Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dc277728-1b4f-30d7-b9de-bf15bb440b51.roa
File:                     dc277728-1b4f-30d7-b9de-bf15bb440b51.roa (raw, json)
Hash identifier:          qtg/eN4BmZcyZEaIyf47heuTLUso2lUDWWMmr1Kje14=
Subject key identifier:   5D:8B:0A:1D:C1:38:CB:61:F9:16:D7:F0:CD:FC:E3:78:5B:FB:B9:0A
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584D55BA3546B398CCCCABFCD100
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dc277728-1b4f-30d7-b9de-bf15bb440b51.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     7029
IP address blocks:        75.90.24.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:35:46:b3:98:cc:cc:ab:fc:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=8f6b529c-ba97-487c-aac0-d406d37165f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c6:cd:a7:f0:38:09:c0:87:27:3e:a5:8b:79:
                    d1:e8:3f:65:6a:45:d6:fa:95:2e:93:a0:af:72:75:
                    7a:41:f0:ff:14:72:2b:db:8f:46:5d:39:cb:1a:e1:
                    e6:d6:fa:cf:85:63:c9:fe:40:e6:ad:4e:83:43:9a:
                    67:ed:ba:06:ad:86:bf:8c:e9:d0:6c:e7:6b:cb:f0:
                    77:9c:27:d6:28:c7:1e:95:ff:be:17:c5:9b:d7:e1:
                    5e:22:03:fd:fc:ec:ba:d1:b8:46:80:33:bb:f0:b7:
                    81:55:fc:a3:9e:03:20:41:95:ff:cd:9a:d6:ec:2e:
                    eb:a5:81:44:b8:13:a7:d6:bc:28:5d:42:aa:8f:c4:
                    59:ca:04:d8:fe:e5:d0:a0:38:ed:87:cd:39:75:db:
                    12:59:3d:69:26:a9:7d:71:90:ea:19:30:57:19:00:
                    ab:da:7e:95:fd:da:d1:0c:e6:c9:f9:22:1f:6d:24:
                    27:bb:a5:e7:f5:69:60:0f:8c:d4:18:3e:4a:24:55:
                    90:d4:a0:91:9a:c1:cb:81:4c:6e:22:6c:e8:e4:e2:
                    74:9f:9a:ef:09:3d:88:92:02:45:40:60:59:d6:fb:
                    a2:38:91:2a:bf:ff:43:3c:24:ce:f5:62:e8:4f:31:
                    87:51:f6:be:93:e6:85:6d:0b:44:e1:2b:31:86:f0:
                    d3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:8B:0A:1D:C1:38:CB:61:F9:16:D7:F0:CD:FC:E3:78:5B:FB:B9:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dc277728-1b4f-30d7-b9de-bf15bb440b51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.90.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:b6:bf:e2:1b:73:ec:06:83:02:ff:69:c6:95:ca:64:32:4f:
         44:20:e5:7a:c5:05:f4:29:41:d1:69:a1:1b:35:89:78:ab:e1:
         bd:38:3c:12:72:c9:76:4d:fc:64:84:74:bb:37:66:5d:3f:db:
         5d:fe:78:c9:21:ad:7d:d3:44:30:b0:68:ce:e6:5e:11:d7:17:
         0e:61:65:48:6c:3f:ed:8b:e4:c1:c1:6d:c4:59:40:89:03:1d:
         d9:83:a5:46:5d:ae:55:31:21:ed:79:ae:ea:01:fb:49:84:62:
         bd:e9:7c:b1:d4:9e:de:3e:ef:67:77:a3:af:3e:df:c1:c2:45:
         f3:2c:0b:cd:61:5d:b3:b2:a2:68:ba:6e:8a:4f:2a:8a:33:98:
         88:7d:09:99:1d:8a:31:8a:f1:1b:f3:8c:0b:8a:fe:ce:82:c1:
         08:52:73:3d:d3:c0:1d:2c:1e:3d:67:d5:ba:0e:22:2f:12:5f:
         44:5e:b0:5d:36:84:dc:9d:c7:3c:fe:29:f1:10:2c:27:fc:a9:
         7a:8c:f5:26:e6:8f:38:9c:66:b0:ba:28:b1:b9:61:ef:1f:12:
         cc:61:93:43:61:f3:f4:e7:1f:d1:b8:36:e5:dd:0e:8d:2d:9d:
         f1:83:8d:ee:c0:43:2d:18:99:92:69:22:f0:b4:50:72:f3:df:
         ec:9d:d0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 11:41:28 2026 by rpki-client