Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ea66b86-5648-3598-868f-d655bca90280.roa
File:                     0ea66b86-5648-3598-868f-d655bca90280.roa (raw, json)
Hash identifier:          OnD+nXjoG3zEzitaoNLLYblivMGgKQ0FB/Ga1p/510w=
Subject key identifier:   4E:80:6B:EF:69:20:24:D1:6B:5C:19:27:3E:D3:44:BC:83:28:B8:D1
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584E3600D75B45151E312B6D9F00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ea66b86-5648-3598-868f-d655bca90280.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     7029
IP address blocks:        64.24.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:00:d7:5b:45:15:1e:31:2b:6d:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=21432160-509b-4e2e-8b49-330f4e92efb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a4:ad:5b:ae:d5:e0:55:6d:9f:fb:d7:2b:15:
                    a8:a2:94:25:be:9d:1b:38:1d:f2:8e:06:ae:04:93:
                    f6:9d:2e:6b:e6:cf:b8:fd:48:ca:50:56:61:30:cf:
                    84:a7:8d:4e:06:c2:91:49:fd:7d:6c:e0:c0:98:b8:
                    93:ac:d7:b7:84:e3:53:ad:c2:61:69:e5:2f:82:4f:
                    65:0b:19:d2:82:83:6f:d0:40:00:fb:04:04:e6:86:
                    e9:de:23:c8:6e:af:d3:41:43:81:0d:63:4b:7b:45:
                    eb:3e:81:3f:09:55:2a:4b:ee:4d:f8:23:63:7f:42:
                    1f:89:b3:cd:00:1c:07:9f:8a:18:15:a2:31:44:aa:
                    2f:5e:b7:5e:58:2e:f8:6e:b4:22:b3:26:10:27:e0:
                    76:60:26:17:37:24:ca:6b:02:fb:4c:85:28:cc:b3:
                    d5:b9:a3:f3:e4:ad:d2:82:e9:d1:c5:07:0f:5f:48:
                    11:a1:29:87:f7:9a:ab:60:68:a6:b5:e1:65:51:f8:
                    1f:29:ba:13:f5:82:74:6a:bb:0b:f0:65:72:4a:06:
                    bf:60:eb:d0:cf:34:59:81:f3:bb:39:84:af:32:50:
                    01:95:84:ec:08:a0:0a:ef:12:99:fb:eb:7e:46:da:
                    de:b4:b2:a7:9b:17:e6:bc:90:46:cd:f5:bd:9f:82:
                    58:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:80:6B:EF:69:20:24:D1:6B:5C:19:27:3E:D3:44:BC:83:28:B8:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ea66b86-5648-3598-868f-d655bca90280.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.24.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:53:54:86:e0:e6:7a:29:fa:40:53:81:e2:ce:0f:f5:98:cf:
         95:72:df:0c:32:31:4d:4a:ae:fe:bf:b2:80:51:9b:fb:2d:45:
         22:34:27:89:a4:41:31:d9:8a:b2:ee:17:5d:e2:7f:5b:17:50:
         a5:2a:6b:f2:87:f6:36:04:c4:07:66:03:95:4c:60:31:83:5c:
         c3:17:23:40:1a:5d:7f:03:08:a3:ed:6b:1e:f4:d6:1f:9c:e7:
         f2:1f:b1:e5:d7:ed:83:bd:58:0d:00:c7:ee:1c:e8:fc:b8:d4:
         be:84:df:25:b6:5a:c7:4c:90:64:c3:04:92:07:e0:f6:a6:e4:
         0e:f4:df:cc:4a:74:c4:32:9d:68:85:0e:74:a0:64:4e:40:0d:
         ec:0a:f7:4c:fb:51:e5:44:9a:d9:bc:ab:48:3c:f7:79:0f:88:
         df:31:7f:f3:4d:d2:3b:5d:77:8c:b6:1a:28:b0:c4:2c:e1:2e:
         a7:88:da:55:3c:6d:a0:6c:ef:a3:fa:38:36:b6:a5:aa:c4:ae:
         2e:a1:b0:8c:29:21:5b:28:54:ce:90:ec:a8:77:43:5e:b9:b4:
         07:7e:01:61:cf:c1:da:88:a9:85:62:71:b0:1c:76:9d:6b:f0:
         54:ad:ec:6b:61:5f:80:2c:dc:03:08:a2:cb:77:e8:86:b3:1d:
         5a:4a:62:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 05:54:30 2026 by rpki-client