Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/06397e4a-5944-3cf6-9cd6-202ce248026d.roa
File:                     06397e4a-5944-3cf6-9cd6-202ce248026d.roa (raw, json)
Hash identifier:          t38NK3hTBNVGeH+0q7vgHXz/QC1vih04fnwXTl/3bBM=
Subject key identifier:   9E:59:39:8A:EE:6B:97:16:25:FE:C2:36:3A:1B:14:6B:3F:5D:15:41
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584D3DFF93E1D374816D37451E80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/06397e4a-5944-3cf6-9cd6-202ce248026d.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     7029
IP address blocks:        98.20.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:93:e1:d3:74:81:6d:37:45:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=62e018eb-e49c-400b-8f91-d928234b0629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:60:a9:a1:ba:e8:cc:f9:56:45:56:70:c7:ea:
                    3c:83:35:03:0a:ae:84:c6:28:88:48:fc:d4:f1:af:
                    47:4b:84:39:c2:8d:17:47:ee:7a:54:54:17:a6:73:
                    ce:4f:bb:1f:20:b5:ff:6e:1c:2f:a9:60:de:fa:1a:
                    7b:38:61:dd:8e:6b:d8:89:72:3c:56:b2:05:43:35:
                    49:f6:2e:17:04:8a:05:79:38:18:ff:8c:2e:34:28:
                    03:b3:da:49:d2:59:03:41:26:77:e4:17:75:87:95:
                    0c:e5:ac:6b:26:ab:c5:a2:9e:cf:c2:f5:ed:ce:99:
                    d5:cb:dc:c1:60:05:c3:1c:89:f0:fe:c3:b1:3e:bc:
                    ee:41:3a:0b:da:d1:d6:35:dd:46:48:9a:a8:40:37:
                    eb:9e:9d:ad:93:86:82:d9:e9:a5:52:5c:a8:47:cc:
                    f3:ca:bf:5f:b2:28:eb:a2:d4:9e:9c:6b:b1:93:10:
                    e3:d4:3c:0a:a7:ee:fb:bb:ee:65:f0:f7:09:fc:c9:
                    26:e3:bb:36:0f:35:06:ac:bb:6f:88:42:ad:74:36:
                    af:75:7e:8f:3b:d3:0b:da:77:8f:00:13:b0:c9:91:
                    15:ce:8a:c2:b8:b8:77:fb:1f:dd:f9:1d:c9:35:6c:
                    fc:27:30:90:a3:9f:82:3d:4d:da:56:18:90:7b:60:
                    61:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:59:39:8A:EE:6B:97:16:25:FE:C2:36:3A:1B:14:6B:3F:5D:15:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/06397e4a-5944-3cf6-9cd6-202ce248026d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.20.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:b0:26:94:3d:84:e3:f4:2e:85:96:06:69:a4:44:a0:5d:20:
         ab:1e:f4:ea:da:8b:63:aa:ae:4c:77:44:13:19:c3:c7:65:e9:
         8b:df:2f:98:47:0b:11:47:9b:0e:10:c8:fc:d6:47:8b:d5:5c:
         93:cc:14:09:d1:78:41:6f:f8:43:c5:8d:b4:65:48:03:13:cd:
         e9:f4:82:d3:21:e6:92:25:11:ac:d3:85:c9:1a:b1:bf:1c:76:
         94:7c:4e:c5:04:3b:33:36:cb:30:98:91:73:66:80:05:35:c0:
         d5:78:a0:7f:a6:2c:28:7f:c7:2e:4e:7a:11:ee:93:c6:b6:1d:
         2e:d7:b8:7a:7a:b2:59:05:4b:6e:3e:4f:16:8a:51:9c:43:13:
         71:b8:33:af:d9:bc:73:6a:dd:b0:32:c0:64:58:10:7b:8d:45:
         57:d5:74:f5:f7:96:b3:c3:2c:fc:d9:b6:55:15:b4:ae:fd:ee:
         d6:c7:4f:66:90:1e:d5:d2:f2:3f:15:0a:c6:6b:23:f5:ee:e5:
         21:73:61:33:85:ef:3d:b1:70:03:54:31:b5:c1:28:b0:6e:ae:
         13:0e:8e:9f:e2:a5:de:bb:9e:b8:43:89:97:2e:07:a2:83:1c:
         da:33:f2:a9:8f:6c:91:c3:b1:be:28:5e:b9:36:3a:e6:cb:e6:
         0f:b7:2f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:34:10 2026 by rpki-client