Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9323e432-6c47-328e-8f1b-236882d52de6.roa
File:                     9323e432-6c47-328e-8f1b-236882d52de6.roa (raw, json)
Hash identifier:          KOx+gHSUibN7Mif1pUH8SfgxRECv/TCgQ7GLILC+a58=
Subject key identifier:   73:60:3D:96:28:57:10:9A:AD:5D:A5:C8:92:23:87:FF:FE:D4:FE:23
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584F506D4A590D2C03B5CC132260
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9323e432-6c47-328e-8f1b-236882d52de6.roa
Signing time:             Sun 27 Sep 2026 13:00:12 +0000
ROA not before:           Sun 27 Sep 2026 13:00:12 +0000
ROA not after:            Sat 26 Dec 2026 14:00:12 +0000
asID:                     7029
IP address blocks:        75.90.50.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:50:6d:4a:59:0d:2c:03:b5:cc:13:22:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Sep 27 13:00:12 2026 GMT
            Not After : Dec 26 14:00:12 2026 GMT
        Subject: CN=5f0b0bd9-26a9-4dec-aaa7-e0c051c548db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8c:a2:c5:06:e5:13:d3:45:a9:d3:7e:c3:b8:
                    ac:ce:8b:cc:9e:b8:bd:64:93:6c:0f:0a:4b:b0:6b:
                    cd:f3:62:54:bf:ca:10:76:78:62:13:9e:13:df:72:
                    07:b8:c9:f4:68:f1:a0:07:fa:e3:0c:d3:bb:6d:6d:
                    f1:a7:7e:17:30:f9:f0:95:e7:f8:38:5b:e6:14:d8:
                    ef:72:ae:ba:4d:36:45:0d:6e:33:55:30:79:ba:b9:
                    19:99:ac:29:6f:52:48:1e:3f:37:9e:11:82:c2:03:
                    27:69:10:8d:b5:f3:65:89:ad:02:0b:6c:a9:6d:ad:
                    8e:8f:60:2e:f8:52:ae:0f:94:16:97:02:c4:57:a0:
                    be:e9:5b:ac:1f:7b:73:48:e4:3b:0b:69:e8:75:db:
                    a6:3f:39:3f:19:2e:f1:fb:c9:6d:03:ad:8c:a6:5c:
                    8c:13:53:a7:c8:d2:89:99:36:fa:27:88:58:08:c9:
                    db:c1:f3:a2:6f:07:19:9d:22:ed:d9:64:ee:df:c9:
                    0f:87:c5:cd:99:13:bc:24:25:b2:08:33:1e:db:d4:
                    f6:ae:46:20:75:02:d4:f1:f6:51:3e:62:50:aa:83:
                    c8:5f:a5:80:44:cb:7d:1c:7b:db:c7:55:3b:ee:43:
                    6a:91:b8:cc:be:13:0b:be:48:b1:fb:b1:44:47:d6:
                    e9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:60:3D:96:28:57:10:9A:AD:5D:A5:C8:92:23:87:FF:FE:D4:FE:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9323e432-6c47-328e-8f1b-236882d52de6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.90.50.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:c3:4a:6e:ad:29:ae:6b:87:ea:aa:7f:ae:e2:0e:bb:e2:f2:
         57:19:6f:13:f9:cf:47:57:df:8a:58:f7:57:64:98:e0:73:51:
         9a:eb:49:15:2d:d1:01:e8:b5:f1:67:f7:0b:68:8c:54:0c:2d:
         ef:64:72:2c:bf:7a:0c:03:ac:60:1e:77:c6:a4:4a:f9:f4:bc:
         81:b0:72:3e:5e:cd:e0:ce:dc:72:84:94:a0:67:b6:2a:ec:a4:
         3e:29:b9:4d:74:dd:d9:eb:7a:47:a9:95:39:6f:b9:9f:2a:71:
         97:6e:4c:ea:24:38:47:1f:85:bf:81:be:66:b6:fb:4c:04:af:
         f6:33:df:55:2e:62:c9:7f:b5:b3:e1:e8:e7:4d:2b:16:38:81:
         55:1d:66:37:73:41:5b:4b:17:97:aa:9b:33:47:5d:59:c2:b4:
         a1:13:24:0e:53:86:a7:bb:ec:f1:2d:58:62:86:f7:82:f6:e5:
         d7:61:3f:65:6b:7e:f5:7d:5a:04:a0:8d:94:77:ea:c4:81:b9:
         e7:5b:aa:30:be:31:2a:c3:aa:61:f1:73:b6:31:a3:21:9d:43:
         ac:a6:b6:9f:43:4b:88:cf:bb:ac:97:60:a6:62:57:93:cc:01:
         ef:fc:4d:d5:79:d4:59:a6:8a:b6:42:45:1e:05:2a:b6:9e:f3:
         df:23:ae:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:54:42 2026 by rpki-client