Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/50ca076d-14f0-31c5-847b-739dec6c1a02.roa
File:                     50ca076d-14f0-31c5-847b-739dec6c1a02.roa (raw, json)
Hash identifier:          l/9XUCwdNpGS1gL0OkVTWYUzYUZwmBoPln2KonhWUrI=
Subject key identifier:   4A:C9:B4:1B:73:26:A4:B8:0B:CB:1A:23:A9:87:3D:D2:6F:0F:E5:06
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584F549D77569E7F83FD8CC5AFC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/50ca076d-14f0-31c5-847b-739dec6c1a02.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     7029
IP address blocks:        173.189.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:77:56:9e:7f:83:fd:8c:c5:af:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=f72e84d2-2253-44b0-926a-bfcb1df2f6d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:92:cf:12:b6:b9:4d:8b:66:d6:10:77:c6:da:
                    d4:6e:dc:0e:4c:14:f2:f6:21:84:69:9d:6f:4f:f0:
                    9d:92:45:88:78:87:f3:5f:44:8f:6b:2a:b6:de:55:
                    42:ec:eb:79:66:2e:b1:96:e0:5b:1f:73:a2:97:ea:
                    9e:24:3f:8b:b5:98:53:25:92:1c:4f:bd:57:2d:53:
                    67:4f:6f:19:a2:a1:10:b5:25:80:42:c1:2d:01:ef:
                    3d:60:04:45:92:78:20:77:17:84:4d:b3:89:37:d6:
                    c5:33:7c:97:68:14:a8:35:cb:83:26:f6:64:b1:28:
                    c3:3b:82:83:36:4d:fa:08:f2:fa:5c:e4:ed:b0:a7:
                    b8:98:a8:17:b6:df:c7:bf:5b:e4:ff:a4:67:5b:91:
                    de:d1:8e:26:e4:4c:39:6e:0a:a3:aa:84:4c:71:05:
                    dd:94:e3:cc:6f:f2:ca:7a:cd:1b:a8:53:74:46:64:
                    3e:5d:40:0f:a8:44:31:fb:fc:71:e1:1e:f9:8c:65:
                    17:0a:1b:ea:98:d7:ca:03:1f:2a:e7:c2:45:d5:0f:
                    09:b3:08:48:fd:90:af:af:e5:2f:1b:c3:5e:79:d1:
                    dc:af:1b:f6:b2:e8:e3:26:8b:70:0f:55:0b:71:1f:
                    9a:90:15:2e:07:6f:8e:96:20:2f:86:02:36:85:31:
                    1c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C9:B4:1B:73:26:A4:B8:0B:CB:1A:23:A9:87:3D:D2:6F:0F:E5:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/50ca076d-14f0-31c5-847b-739dec6c1a02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.189.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:87:a7:f1:db:02:83:75:a7:81:74:7f:fb:be:63:35:de:3b:
         20:5c:94:54:01:00:36:2b:cb:5d:97:75:9a:78:f6:64:f9:7e:
         d6:9b:37:61:7c:b6:64:27:e7:5c:72:1b:6b:d6:f2:85:30:74:
         e7:13:77:3d:f2:47:73:42:59:36:89:b7:ad:5d:65:54:59:5b:
         de:96:39:48:83:20:03:d7:0a:7d:f4:cf:fc:d8:b4:7c:89:1f:
         29:7f:c6:93:0f:2a:5a:11:4f:db:da:e3:b4:bb:c8:45:51:bd:
         e1:b8:fd:5d:df:90:ce:7d:dc:ae:bc:d2:fd:56:23:83:c2:00:
         36:bb:71:c9:a3:88:5c:d5:83:ed:7d:c4:49:0c:7d:b4:a3:b3:
         e4:da:d3:c3:99:1b:d1:e0:de:8b:17:bd:62:11:7c:2d:90:62:
         c0:ff:b2:e5:49:99:6b:3b:aa:a9:30:d2:cd:4f:da:c8:db:3c:
         f5:9c:90:23:c7:fa:33:48:39:68:6d:28:7e:b6:7e:1a:0b:54:
         da:7b:31:cf:8e:e1:fe:aa:e7:d9:7e:0f:2f:18:78:e3:b0:e5:
         0a:de:d8:8b:69:8f:b4:d3:65:f8:00:ba:4a:68:ce:74:54:e9:
         db:9c:6c:ab:77:61:dc:4f:f2:cf:80:93:8a:78:62:13:95:7c:
         25:34:e2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 20:09:44 2026 by rpki-client