Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4451ca6-15ac-3eb1-9841-62f0a217632f.roa
File:                     d4451ca6-15ac-3eb1-9841-62f0a217632f.roa (raw, json)
Hash identifier:          sBRtu27pPJWJBECH5tspFcqtslZmGp1EWDVlkkU1YaM=
Subject key identifier:   DB:1C:18:9B:DE:C0:F3:9B:26:F2:D7:1D:D7:1C:2D:58:7E:E9:AE:AF
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584DE9B08295F9D71AF7EA31D480
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4451ca6-15ac-3eb1-9841-62f0a217632f.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     7029
IP address blocks:        98.18.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:82:95:f9:d7:1a:f7:ea:31:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=cf04c271-71d6-4479-9e58-c6b0079e6323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9f:ba:33:9a:ba:46:86:44:ac:d3:d7:c7:69:
                    ef:56:a4:f3:0c:3c:6a:1d:de:72:81:91:11:eb:0c:
                    07:c3:1b:70:dc:a5:f6:e0:63:fc:bf:b3:0d:8d:43:
                    e7:02:23:5b:ed:dc:e6:45:40:ad:8d:1d:bb:5c:4b:
                    d0:c7:cb:49:f2:6c:0a:42:e6:f9:c8:80:ba:f9:d5:
                    5c:6d:ba:ea:0c:2e:6c:af:38:79:fd:f6:65:e8:15:
                    71:76:a4:6a:d5:52:c3:83:c4:f4:f0:0b:66:bb:14:
                    df:c2:d4:14:9d:1f:a0:96:c6:5f:47:8f:f9:55:d5:
                    9c:5f:9e:90:de:81:c7:6f:ba:55:b4:6c:df:0b:ff:
                    08:5a:75:ec:18:0f:93:88:c1:5b:c7:ee:fe:26:82:
                    8b:8c:f3:09:7b:0f:01:5b:91:0d:72:ef:14:f3:47:
                    92:3e:b5:cb:7e:31:f6:9c:24:de:53:d2:a1:25:8f:
                    fa:9a:af:9a:49:27:e8:48:e0:b4:e0:ac:02:6d:92:
                    aa:6a:c3:bd:e5:85:94:63:9a:1b:9a:88:81:c2:01:
                    9b:f6:a0:45:a7:e8:2c:8c:e0:b1:5f:45:f1:60:f2:
                    dc:9f:3b:51:d4:74:77:86:09:cf:49:ad:39:15:8c:
                    79:f1:0c:32:79:d0:34:23:13:ce:1d:a6:0e:33:b9:
                    32:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:1C:18:9B:DE:C0:F3:9B:26:F2:D7:1D:D7:1C:2D:58:7E:E9:AE:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4451ca6-15ac-3eb1-9841-62f0a217632f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.18.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:f8:33:4a:f6:a2:06:ba:d9:d4:eb:5c:46:c1:1e:60:ae:34:
         d7:22:53:a2:f3:09:4a:b5:ea:5e:e1:9f:df:02:f2:c7:83:21:
         16:3e:d5:26:93:4a:18:55:42:35:0b:29:1e:80:8c:ee:12:f8:
         33:c0:92:9e:ec:98:83:e6:99:87:fd:80:a6:51:2d:c0:82:7c:
         cd:2c:37:ff:ad:9e:a0:49:63:29:72:90:61:ac:ab:eb:81:00:
         41:d8:de:fa:6b:8d:95:1c:7d:49:9d:66:f5:4b:7f:34:48:c9:
         25:d6:e0:76:1f:d5:6a:67:1c:dd:19:65:34:eb:0d:b6:a1:ec:
         44:a1:b4:ee:c3:e4:da:0b:36:2a:c8:9e:72:43:87:45:47:78:
         cd:99:fc:f9:53:70:b0:19:19:26:bb:38:fe:05:bc:f5:39:de:
         b5:16:c6:07:d4:cf:0a:4a:77:86:47:97:5a:81:63:3b:8a:2d:
         43:5c:ed:92:37:6a:e8:5c:3b:2f:da:df:9d:ca:a1:05:c9:7a:
         2a:b8:de:64:0e:a5:c9:43:44:66:e0:ab:12:61:4c:41:24:6c:
         e1:d0:a0:ca:a5:ac:f7:4e:01:51:43:b3:c2:b2:10:81:9c:35:
         2b:87:c5:ff:1f:61:45:cd:0b:da:3f:1c:c2:46:16:f8:5a:b5:
         21:1d:0e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 17:12:36 2026 by rpki-client