Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/31498819-11c0-385b-b3ad-bd8caa11e688.roa
File:                     31498819-11c0-385b-b3ad-bd8caa11e688.roa (raw, json)
Hash identifier:          XUvhHi3lw+JBy+2wXHEjWwI8YAbQ9O0xir/TC27DCQA=
Subject key identifier:   DA:29:E2:72:AB:5C:28:EF:39:56:4D:97:28:D8:1E:5C:4C:19:FC:96
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584D300A9BDED7105EFD35016C80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/31498819-11c0-385b-b3ad-bd8caa11e688.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     7029
IP address blocks:        174.130.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:9b:de:d7:10:5e:fd:35:01:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=b885bc7d-f858-499b-981a-32b0b243bc99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:69:75:ad:3d:fc:0c:af:1d:2c:d6:c7:70:3a:
                    85:61:d8:94:c0:7c:51:1e:a9:9e:bf:7d:a2:96:af:
                    07:35:b9:b4:c0:d7:fe:fa:27:fa:55:bd:f9:07:73:
                    ca:a9:6f:01:a3:18:25:d7:f0:1a:e5:76:0c:bd:30:
                    82:3c:64:43:b6:41:eb:77:fb:f9:23:ba:7a:06:b6:
                    71:ec:ed:ae:32:7d:59:d7:4d:a0:c2:52:1e:64:f4:
                    99:50:44:8d:33:44:8f:92:4c:45:cc:29:30:a5:be:
                    53:0f:2a:f7:bf:db:df:6e:5a:31:86:49:e4:f7:ea:
                    ac:d8:4d:2c:c3:67:44:57:25:e3:e8:f0:a1:77:62:
                    e2:7a:e0:bc:cb:3b:15:a4:33:2b:d8:8e:a8:4a:b9:
                    8d:4b:b8:45:95:b9:94:df:eb:ca:a0:ee:2c:87:de:
                    43:f0:7e:eb:0e:05:16:bc:b5:78:ee:f4:bc:67:6e:
                    81:6a:09:72:c5:69:4c:a2:7f:76:c3:26:ef:7d:77:
                    b1:21:9e:9c:a9:62:85:22:66:72:2b:ba:5e:d5:fe:
                    b7:f8:cc:ff:9d:2d:e4:a3:77:20:f8:24:41:0a:3d:
                    f5:02:e9:dd:f2:6c:c5:db:c9:ca:f0:77:2a:c7:aa:
                    96:c4:47:0f:e3:6d:0d:0a:3a:ff:44:36:78:0e:d4:
                    cf:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:29:E2:72:AB:5C:28:EF:39:56:4D:97:28:D8:1E:5C:4C:19:FC:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/31498819-11c0-385b-b3ad-bd8caa11e688.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.130.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:71:ad:7f:39:9f:d2:02:df:18:a9:ea:b6:63:e1:ee:ae:0d:
         b5:87:85:5d:da:81:6a:b1:24:61:c1:b5:72:96:4c:45:99:0a:
         9e:02:0c:91:7e:3a:b5:2a:d2:6e:ce:da:2d:b7:e4:ff:c0:14:
         93:ba:98:2b:d8:5c:4a:3f:31:1e:b9:c2:0e:8e:a6:e2:c8:d5:
         79:97:ec:25:f4:32:f5:ef:89:9b:31:a8:7a:ac:a0:9f:c3:82:
         fa:31:08:5d:67:b0:50:87:2f:25:c0:1d:18:9d:cb:6a:90:f2:
         1f:c3:dc:06:1b:89:dc:7c:d7:ae:1c:1d:7b:e8:1a:e2:6d:5c:
         db:1b:f1:e6:b6:65:28:88:f8:7f:4d:c9:30:2c:0a:71:18:00:
         b3:9c:c2:cb:ca:a5:9b:b6:f0:fc:48:28:28:c9:2c:f2:f6:ad:
         9b:c4:21:89:4f:b3:2e:86:60:ea:94:06:31:55:7f:4c:3e:9c:
         b8:43:cb:fe:82:f0:50:bf:4b:68:0c:8f:46:6e:14:9b:58:b3:
         da:1f:2c:0c:9a:0e:1c:09:da:76:7e:19:58:c1:97:b6:4f:82:
         db:d8:a4:fb:a8:51:9c:75:d8:84:76:00:be:18:a4:b3:25:cd:
         89:7a:ae:ea:b2:7c:3d:da:cb:cf:16:97:74:81:83:d5:70:36:
         e6:36:2a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:14:07 2026 by rpki-client