa:
         19:c6:cf:af:19:b4:80:df:a9:f5:3e:f2:ed:b7:2a:da:65:82:
         2f:99:38:41:f1:5a:01:cd:c2:6a:91:31:f6:5a:ca:a7:2d:4e:
         87:54:20:20:47:64:2e:83:c0:d9:8a:e3:f3:30:65:37:2a:df:
         71:21:6e:ce:a1:dd:3f:24:74:6d:fc:e4:a6:38:4f:e1:50:4e:
         18:6d:66:1f:f6:33:50:0d:55:0e:2a:be:f2:0b:25:0c:d5:0c:
         29:a0:58:76:dc:78:9e:f8:a2:72:98:b2:ac:f6:91:ed:65:b0:
         7a:af:3f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:40:40 2026 by rpki-client