Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b896e6d2-4c08-3c57-8758-cf1cb06b087b.roa
File:                     b896e6d2-4c08-3c57-8758-cf1cb06b087b.roa (raw, json)
Hash identifier:          wCFyIUvkLF8igKGNZ46+fjQjlJ8jEIPNWdsNYNS2W2Y=
Subject key identifier:   18:BE:EC:00:92:32:26:6B:AC:49:D3:3B:DB:25:74:E4:23:70:2F:4B
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584F07D783A5CA58376FA3DA8F40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b896e6d2-4c08-3c57-8758-cf1cb06b087b.roa
Signing time:             Tue 01 Sep 2026 13:00:21 +0000
ROA not before:           Tue 01 Sep 2026 13:00:21 +0000
ROA not after:            Mon 30 Nov 2026 14:00:21 +0000
asID:                     7029
IP address blocks:        173.185.6.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:07:d7:83:a5:ca:58:37:6f:a3:da:8f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Sep  1 13:00:21 2026 GMT
            Not After : Nov 30 14:00:21 2026 GMT
        Subject: CN=3e0c3231-8db9-4ba3-99c9-1052fde8584a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2c:90:4f:6d:5e:58:a1:05:40:1b:eb:64:c4:
                    ff:1f:b8:08:f6:d4:c4:84:81:60:9d:1c:1c:6c:7a:
                    c3:44:60:36:e9:b3:b3:50:9a:5b:f6:18:5e:1b:82:
                    5f:c7:f4:cd:c5:39:6a:53:99:65:f2:8c:36:47:6f:
                    bf:d2:a8:bb:45:52:75:2a:6c:c9:d0:ac:0f:8f:48:
                    34:45:41:86:f9:92:46:2b:04:a5:5b:2c:02:24:44:
                    1c:24:f4:c4:2a:d6:e4:35:b1:f7:ec:c1:e1:9a:d6:
                    7f:72:41:2d:06:f7:96:60:76:7f:da:e0:94:fd:cc:
                    17:1e:aa:25:fe:e1:5c:e5:62:fa:1f:99:d0:ef:bf:
                    e2:aa:d8:03:90:18:b3:e2:65:c2:c7:01:4a:4a:39:
                    cb:8b:00:5d:5c:e1:16:17:1e:6d:5f:75:03:fa:a9:
                    77:2d:fa:74:70:10:d7:63:d8:7a:3d:da:0c:c6:a3:
                    92:c3:d5:c3:0e:2e:df:6a:d4:cf:56:78:d5:1a:f3:
                    7f:ff:3c:51:78:6d:33:80:95:5b:d5:95:e7:0f:d4:
                    e9:bc:78:1b:34:58:50:d0:c5:5d:cd:c2:fc:14:0f:
                    cb:36:f5:6d:a2:71:7a:c0:dc:c2:21:6b:d4:83:3e:
                    37:77:28:8c:d2:cf:60:5d:d4:63:9f:5b:93:d2:75:
                    4a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:BE:EC:00:92:32:26:6B:AC:49:D3:3B:DB:25:74:E4:23:70:2F:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b896e6d2-4c08-3c57-8758-cf1cb06b087b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.185.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:bc:0d:22:1f:0e:cb:2e:f0:c7:94:51:f8:43:65:99:23:87:
         e1:e1:87:1b:fe:27:d9:de:37:40:c5:47:68:94:ea:5e:e7:71:
         6f:b2:c4:8b:48:c4:52:1d:3a:d3:e1:d6:70:2d:5a:82:d4:6d:
         2c:76:c1:e8:11:88:db:fd:9a:8e:8b:bd:43:04:a6:a2:e8:b3:
         b9:e2:aa:f8:5d:8e:53:7a:be:76:86:55:24:51:d3:64:47:fb:
         2b:9a:ee:bc:08:3f:f8:c0:f2:18:d1:d8:4a:5e:1b:93:ae:08:
         31:21:39:16:93:44:2d:69:fd:90:b2:e1:25:8e:ce:08:7f:96:
         75:ba:03:5b:a9:d1:93:b4:5d:14:0a:99:0f:34:c9:77:f7:86:
         59:78:51:9b:e2:f2:cc:1d:8e:36:89:91:3f:00:ed:7b:53:9f:
         6e:d5:ed:68:fa:45:71:ba:48:21:7b:25:5b:1b:57:0f:24:45:
         08:a1:f5:5c:af:6a:ad:44:9c:e8:8b:95:a0:98:36:61:01:9f:
         19:a8:11:26:7b:fd:3e:54:bc:e5:9c:69:7d:31:d9:17:3a:5a:
         33:a2:43:2b:b4:be:e8:0b:86:6c:d9:2f:f6:de:cc:63:9f:57:
         f4:d5:be:b9:c5:49:60:15:3e:aa:a0:e7:fe:53:ba:80:62:ad:
         62:ba:5e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:50:30 2026 by rpki-client