Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ae8768c6-6fa3-38ea-af43-7ddc906073ac.roa
File:                     ae8768c6-6fa3-38ea-af43-7ddc906073ac.roa (raw, json)
Hash identifier:          psJkA2fzq2mMYpkGJ8/AgDl/WpEzp1F1CELg7lGQhLs=
Subject key identifier:   D6:E5:1F:8D:3E:70:2E:B6:58:16:0B:60:B4:51:0C:F4:D7:46:A3:F8
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584F4AD7DDBFBDA975CE5081D700
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ae8768c6-6fa3-38ea-af43-7ddc906073ac.roa
Signing time:             Fri 25 Sep 2026 13:00:11 +0000
ROA not before:           Fri 25 Sep 2026 13:00:11 +0000
ROA not after:            Thu 24 Dec 2026 14:00:11 +0000
asID:                     7029
IP address blocks:        207.155.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4a:d7:dd:bf:bd:a9:75:ce:50:81:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Sep 25 13:00:11 2026 GMT
            Not After : Dec 24 14:00:11 2026 GMT
        Subject: CN=4f63c6a0-cbd9-4fa7-8c80-6376144f973f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4d:13:24:05:3d:e3:57:5c:cd:44:af:ed:f4:
                    d1:5f:c1:f9:bc:9f:b5:9f:3e:1d:10:ca:fe:c4:41:
                    9d:9a:7a:52:48:fa:06:ec:8c:11:ff:69:ca:55:e2:
                    fb:f7:bb:9a:45:82:0f:d1:b3:20:f9:2b:01:9c:38:
                    13:80:0e:f9:07:62:65:e4:f4:d0:21:0e:a8:44:e4:
                    eb:73:3a:6b:8e:1d:41:94:fd:a4:0f:e1:f8:de:80:
                    d8:ec:f0:3c:17:1c:1f:8e:84:ac:59:1a:96:5e:e6:
                    09:f8:3c:7c:54:f2:f9:60:0e:74:be:7d:79:ff:ff:
                    e4:76:8f:f2:29:38:1c:d7:47:0f:85:de:87:e5:e8:
                    37:0e:22:a3:c3:e2:2e:bd:6f:35:5f:51:ac:04:c0:
                    ee:1c:76:a8:ea:b3:4d:0d:ae:2b:ad:72:ff:46:ec:
                    67:32:e2:6a:46:20:a4:fc:97:5f:aa:24:24:be:41:
                    a8:09:7d:46:c9:6e:bb:4e:ca:5e:17:b2:60:20:ce:
                    de:07:ec:89:90:06:1a:16:b8:f1:e2:39:eb:26:ef:
                    90:c7:29:db:12:87:ff:ec:d3:20:d9:0d:bf:79:e3:
                    06:3b:b7:b6:d2:29:9f:f6:fa:83:04:8c:0b:f7:0b:
                    33:2c:e8:2b:c5:a8:09:fa:d0:8e:38:33:8c:12:15:
                    6b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E5:1F:8D:3E:70:2E:B6:58:16:0B:60:B4:51:0C:F4:D7:46:A3:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ae8768c6-6fa3-38ea-af43-7ddc906073ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.155.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:e8:f7:c7:9f:81:f3:e8:3c:13:28:67:a3:a3:22:4f:00:bc:
         43:bc:7c:16:90:fe:65:ba:67:b0:1c:4f:ee:60:0f:54:52:19:
         21:5a:be:7f:8a:69:eb:3c:5c:62:71:e9:85:a4:3f:4f:80:6a:
         ff:f8:a2:98:4d:4f:a7:2e:2c:7c:93:30:59:ad:d8:43:72:13:
         d3:8b:df:67:18:63:21:cc:c0:8f:6c:a3:8e:6d:c3:85:f5:2f:
         8f:86:7a:a2:b1:2f:3f:ca:b8:b6:06:89:cb:43:37:ee:e3:0e:
         b8:1f:69:22:13:48:a7:fe:ee:af:95:6f:53:de:28:b1:d0:c0:
         c2:dd:af:6e:f6:68:a9:32:a0:b6:b8:12:15:58:26:ab:b0:db:
         bc:4e:d9:42:53:05:b3:8f:d2:00:95:11:de:dd:94:2b:86:16:
         d1:d3:04:99:c9:e9:c4:3c:99:c3:82:bc:3b:a5:4a:99:8d:2b:
         92:a4:26:ec:ee:2f:4b:4e:dc:20:a8:c0:bd:f2:38:d5:04:17:
         28:ec:5b:81:c5:1e:23:cb:b1:a0:12:41:ed:b1:0a:46:c4:e2:
         dc:e5:87:37:8b:66:29:6c:08:5c:0f:51:f2:ec:7f:ea:66:f8:
         91:49:ab:ea:d6:f7:16:cd:db:56:84:54:3e:b6:e0:0a:8a:4c:
         34:c7:c6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:16:03 2026 by rpki-client