Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/34f51c30-514b-30c8-9570-3e18823fc151.roa
File:                     34f51c30-514b-30c8-9570-3e18823fc151.roa (raw, json)
Hash identifier:          qkf4g3ec0n1o4CyUUCZ37q2JfX/JbFCjb0Fyu/2mNzQ=
Subject key identifier:   90:85:28:D1:CC:2F:95:4F:39:E7:B6:62:1A:F1:0C:05:86:02:EC:9B
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584D300A6FC7BDC9D447A57E3780
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/34f51c30-514b-30c8-9570-3e18823fc151.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     7029
IP address blocks:        207.222.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:6f:c7:bd:c9:d4:47:a5:7e:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=acc1b85b-542d-4683-9b87-5b8750f72f8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ce:bd:50:b2:d7:f4:72:f5:5c:f0:06:d1:dc:
                    37:04:f1:77:73:59:c8:22:fe:dc:e3:2c:fe:30:89:
                    3e:07:63:d8:c4:62:63:27:52:4f:3b:6b:dc:57:b0:
                    ff:1f:6d:ff:fc:ea:f9:63:5a:40:b0:a3:3f:c0:bf:
                    ac:30:c3:a0:dd:00:6a:59:eb:3a:7f:4e:b7:c3:0c:
                    11:73:d4:0a:73:eb:6d:a1:fd:a0:c1:07:5b:56:54:
                    3a:23:3f:3f:d9:8e:db:dc:9e:b5:d7:b8:b1:9d:df:
                    aa:f9:2e:19:21:ff:70:56:80:c1:fe:60:ba:22:93:
                    9e:ca:45:76:e9:d3:87:17:f4:fd:10:26:22:15:2a:
                    b8:86:3d:f0:1f:91:48:f4:4e:c4:67:1e:8f:90:0c:
                    d0:0e:c3:2f:f6:aa:dc:9b:ec:97:70:78:f5:59:31:
                    d0:a2:16:fb:60:34:1b:c8:6c:57:4c:c9:c5:67:6f:
                    8f:f7:fc:19:f9:04:eb:aa:f7:a8:a1:49:65:f3:96:
                    d4:57:d0:39:7a:97:2d:80:85:e1:ed:69:65:f1:1f:
                    14:19:e4:30:9e:4a:10:0b:a5:36:38:59:dd:16:fa:
                    be:37:03:83:3e:c0:3f:ed:36:35:14:7d:c7:86:ad:
                    6b:01:c0:1b:73:68:d1:b9:99:71:58:36:85:9c:78:
                    48:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:85:28:D1:CC:2F:95:4F:39:E7:B6:62:1A:F1:0C:05:86:02:EC:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/34f51c30-514b-30c8-9570-3e18823fc151.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.222.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:cb:38:4f:4d:e4:9f:6b:be:b4:0e:38:47:c4:34:f1:bb:24:
         58:33:23:c2:7d:c7:8a:59:19:48:9b:72:52:65:7e:21:c9:0c:
         e0:85:2d:71:2a:26:9c:42:08:29:87:7d:73:02:6e:37:1f:b4:
         02:4c:21:de:fa:35:11:1b:4e:c0:cd:ac:ca:71:a4:ae:bd:bc:
         15:4c:7a:bc:17:0c:ef:61:eb:30:8e:38:5a:b2:bd:79:d0:cd:
         af:fb:2d:9c:8b:2c:2e:a6:ff:11:3a:93:58:b9:ac:36:7d:88:
         e6:ea:62:e4:2d:5e:ee:2e:08:35:be:4b:e4:11:b5:ba:0e:6f:
         7f:6a:11:e8:6e:5f:92:fe:11:3b:1f:bb:6c:80:3a:c7:ad:01:
         4d:ef:e2:d0:96:ec:3f:7a:ce:fd:d4:9d:44:e5:eb:38:90:de:
         40:eb:a0:89:a4:46:21:4a:d0:76:09:59:de:e9:bc:63:73:58:
         94:e8:dd:73:7a:d8:c0:b7:18:fd:bf:48:84:dd:5d:81:76:fd:
         c7:67:cd:a8:5f:ff:e7:09:46:a3:d7:b5:ab:90:0a:63:18:4f:
         c9:5b:ac:21:68:30:64:7c:16:f5:7a:75:27:74:3b:a6:7a:1d:
         f1:88:51:ef:7d:2f:f7:10:95:20:87:02:7d:08:3b:50:cd:f1:
         a8:84:17:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:53 2026 by rpki-client