Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2e823ae-4aec-34a0-8195-de7514832f7a.roa
File:                     c2e823ae-4aec-34a0-8195-de7514832f7a.roa (raw, json)
Hash identifier:          un8MKkrrPvkHcMt25jJeoWxM9xrf5HRzuobWwBExuyk=
Subject key identifier:   72:79:5E:37:8E:1B:FF:14:05:FD:C9:A5:01:95:69:A6:72:64:5B:D9
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584DCAFB12A55640038648561B00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2e823ae-4aec-34a0-8195-de7514832f7a.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     7029
IP address blocks:        162.39.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fb:12:a5:56:40:03:86:48:56:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=c2e66d28-86ea-488a-a7b3-aa9db39376db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:15:c3:67:4b:79:3e:58:72:a7:71:4d:be:b4:
                    fe:59:39:07:af:de:6e:7b:23:95:6b:87:99:19:d0:
                    b2:c2:0c:4a:5b:0e:84:65:a3:17:03:c2:99:d0:9b:
                    23:4e:cd:0d:30:e5:05:cb:d3:79:6e:fc:d5:a3:79:
                    bb:3d:5f:a9:42:df:ee:c2:ed:0f:71:7a:2c:50:97:
                    59:32:0b:bf:f5:2f:f0:c5:0d:da:08:bc:bc:e5:4a:
                    3b:ab:a3:cc:b8:8c:c7:fd:c6:29:fc:f2:3d:6b:cc:
                    ee:ed:ed:47:3e:62:b4:60:8c:0a:1e:47:c7:a0:34:
                    4f:3f:11:d6:16:f2:6f:87:06:78:44:b5:11:ef:00:
                    bb:bf:30:7b:c6:db:f1:88:a2:16:88:b8:a7:fe:85:
                    bf:eb:35:32:43:fe:3c:8c:58:37:5f:6a:62:29:d9:
                    36:e0:46:0f:d7:3e:5d:c4:48:b8:6f:9e:17:0d:91:
                    62:d3:2b:5e:16:e2:24:ef:37:69:24:49:da:8a:e5:
                    01:06:4a:42:5e:a4:3b:cf:d2:03:67:ea:62:f9:b9:
                    0c:fb:f8:dc:7b:a4:f2:5a:fd:2a:7e:0b:a1:24:e8:
                    71:65:7f:90:1b:d6:f7:06:41:9f:77:3c:c2:59:35:
                    19:11:17:9b:14:01:6b:cc:31:eb:73:91:b7:94:72:
                    5a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:79:5E:37:8E:1B:FF:14:05:FD:C9:A5:01:95:69:A6:72:64:5B:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2e823ae-4aec-34a0-8195-de7514832f7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.39.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:76:9a:f5:6f:88:b2:01:9e:e6:d6:9e:82:79:01:dd:62:51:
         ae:99:52:07:de:27:8d:01:80:ce:2a:c1:81:c4:cf:0d:ee:47:
         97:61:9f:c3:45:8d:40:d3:2f:32:8d:6f:1a:a7:b6:35:db:18:
         14:9d:bd:b9:fa:32:03:5b:92:5c:44:a5:33:69:1b:76:1b:bc:
         8f:89:02:9b:8a:d3:f1:24:52:b9:ff:fe:46:74:1b:92:f1:61:
         53:d7:3a:0a:d5:f9:53:8b:f9:63:04:a5:37:49:83:be:44:7c:
         3d:85:60:18:d8:92:ca:f6:ce:b6:3d:16:a6:9c:95:a8:f8:59:
         2e:75:24:70:00:8a:da:6d:71:22:eb:6b:ba:4c:9f:cb:f7:72:
         14:84:60:13:86:e2:e1:5b:ed:7d:b1:88:e0:07:51:e5:9b:23:
         7b:6c:3d:e5:a1:9d:ad:a5:e2:84:02:8a:54:cc:8c:01:fd:08:
         be:78:5d:ec:1a:02:d7:d8:22:7f:3f:0f:7f:87:27:a3:3a:87:
         ac:b0:0f:ae:ea:5d:d9:be:c1:62:a6:49:ef:f8:47:b6:68:c5:
         15:76:cd:dc:39:e4:e7:d4:53:a8:d1:ff:30:c1:17:71:23:55:
         f3:76:d3:5f:40:0f:7c:12:45:03:b4:2b:e7:f3:80:25:f2:ed:
         d3:56:05:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:37:19 2026 by rpki-client