Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b6f26370-f606-3b99-a66c-c37d74d34095.roa
File:                     b6f26370-f606-3b99-a66c-c37d74d34095.roa (raw, json)
Hash identifier:          trlskcl1FoOCu81V2xKj8CgdaTBh+vpdrXyciRefzlI=
Subject key identifier:   B0:4C:BA:54:D8:82:4D:8A:68:8A:1D:81:F1:95:66:35:3C:90:AC:2E
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584D202CB435B0FA249A2EAC07C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b6f26370-f606-3b99-a66c-c37d74d34095.roa
Signing time:             Tue 10 Mar 2026 20:37:31 +0000
ROA not before:           Tue 10 Mar 2026 20:37:31 +0000
ROA not after:            Mon 08 Jun 2026 20:37:31 +0000
asID:                     7029
IP address blocks:        173.188.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:2c:b4:35:b0:fa:24:9a:2e:ac:07:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 10 20:37:31 2026 GMT
            Not After : Jun  8 20:37:31 2026 GMT
        Subject: CN=064f71de-134a-4920-bb1c-c19b47f29f39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ca:bc:32:61:ea:52:41:31:3b:90:1f:6b:50:
                    e1:80:25:28:2e:18:d5:8d:95:1e:5b:34:f6:ae:a1:
                    db:e8:51:d5:12:2f:14:2c:15:82:5a:1a:2b:b2:9b:
                    ff:24:a5:be:48:3e:c0:f1:46:3b:a6:2d:3e:49:2b:
                    c9:40:49:8e:e0:5e:47:8e:2d:7d:21:83:45:4e:0e:
                    45:01:11:ba:d1:0c:e1:7c:5c:ae:1c:61:f4:d8:ae:
                    2f:3e:d1:e2:87:e6:8b:bb:4a:e7:48:35:9f:6e:47:
                    c9:98:00:1f:06:40:19:de:7d:c2:8b:90:05:f8:1d:
                    c4:40:fb:8f:cc:b9:b1:79:dc:a3:f7:94:86:b1:e1:
                    24:f1:ef:4c:5f:68:e0:ad:2f:35:2e:e2:e0:88:4a:
                    41:40:32:01:3f:5d:ad:06:c5:8c:47:8a:fb:35:9b:
                    e9:9e:40:16:1e:3e:55:a7:65:f2:7d:cd:d0:81:57:
                    71:8e:70:39:3e:d8:28:32:5c:24:67:71:93:ce:64:
                    ed:d8:a1:74:28:15:d3:0e:4a:cd:14:44:2d:31:9e:
                    71:fa:bd:4b:35:52:22:8c:48:ee:e7:b2:57:cd:c4:
                    94:26:37:17:11:49:ee:f3:d3:d1:27:36:be:45:15:
                    52:ed:95:ac:b4:93:73:90:9c:b4:87:cf:d6:08:c7:
                    03:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:4C:BA:54:D8:82:4D:8A:68:8A:1D:81:F1:95:66:35:3C:90:AC:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b6f26370-f606-3b99-a66c-c37d74d34095.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.188.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:77:aa:9c:b0:c3:09:ad:15:24:23:81:2a:10:75:e9:d7:5f:
         07:5c:09:96:3a:9d:d5:02:2e:f8:26:a2:d5:7f:19:d3:17:29:
         7b:fc:6a:bb:e3:54:fd:af:24:a9:27:c9:46:7b:3f:38:a4:10:
         73:53:90:ca:72:10:3d:44:b7:e1:ac:61:93:43:ca:ac:94:94:
         28:0c:85:fe:04:66:86:ab:1c:81:63:f3:70:e6:35:d8:d7:da:
         e9:9c:33:8b:09:91:45:28:4a:ea:5e:65:ac:2b:3c:12:45:e6:
         1d:55:6e:52:43:22:d9:68:a8:68:5a:ad:cb:87:74:bb:ef:3a:
         ba:13:90:ab:8a:8a:6e:6c:a2:71:6c:7f:4c:ba:91:d6:97:f1:
         93:5b:08:d0:21:ac:07:32:2a:9b:96:08:47:df:33:f8:93:90:
         7f:87:ba:a8:24:5e:ee:ee:fb:cc:b9:bc:6f:7d:83:0f:06:7a:
         c6:a5:14:4f:a6:17:05:d9:55:f5:75:3b:3b:50:b2:b2:6b:b1:
         af:cd:96:7f:2e:2b:1e:46:57:39:46:79:6a:34:85:bc:d1:ec:
         f4:db:e0:b4:b2:80:fa:22:61:14:ef:3d:44:f9:7d:14:dd:f3:
         70:c3:52:0c:e3:38:0f:a9:dc:06:46:16:07:5d:6e:9f:fb:b8:
         d2:e4:d6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:53:09 2026 by rpki-client