Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/49eed83d-dd99-34f1-86ae-41393812eaf5.roa
File:                     49eed83d-dd99-34f1-86ae-41393812eaf5.roa (raw, json)
Hash identifier:          K42V08bQ/VBrty9R/YcD9yg7bR6JXAWWRV2NJzmvXl4=
Subject key identifier:   FB:37:C2:0D:7F:9B:3D:75:DB:0E:B4:EC:CD:FC:5D:DE:02:38:E5:38
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584DE5808558C73585DA31669D20
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/49eed83d-dd99-34f1-86ae-41393812eaf5.roa
Signing time:             Wed 20 May 2026 13:00:31 +0000
ROA not before:           Wed 20 May 2026 13:00:31 +0000
ROA not after:            Tue 18 Aug 2026 13:00:31 +0000
asID:                     11233
IP address blocks:        209.237.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 02 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e5:80:85:58:c7:35:85:da:31:66:9d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: May 20 13:00:31 2026 GMT
            Not After : Aug 18 13:00:31 2026 GMT
        Subject: CN=6b06bfdd-eb8d-45a7-aa70-27a425d88318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6d:cf:38:0f:6c:98:86:3b:52:e8:8c:8a:13:
                    23:df:41:b3:42:bc:5e:5a:f5:80:6b:33:57:e1:d1:
                    98:6f:7e:16:be:59:64:34:3e:48:58:42:05:2b:63:
                    87:c6:64:21:83:e6:7c:b7:2e:d8:33:4f:e7:d2:f7:
                    18:c1:ed:a3:0d:18:7b:75:f7:4f:c6:ed:54:5a:08:
                    8c:25:e3:3b:33:6a:f1:9c:9e:a0:7e:ff:91:df:e4:
                    36:c9:a9:90:35:fa:f4:36:d5:06:ba:9d:db:a7:21:
                    b8:e1:98:2e:46:46:da:5a:89:f5:02:23:9c:73:73:
                    bf:77:c2:b1:0e:77:39:78:5c:91:c7:cf:6a:c0:5d:
                    5d:36:93:b0:e6:0c:34:77:82:eb:a9:99:25:96:ae:
                    9f:3a:4c:72:84:b2:dd:01:c3:1e:8b:3f:ba:e1:85:
                    fb:f7:97:02:a8:ef:7b:e4:2a:30:38:ab:af:96:45:
                    cb:38:f9:67:70:59:41:34:83:11:88:aa:9a:74:6f:
                    00:c4:cb:0c:5f:5a:88:c2:ac:7d:36:41:64:41:16:
                    31:d5:f7:54:9b:4e:29:f3:af:38:52:f6:4e:01:40:
                    f1:04:27:fc:60:5a:f8:c0:73:f0:f0:84:a3:54:fc:
                    f9:56:1d:7b:17:39:19:60:c7:16:24:b2:79:09:80:
                    3c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:37:C2:0D:7F:9B:3D:75:DB:0E:B4:EC:CD:FC:5D:DE:02:38:E5:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/49eed83d-dd99-34f1-86ae-41393812eaf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:2a:93:57:8b:2f:15:41:a0:3e:9f:c6:bc:d2:94:e7:2c:c7:
         3f:1a:df:4c:09:a9:73:16:82:06:c7:3c:77:1b:7b:f3:08:4a:
         dd:1d:27:b9:6f:7c:7d:43:4b:d4:36:63:6e:b5:9a:67:90:b2:
         03:58:b1:9e:d4:16:8a:1d:b6:62:25:18:45:01:24:ec:a6:dc:
         20:81:ae:2e:5a:6d:0d:ad:bd:47:e1:d7:d8:57:f3:b1:04:e3:
         c3:6a:ae:b2:89:b1:14:ae:e6:0b:8a:96:99:13:2c:f9:5c:79:
         3b:a1:c9:7d:90:75:fd:40:56:ec:a6:c6:d7:6e:c7:2e:fa:be:
         52:1b:bf:f8:f9:e4:93:28:de:43:81:09:80:33:38:19:8a:4a:
         f2:f8:d3:1c:fe:7a:2d:50:fb:d7:81:9a:53:19:35:db:5e:49:
         9e:8f:ca:82:2a:d6:ec:23:6a:3e:b3:3a:5a:63:ff:f9:9b:aa:
         c2:d3:c6:17:aa:ba:24:f7:7c:a4:09:67:d5:6e:1a:f8:99:b8:
         f2:66:0a:b1:db:45:d8:73:9f:3c:d6:25:36:b5:e4:fb:12:3e:
         88:d5:34:99:03:3e:ea:4a:02:78:c9:26:0b:a5:e5:11:0c:47:
         03:10:f1:a8:a6:be:96:d6:8c:16:c8:dc:c7:a7:09:33:a4:be:
         ba:9a:33:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 22:58:23 2026 by rpki-client