Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b5d48c6-351c-3660-9ca3-dee164df588d.roa
File:                     3b5d48c6-351c-3660-9ca3-dee164df588d.roa (raw, json)
Hash identifier:          /f2SAtNi8m3kxgjMUNKvpJaLDGF6SexrUteP77RjYXk=
Subject key identifier:   43:BD:CF:DA:65:AB:53:39:EA:3E:B2:D7:1D:B3:E8:B3:01:97:1D:1D
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584E35FF17AA6E5603BFC2048E80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b5d48c6-351c-3660-9ca3-dee164df588d.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     7029
IP address blocks:        50.96.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:17:aa:6e:56:03:bf:c2:04:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=315335c3-9d29-445a-b226-4fc49af1ba4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ed:83:74:b1:4d:41:da:9b:da:bb:8a:7b:10:
                    33:66:09:a7:50:24:29:12:55:1e:39:4f:09:2f:61:
                    cf:5b:4f:67:27:0e:fa:22:16:bd:ac:07:37:e6:09:
                    70:35:64:6a:ca:de:b2:20:d2:fa:a3:47:ab:51:f1:
                    46:c0:67:a9:0d:59:9a:9e:61:8b:11:a0:99:16:07:
                    57:d9:09:a4:d0:be:1c:78:26:a3:15:0c:2c:fc:87:
                    d0:74:12:6a:ca:aa:5e:a5:66:c0:c9:ba:9b:7f:39:
                    3a:f1:0a:86:57:4c:e9:35:b5:fc:9b:31:9e:62:a8:
                    9f:de:3e:90:71:48:3c:1a:eb:4c:6c:04:0c:11:d1:
                    cf:f4:bb:a6:dd:1d:88:7f:87:6a:7d:3c:be:5a:ed:
                    1d:90:84:5a:38:c2:7e:b9:82:7f:99:cc:f6:f6:d0:
                    62:f3:49:fa:0a:72:3d:e4:20:00:04:f7:5a:13:92:
                    e9:95:ec:8a:8a:e5:68:66:65:50:0f:86:53:68:a3:
                    a3:f1:0d:d0:c8:cb:c6:0c:c0:a7:ef:e6:9f:32:11:
                    de:de:02:7c:18:49:40:ea:3e:d0:3f:d0:1e:3b:59:
                    38:4f:9b:36:71:5a:12:28:cb:54:b7:4d:06:4a:9a:
                    53:f2:02:1e:61:2a:56:02:e4:86:07:86:44:10:52:
                    7f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:BD:CF:DA:65:AB:53:39:EA:3E:B2:D7:1D:B3:E8:B3:01:97:1D:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b5d48c6-351c-3660-9ca3-dee164df588d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.96.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:b2:78:77:cb:5e:44:9c:d2:32:3c:f3:57:54:6d:05:f3:9f:
         e2:41:dd:d6:9a:71:bc:2c:5e:d9:e8:02:71:b2:22:5a:15:6f:
         7f:e0:15:b3:0f:00:28:18:e3:ea:7e:88:a1:e6:27:3d:4b:40:
         44:a6:ba:b4:0b:33:ba:e5:c2:db:52:6a:26:63:58:79:0d:f8:
         31:85:47:8d:4b:6c:ce:5a:64:b3:80:67:f6:de:78:6f:b2:41:
         cd:10:65:38:92:0a:db:f4:b3:cf:6b:08:2e:55:54:85:66:0b:
         16:85:38:f9:01:c9:c6:b4:49:56:0e:aa:da:b5:e3:51:68:5f:
         f5:ba:bf:ff:cf:fa:9e:c4:26:38:8c:ef:c9:d7:3a:d0:67:d9:
         8d:e0:ef:31:39:88:78:7c:4a:ed:de:a3:91:ef:5a:85:67:32:
         e3:b9:e2:e0:20:49:be:6d:ac:65:32:8d:ec:d7:32:c9:04:25:
         c9:d4:23:56:b2:58:a2:3b:17:ef:ae:b9:15:07:8f:25:16:a5:
         44:3b:10:9e:f2:00:38:47:a3:a4:73:33:02:fc:2a:42:86:a4:
         75:c6:ec:71:5e:d8:53:f1:1b:b2:71:6f:53:73:d6:76:67:91:
         67:5d:7e:0b:55:b4:34:47:04:89:2a:d8:d5:fd:ad:e5:87:75:
         97:81:b2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 05:52:29 2026 by rpki-client