Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e578444d-059d-3e45-b9db-3933326926cf.roa
File:                     e578444d-059d-3e45-b9db-3933326926cf.roa (raw, json)
Hash identifier:          JNEPjpcm4/Y27j4xSbY5WgOtWp+78a45T1w3AzObcI8=
Subject key identifier:   16:E7:0E:2A:21:57:9B:B5:F3:30:A9:BD:6A:EB:0B:5B:E5:64:BE:92
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584E97B50A857AEE36968B08F480
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e578444d-059d-3e45-b9db-3933326926cf.roa
Signing time:             Thu 23 Jul 2026 09:00:11 +0000
ROA not before:           Thu 23 Jul 2026 09:00:11 +0000
ROA not after:            Wed 21 Oct 2026 09:00:11 +0000
asID:                     7029
IP address blocks:        75.89.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:97:b5:0a:85:7a:ee:36:96:8b:08:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 23 09:00:11 2026 GMT
            Not After : Oct 21 09:00:11 2026 GMT
        Subject: CN=5d8d3b00-e140-40e2-ae9c-3af3d0dcd027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:df:11:54:ba:3a:9c:48:0b:41:65:16:d8:ba:
                    16:1d:72:26:d6:82:fb:8b:db:f2:84:e4:47:2f:3a:
                    12:db:f6:7b:7b:ba:64:00:ca:4b:40:ac:3d:b4:a4:
                    4a:23:7a:42:6c:18:45:a6:30:50:e9:84:54:9d:e4:
                    c6:95:76:8e:af:dd:07:c3:25:d2:bb:51:b3:4a:0e:
                    7c:6f:d4:6a:56:45:4c:19:e0:b1:dd:bb:ea:2e:98:
                    c4:7c:68:fe:61:26:ca:ee:1e:7b:32:fb:d5:7b:d9:
                    0e:3e:10:37:78:54:54:27:97:ee:e5:de:69:86:12:
                    ac:92:f9:5b:4d:91:c4:29:24:92:bf:24:fc:c3:09:
                    91:ce:a3:3c:16:2f:ed:aa:9b:ae:54:d5:82:66:d5:
                    87:ff:32:83:40:1d:80:98:7b:1c:2b:2a:cb:c7:6b:
                    53:5d:ea:2b:88:9e:00:e1:6b:d5:a2:ad:e7:1b:20:
                    82:0a:df:ec:83:73:08:fd:24:fc:a8:46:54:e4:f0:
                    35:55:55:ab:f3:f1:c1:f9:51:3d:f4:6a:ac:ef:4f:
                    64:10:03:b9:6d:bb:55:00:ab:fa:2c:82:1f:50:9b:
                    99:db:05:27:14:a9:92:8e:c9:ae:b9:85:c5:3d:02:
                    44:4d:8d:36:60:bb:99:fe:c7:62:73:15:ad:ac:50:
                    2f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E7:0E:2A:21:57:9B:B5:F3:30:A9:BD:6A:EB:0B:5B:E5:64:BE:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e578444d-059d-3e45-b9db-3933326926cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.89.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:9f:16:28:1c:4b:6c:4e:21:c7:14:ad:7f:80:2a:0b:27:9d:
         f8:df:cc:0e:94:03:55:d2:be:ce:09:2a:a2:c8:d9:bd:a8:a4:
         8a:77:0e:2c:ea:f4:0f:46:5c:ab:57:e3:5d:c8:09:c4:13:06:
         5b:13:f8:8e:e6:5a:9f:99:77:2f:73:e3:f1:4b:01:eb:f2:20:
         fc:bf:ec:ec:ed:52:27:35:a0:ea:8c:d5:4d:f3:72:f0:b1:85:
         2d:8a:14:eb:3f:3d:fe:1d:99:6a:fc:37:b6:e0:71:5d:93:5f:
         ba:7b:06:5e:17:91:b5:10:a1:c8:8d:a9:0a:0c:9a:dc:6a:3e:
         aa:ed:e1:aa:63:d9:cc:a2:11:39:07:b8:d7:df:93:ba:8c:b2:
         d3:24:93:b9:3f:40:b7:1f:b0:26:49:74:2e:23:c8:ec:01:30:
         ee:40:58:39:a4:28:32:e3:33:00:ae:73:88:88:29:91:04:6b:
         2f:24:6a:00:be:c2:08:0d:76:a4:b0:eb:f2:c3:bd:ca:0b:8e:
         5e:2f:bd:9a:b1:32:c4:7f:0e:6d:ba:9f:10:22:cf:97:1e:f1:
         e5:20:0b:b8:18:2d:ca:35:de:b7:f9:c5:ca:36:f6:7a:f4:59:
         71:33:eb:68:20:09:c1:0c:5f:70:25:72:49:37:41:95:92:f2:
         3d:62:aa:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:14:38 2026 by rpki-client