Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0330cd88-8666-38d7-8200-fa0d7a7e8929.roa
File:                     0330cd88-8666-38d7-8200-fa0d7a7e8929.roa (raw, json)
Hash identifier:          G1XsAo6ulf50GH/HvNZKWx70Cc/E3tbpcPOZ+8pcbgg=
Subject key identifier:   3B:D9:7F:74:58:24:F5:DE:CE:84:57:8B:3A:37:71:60:EB:57:12:70
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584D27D84363A84455BC21544A00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0330cd88-8666-38d7-8200-fa0d7a7e8929.roa
Signing time:             Fri 13 Mar 2026 14:33:51 +0000
ROA not before:           Fri 13 Mar 2026 14:33:51 +0000
ROA not after:            Thu 11 Jun 2026 14:33:51 +0000
asID:                     7029
IP address blocks:        173.188.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:d8:43:63:a8:44:55:bc:21:54:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 13 14:33:51 2026 GMT
            Not After : Jun 11 14:33:51 2026 GMT
        Subject: CN=8bb7acdf-b975-478f-a550-4e1645106b64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4e:b4:db:ae:5f:5a:a6:bb:f5:f4:0a:cd:fe:
                    b9:e7:9a:a8:0e:9f:55:29:d8:1f:b4:5b:cd:98:ba:
                    27:63:9c:07:11:a7:1b:22:bc:9f:9d:be:40:ae:78:
                    aa:0e:88:5f:8b:23:24:42:50:3d:3b:53:90:48:95:
                    da:bd:5f:6c:c9:7f:66:28:22:06:f5:03:7a:4b:0c:
                    3c:4c:e1:6b:be:d4:ea:46:26:93:a6:66:1c:50:90:
                    d8:22:12:b7:95:41:2e:03:fa:55:12:53:bb:be:c1:
                    6f:66:05:67:7c:a2:52:cd:a8:37:64:c1:11:e5:1b:
                    11:7c:27:6e:9f:4c:d8:64:c4:87:ec:5a:9f:63:b3:
                    b8:ff:59:d9:ac:a3:ad:26:76:c6:a5:58:d2:dd:69:
                    8a:67:0e:00:bf:fe:a5:ad:7f:66:9d:28:70:b6:83:
                    0a:eb:f8:57:a1:8a:e7:cf:d1:89:eb:fc:71:6c:86:
                    d1:a5:a9:81:c6:53:d1:39:25:e0:f4:ec:59:31:4d:
                    2d:13:ed:a0:0a:c6:45:3f:f6:9e:b4:81:e7:13:16:
                    30:3f:e2:66:84:4e:49:2f:42:65:b7:7c:51:7c:46:
                    37:53:dc:16:17:a9:59:99:5a:ad:6f:c9:3f:0d:64:
                    6d:b6:81:2c:80:59:63:b8:5b:87:e5:d7:af:f7:59:
                    a6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D9:7F:74:58:24:F5:DE:CE:84:57:8B:3A:37:71:60:EB:57:12:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0330cd88-8666-38d7-8200-fa0d7a7e8929.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.188.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:22:04:12:07:2b:45:53:3b:73:84:e7:01:64:1b:24:73:ed:
         d8:43:e3:16:d3:a4:de:2d:af:62:d4:56:27:f9:5a:4f:ef:af:
         20:b7:24:d9:c9:75:bd:fd:5b:69:45:99:60:d6:19:25:f5:29:
         25:32:c4:0d:16:eb:20:d2:e5:25:0a:3d:cc:7e:83:2a:4d:b0:
         6f:6c:ec:9b:db:93:01:87:55:1c:b0:c5:c3:17:c7:b4:e2:c0:
         f5:3d:ae:39:07:85:e6:23:a5:82:06:fb:2e:4d:40:15:9f:c8:
         10:f1:1f:a0:b5:fa:c8:ca:67:b9:f1:0f:a2:87:f1:a7:aa:97:
         87:a3:3e:f8:17:85:89:06:8d:98:05:b7:3f:c8:50:c8:62:91:
         4a:79:23:ab:5f:bc:35:be:c1:1c:dc:89:71:c7:71:58:d6:ba:
         73:e7:c8:70:ad:dc:c4:86:5e:6e:75:a8:9b:bb:16:88:39:13:
         5b:73:f4:c9:cf:d8:42:a4:7c:5d:91:5e:ad:b3:37:4d:51:43:
         6c:18:01:7c:05:e4:91:6b:f2:8b:ee:11:32:02:3a:10:48:21:
         b4:0a:48:e2:e2:1b:fb:3e:a0:8d:2c:da:0e:79:eb:37:b8:d3:
         49:64:60:9e:3f:21:ca:07:9a:35:1e:45:d3:1a:c0:12:53:09:
         e4:ce:de:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:22:34 2026 by rpki-client