Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2405e16-c99d-31e3-9565-9a6a7df814ed.roa
File:                     a2405e16-c99d-31e3-9565-9a6a7df814ed.roa (raw, json)
Hash identifier:          IhFXWe/bUTWcCWTDDuIbC0lOIZZPpOcfq9eqDcheD+0=
Subject key identifier:   0C:8D:46:F6:E7:99:F4:0F:36:14:08:C1:ED:B9:18:60:4E:58:38:67
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584EA7873F583AD23CE3CC0ADFC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2405e16-c99d-31e3-9565-9a6a7df814ed.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7029
IP address blocks:        98.20.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:3f:58:3a:d2:3c:e3:cc:0a:df:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=51f7d5d7-e50b-4f41-88a2-efd96f812d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:db:f3:15:c0:8f:c3:38:74:7b:41:5d:5b:fc:
                    1f:29:b3:51:5c:92:00:b8:81:7e:73:57:18:d6:68:
                    10:f6:f0:fb:37:7c:8a:4f:5b:5b:3b:58:cd:b0:da:
                    55:40:c6:52:16:74:11:0e:aa:ce:49:cc:bf:40:7f:
                    77:13:ec:48:a9:19:4d:d4:8c:d8:9a:a5:81:47:83:
                    7f:c0:43:aa:9f:b5:3c:4e:0f:bd:98:54:0e:f3:86:
                    4d:72:20:d0:a5:9b:e6:1e:57:88:08:09:3e:ab:b8:
                    cb:32:0f:b4:c8:af:3f:87:e2:7a:bd:fd:a0:ae:6a:
                    02:2c:96:05:a6:84:f4:f4:d8:d3:6f:65:39:e0:04:
                    8f:04:ba:9f:33:53:b9:79:7b:67:08:21:6c:43:fd:
                    fd:61:e6:87:01:3d:2b:7c:8d:9a:e5:96:f2:9a:0f:
                    c0:f7:31:09:96:c8:44:7d:37:5b:f2:f5:2f:e1:2f:
                    41:ec:fe:38:95:20:16:f3:23:3d:11:94:53:e6:5d:
                    5a:f4:4b:fd:f1:81:f0:10:a2:7a:3d:8a:7a:81:46:
                    62:e9:36:42:bb:72:96:61:e1:e8:f8:10:96:e7:79:
                    34:2a:18:a4:e6:6e:f5:cc:d6:1b:39:3d:44:18:54:
                    fb:66:0d:07:7a:57:0c:b4:d3:98:15:51:fd:e1:01:
                    cb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:8D:46:F6:E7:99:F4:0F:36:14:08:C1:ED:B9:18:60:4E:58:38:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2405e16-c99d-31e3-9565-9a6a7df814ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.20.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:82:c6:27:c6:09:d2:81:65:d4:e8:32:8e:aa:bb:cb:3b:f0:
         84:30:33:aa:5c:18:18:28:82:0a:06:be:81:fa:f7:ca:72:ed:
         7b:6c:5f:d7:a7:35:72:0d:f7:72:a2:77:a2:41:5f:34:12:c0:
         ce:27:28:91:1b:46:26:cc:4e:2d:c2:b3:7e:31:64:01:b4:57:
         61:cc:87:81:5d:b9:40:e1:3b:c9:62:ad:97:40:9c:84:0e:91:
         84:ad:0d:e6:f6:7a:b7:9c:28:61:58:c3:04:5c:2d:97:e8:a9:
         bd:ca:f8:16:3d:28:a6:9e:92:91:79:da:f9:98:d2:e1:05:e5:
         67:f9:47:99:9d:8b:f3:10:f3:73:20:c8:5a:fc:7a:9b:53:20:
         a6:83:63:0b:8b:ba:8e:b9:b8:6a:c6:de:8b:2b:15:84:1a:a1:
         c2:28:1f:17:b3:c1:42:ac:e7:52:c0:dd:56:c2:39:d5:ca:1c:
         d4:a5:21:c9:ba:58:6d:11:bf:12:57:9c:24:d6:b5:86:89:f1:
         22:23:da:cf:e5:93:91:41:a7:24:7b:eb:20:79:b4:92:7c:0c:
         75:89:89:b3:c5:e1:a3:a9:75:30:f3:da:16:4f:96:36:c8:bc:
         ec:55:d0:3c:7a:58:25:b0:68:8b:a3:99:89:3a:c1:27:f5:c9:
         15:72:89:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 11:36:56 2026 by rpki-client