Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8ba02ce-03ec-3bcb-ad68-1d27bcb3bb98.roa
File:                     e8ba02ce-03ec-3bcb-ad68-1d27bcb3bb98.roa (raw, json)
Hash identifier:          ZSwb1Gu97qBXemFMXZ/j4dCq64Nfjdemr4f9qR3+tRw=
Subject key identifier:   9E:06:24:D0:31:01:69:E7:97:FF:A9:22:68:FB:E4:EF:5B:0D:7B:60
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584A90A105FD883EAA10759AF280
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8ba02ce-03ec-3bcb-ad68-1d27bcb3bb98.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     12263
IP address blocks:        216.172.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a1:05:fd:88:3e:aa:10:75:9a:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=1f56a9cb-0fe3-4bbc-9202-ae57410aaf26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fa:42:a2:2c:88:01:91:76:b3:94:9a:b9:60:
                    a1:23:70:1b:ad:16:d8:ee:01:f7:0a:d5:3f:4c:4d:
                    10:ca:71:dd:5a:fc:80:24:81:75:9a:8c:01:5f:d3:
                    fa:7b:e2:e9:f6:4b:4e:51:ab:ef:ee:2c:9e:16:7e:
                    14:6c:bc:3b:2f:79:71:6d:3a:de:c3:d7:b1:87:c1:
                    7d:2d:fd:81:31:d8:8e:66:9c:05:7e:a8:30:f9:87:
                    57:f7:5b:08:32:22:23:8d:da:87:b5:c5:97:6d:8c:
                    a0:92:3a:e4:b6:cc:6a:f0:3c:b1:7f:e5:32:93:ce:
                    50:f0:57:18:88:74:70:82:bb:01:2d:5a:42:b4:c5:
                    ca:b4:0f:e2:93:f4:54:2c:b5:d0:10:58:03:d8:03:
                    5e:41:39:7c:4f:89:87:ec:a8:9e:78:80:d0:ce:c7:
                    37:c3:a0:e8:8d:2b:e4:ea:bf:14:6f:29:f8:aa:c3:
                    6c:e7:17:b3:36:d5:ef:46:7f:c1:9b:b1:9a:05:c3:
                    17:4f:a3:d6:21:87:56:6d:19:7f:32:a3:b3:0b:da:
                    cf:81:75:93:51:25:b9:d2:67:1b:e4:3d:c5:83:57:
                    ca:65:6b:03:18:d1:9e:b1:3e:f2:76:c6:26:51:aa:
                    7f:d7:25:49:a7:a1:d9:63:ec:9d:cd:0b:09:fb:10:
                    f4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:06:24:D0:31:01:69:E7:97:FF:A9:22:68:FB:E4:EF:5B:0D:7B:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8ba02ce-03ec-3bcb-ad68-1d27bcb3bb98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.172.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:16:92:a6:25:b5:17:9e:83:ee:33:00:21:15:09:39:c1:bc:
         0a:dd:57:e5:3e:49:ae:1e:c4:ce:7e:66:93:95:42:1d:24:24:
         16:91:ec:4c:fc:0b:4e:08:1a:37:12:cf:ab:97:6b:9b:26:c2:
         70:5b:96:42:8a:21:31:53:61:52:ad:b8:1d:50:a5:60:9e:68:
         51:eb:a0:47:ec:01:6c:a3:f7:e4:ca:c1:26:e5:65:16:4f:19:
         ae:1c:eb:a0:ff:23:f6:38:7b:24:df:65:68:e1:c2:9d:8e:4a:
         22:34:d4:e1:ea:73:69:71:c3:cd:02:77:0d:5d:d0:30:ad:e5:
         c3:40:a1:20:32:03:01:ce:78:99:0d:ff:92:7c:89:92:5b:64:
         ec:37:c7:d5:8b:8b:55:bd:19:83:f6:05:d7:0f:3b:b8:a9:6c:
         d8:a6:78:0d:1b:db:d5:c5:5e:3d:b4:f9:8a:a5:fb:e3:b4:47:
         a2:fd:e6:e1:c1:92:fe:10:f1:b7:af:fb:0e:0f:bb:15:17:b9:
         67:54:9a:50:f6:ee:1f:92:f2:ca:6a:7d:6c:77:b4:37:f9:f0:
         f3:5b:bf:13:31:a0:be:4d:cc:fb:04:a9:14:f4:d2:2e:de:77:
         70:89:79:4b:c1:aa:f5:20:85:0e:65:29:44:7c:4b:7f:dd:c7:
         f0:aa:12:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:13:07 2025 by rpki-client