Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/577a0a1a-9056-3c7c-8071-b736d048f8e8.roa
File:                     577a0a1a-9056-3c7c-8071-b736d048f8e8.roa (raw, json)
Hash identifier:          MCtYSEhT2I1D+TyQ7pmgA3Sb/j4yZumRoCovzIi/rXo=
Subject key identifier:   00:46:23:19:8B:63:A5:8A:8C:48:F7:41:AE:38:32:C0:42:98:96:ED
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584F4972FBDC4DAD25F24CA47840
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/577a0a1a-9056-3c7c-8071-b736d048f8e8.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7029
IP address blocks:        174.130.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:fb:dc:4d:ad:25:f2:4c:a4:78:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=3d9502c9-990f-416f-8a48-7984800c0178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:42:d6:ca:7a:b1:eb:1f:be:c1:65:72:67:dc:
                    87:b5:e9:c1:1a:9a:11:40:2f:8a:83:e2:43:9d:86:
                    15:aa:f1:4c:cf:79:52:e9:db:0a:30:9b:35:a3:fd:
                    ca:60:cc:40:cf:12:21:26:f7:dd:86:83:e8:87:33:
                    0d:24:e9:29:42:e1:65:8c:a9:a7:e1:b8:8f:9f:3b:
                    e0:f6:41:4a:fd:6d:1f:57:7b:fd:a9:b0:a7:c1:4a:
                    f6:b0:5c:0f:0c:16:c9:19:43:82:74:9a:64:19:26:
                    30:02:f6:52:d1:e9:9c:19:9d:ef:e7:73:18:55:c2:
                    0c:42:e1:2d:93:0f:9f:03:b1:a4:90:64:9e:21:ee:
                    30:dc:91:90:f8:a4:ab:2a:6e:79:0f:ae:ec:44:d5:
                    cb:b4:77:3b:36:75:44:39:be:85:52:7e:37:0a:74:
                    af:3e:0f:65:2e:23:a7:5e:a4:25:aa:e9:db:44:53:
                    6a:38:41:6a:c8:6c:7a:79:65:3d:c3:e1:cd:c9:43:
                    e0:00:ef:b2:5d:16:65:92:18:b9:72:83:12:5d:88:
                    4d:26:6a:8a:21:d0:36:46:43:a5:fe:4c:a1:39:75:
                    ab:43:b4:61:c2:ac:76:f6:06:d8:05:9d:ad:56:bd:
                    56:f3:93:c1:fc:5a:e8:19:27:e9:d2:80:86:00:c0:
                    7b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:46:23:19:8B:63:A5:8A:8C:48:F7:41:AE:38:32:C0:42:98:96:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/577a0a1a-9056-3c7c-8071-b736d048f8e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.130.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:58:10:50:af:82:02:3b:cc:e2:fe:d3:b7:e1:06:98:d8:3c:
         15:02:bb:08:79:d1:e3:9f:31:38:17:cf:bf:29:7f:7f:f3:d0:
         3f:89:a6:61:35:d1:6b:ba:aa:2c:63:9f:9e:10:c1:47:71:d8:
         aa:89:eb:49:94:81:c4:f2:b6:7e:9a:41:36:aa:87:63:27:96:
         28:e4:00:c6:06:d5:65:e7:a2:50:07:63:7e:c6:8c:a0:8d:17:
         2d:97:a2:3e:86:af:39:49:56:99:09:a3:27:b1:d7:1d:80:5c:
         ce:b8:ce:59:48:5d:30:1c:38:c1:69:03:57:82:89:63:8c:e8:
         7a:fa:96:1b:cb:31:e0:59:2f:1f:14:ad:46:c8:93:d5:bc:d2:
         86:e5:8d:60:f9:de:e6:a4:d3:0a:4d:15:ac:d9:7d:75:f7:05:
         45:a2:94:b1:ff:9d:ca:e3:7b:65:cb:72:4f:b4:7c:b5:d0:28:
         6c:84:5e:47:40:ad:b1:d7:1d:8f:6b:57:f6:59:44:6d:db:29:
         d1:76:a8:bb:31:7e:19:d6:c0:47:ee:91:89:21:8a:5a:63:25:
         ed:0f:3f:ac:75:89:fe:af:97:6b:fe:32:4c:cc:88:f3:cb:d7:
         9f:3a:f2:25:99:ab:25:50:40:a2:9f:7e:d9:8a:86:98:28:03:
         01:ab:d9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:59:24 2026 by rpki-client