Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/160603cb-d910-3810-9bc2-45f0922efa41.roa
File:                     160603cb-d910-3810-9bc2-45f0922efa41.roa (raw, json)
Hash identifier:          gSaS186oVTBSNiQakC2GQ59en6BNkU4EyQ5J06lke5Q=
Subject key identifier:   FA:15:EC:EF:BA:8E:1E:A0:39:2D:C1:8F:84:6A:26:68:4E:B2:48:89
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584DCAFB0F760343A2F084CE6500
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/160603cb-d910-3810-9bc2-45f0922efa41.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     7029
IP address blocks:        173.213.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fb:0f:76:03:43:a2:f0:84:ce:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=1d31eb64-98de-4a7f-b356-2cf235c2d51b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b6:5c:ee:bb:4f:41:2e:70:9d:55:2d:62:37:
                    85:8f:25:f6:22:66:63:7e:d8:9c:df:c8:a9:4b:97:
                    27:b8:d3:59:c4:4d:95:ed:be:06:af:8b:3c:8f:d6:
                    bd:23:a1:c1:88:46:f7:f2:da:e3:7f:3d:e2:b7:34:
                    1c:57:90:07:77:3a:19:34:9f:be:51:ca:27:47:b5:
                    b4:49:a4:f7:5d:aa:15:15:25:39:a1:09:53:a2:0c:
                    50:f6:11:13:de:cd:90:be:99:35:6e:a7:6c:11:7d:
                    1e:7a:11:6e:c9:76:75:fd:8e:e0:1d:db:06:b8:d4:
                    aa:a3:ed:e7:94:cc:28:f4:99:09:b7:3f:90:5d:65:
                    39:6e:86:a7:74:03:86:8f:b9:4a:8a:98:46:cb:e8:
                    e0:84:d2:80:72:52:8e:49:06:f2:f9:ea:46:3e:8c:
                    19:c0:c8:86:53:9b:3f:9b:91:6a:3e:c4:15:17:fa:
                    e2:a3:9a:af:3e:9b:38:00:ed:1e:64:46:f6:1a:09:
                    9f:fc:0c:ef:45:51:f1:a8:27:a4:cc:f6:01:68:a6:
                    6c:48:7b:dc:29:9a:35:08:69:c6:be:75:75:ef:bb:
                    26:8d:08:78:e0:05:51:b9:36:b9:67:30:24:2e:d0:
                    c2:9b:1d:2b:ac:9e:92:b6:ce:ad:20:71:d6:78:8b:
                    a9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:15:EC:EF:BA:8E:1E:A0:39:2D:C1:8F:84:6A:26:68:4E:B2:48:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/160603cb-d910-3810-9bc2-45f0922efa41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.213.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:9d:75:c1:f5:c1:80:00:56:2f:d4:80:30:18:26:ed:90:9f:
         2a:27:a9:62:49:7d:54:b8:57:1e:45:d1:ef:9b:3e:0a:2b:e5:
         40:a6:79:19:06:22:91:d3:0d:61:ed:df:74:02:60:3a:7a:f4:
         20:a8:e5:d8:bc:e6:7e:52:8a:b5:69:75:dc:82:d0:4e:20:3f:
         53:ad:51:0e:bb:7f:83:d4:73:1e:2b:a5:76:4c:10:9e:ba:5f:
         83:f4:ee:90:74:08:ec:cb:a8:04:3c:fa:65:c2:a9:be:01:d8:
         03:a9:fb:a7:4c:22:d3:08:44:1c:f4:c7:29:11:35:a9:07:c4:
         df:53:6b:cf:c2:1d:1c:a0:d2:a1:8f:82:57:4a:11:1a:c4:54:
         28:d4:39:75:7d:ea:8c:70:9b:62:5b:e2:a2:b1:a2:49:bc:29:
         38:55:96:54:d1:7f:42:73:7f:2c:d8:71:46:94:f2:98:49:bb:
         7f:ed:79:a9:15:ac:e4:f7:0a:ef:b4:ca:7a:be:b9:55:1d:a1:
         76:6a:f3:96:ac:ed:17:cb:ef:82:86:f3:fc:e3:01:96:42:20:
         92:6c:4e:3b:bc:1e:65:ac:85:43:77:33:a6:0a:e1:ae:23:36:
         56:81:f1:d7:95:af:6b:ed:fe:eb:be:7d:6f:b5:40:96:b3:a1:
         f2:64:ea:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:03:24 2026 by rpki-client