Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272/b49d1b93-c2b5-3691-86ae-33c7b9f6e6bf.roa
File:                     b49d1b93-c2b5-3691-86ae-33c7b9f6e6bf.roa (raw, json)
Hash identifier:          T3Sh6mgdolBoBqkMd0QT1pRzNd4DtmZEFJR8+Gd7R3A=
Subject key identifier:   E3:59:7C:84:42:27:DF:FC:C5:A8:13:F4:2D:88:51:74:18:A6:20:2B
Certificate issuer:       /CN=7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272
Certificate serial:       010D0C9F4328584D59EA4AC48E42A79C3CD4A580
Authority key identifier: 2A:03:B4:01:A5:51:2C:BF:C3:1B:2E:80:CF:84:43:5F:4A:80:3B:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272/b49d1b93-c2b5-3691-86ae-33c7b9f6e6bf.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     7925
IP address blocks:        129.71.0.0/16 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:4a:c4:8e:42:a7:9c:3c:d4:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=8a4166db-290a-4fd5-ad77-bbe781fe70e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3a:7e:8a:6b:bd:e0:56:6a:a3:c2:76:93:36:
                    83:52:d0:c5:99:a7:8e:6b:60:33:26:91:60:5a:8b:
                    4b:03:db:d8:51:70:e0:51:64:42:72:c0:b3:53:dc:
                    d8:82:8b:5a:93:ee:95:39:19:70:63:86:e2:b1:0c:
                    66:d9:13:d9:e0:1c:fa:a7:4a:6e:b2:f8:38:c1:68:
                    a4:f9:65:45:f3:0c:c0:55:27:14:d2:44:36:2d:9a:
                    36:d1:db:90:62:69:06:e8:3f:45:6e:d9:aa:5c:c5:
                    50:56:0b:9a:8d:56:94:49:52:ae:5c:3b:d7:bc:87:
                    3a:80:39:ab:42:41:34:2f:24:1e:8e:a2:a4:7c:82:
                    41:29:b0:72:8b:d8:24:fb:7c:3a:2f:c9:7a:95:8f:
                    62:6b:7a:51:d7:03:02:4d:82:31:1a:4e:74:89:0b:
                    76:7d:d9:c9:79:48:ef:9b:e6:0f:a0:bb:84:5d:61:
                    b1:51:0d:3b:e4:2c:ba:88:fd:7b:8a:cd:46:57:83:
                    5c:79:28:2c:12:41:40:fe:32:87:61:da:82:14:fc:
                    f8:12:d4:e9:76:9b:1c:8d:22:be:97:fd:29:c3:e4:
                    8b:96:00:38:d4:12:f0:5a:8d:c5:d8:fa:4a:af:74:
                    a5:be:01:16:89:3b:cb:b8:42:8f:e4:44:1a:87:72:
                    7b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:59:7C:84:42:27:DF:FC:C5:A8:13:F4:2D:88:51:74:18:A6:20:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272/b49d1b93-c2b5-3691-86ae-33c7b9f6e6bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272.crl

            X509v3 Authority Key Identifier:
                keyid:2A:03:B4:01:A5:51:2C:BF:C3:1B:2E:80:CF:84:43:5F:4A:80:3B:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.71.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:28:26:34:90:81:85:45:a2:a6:5a:33:e5:d4:6a:29:8f:57:
         c9:3d:24:38:6b:41:54:eb:ac:e4:62:21:e1:08:fe:f7:d7:cf:
         e3:06:aa:38:ab:6c:eb:e6:15:ea:49:e9:63:b7:e4:cb:b9:2e:
         ad:17:b2:e5:42:d4:ae:de:66:4d:66:23:64:25:71:73:66:ca:
         4c:e9:19:f2:2c:54:f3:71:f9:ba:c2:b2:a1:2a:d4:17:ad:5b:
         55:73:a4:7a:c6:08:b6:dc:fe:79:95:c5:f7:9c:78:92:26:34:
         67:52:17:27:63:39:df:d5:2c:c2:17:ca:c3:7f:50:76:ed:fa:
         b4:92:5c:fc:0d:bc:f3:68:2f:ea:82:16:8e:d8:59:5d:9e:d1:
         45:ca:83:b3:f5:d2:85:14:3f:16:cf:2a:e1:ed:2d:9d:09:b6:
         f3:5a:27:62:2e:31:5a:a0:45:25:47:a2:39:18:52:44:6c:eb:
         56:19:cc:c6:ef:77:cd:6b:3f:91:46:ca:ba:26:9d:de:d5:af:
         a3:b0:ed:aa:40:2d:5a:27:43:dc:23:ee:0a:72:b9:c3:9e:dc:
         eb:f8:39:81:ae:26:4f:65:f3:5d:f2:69:e9:0f:9c:55:7d:79:
         47:03:e4:9b:17:62:d9:6c:34:0a:fe:c0:74:4d:24:35:a6:87:
         ba:7a:ef:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 16:29:28 2026 by rpki-client