Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/390db6c1-d4e0-370e-8d74-59676799011e.roa
File:                     390db6c1-d4e0-370e-8d74-59676799011e.roa (raw, json)
Hash identifier:          qP1Ootle9T09W/5dNdZRZnQALUVKp+/LehQcgA1t1cQ=
Subject key identifier:   3B:C9:2C:53:EC:1E:12:3B:86:61:46:F0:3B:9C:95:B6:78:5B:AA:FB
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584DCC60670E24762C6541344480
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/390db6c1-d4e0-370e-8d74-59676799011e.roa
Signing time:             Mon 11 May 2026 13:00:31 +0000
ROA not before:           Mon 11 May 2026 13:00:31 +0000
ROA not after:            Sun 09 Aug 2026 13:00:31 +0000
asID:                     27338
IP address blocks:        74.9.224.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cc:60:67:0e:24:76:2c:65:41:34:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: May 11 13:00:31 2026 GMT
            Not After : Aug  9 13:00:31 2026 GMT
        Subject: CN=1d459ec2-9a47-4bb9-b982-0706170b6203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ca:d2:b1:bb:13:56:8e:84:36:3c:1c:37:de:
                    40:50:f0:b4:bb:0e:87:74:f8:4c:ac:48:3f:63:33:
                    9c:7b:cb:ab:90:7d:75:e2:20:37:4c:17:d1:0f:ab:
                    65:7e:db:38:74:23:1c:84:0b:f3:8b:54:99:67:58:
                    07:e2:62:5c:75:5a:4b:db:88:25:2d:14:bf:5e:bc:
                    aa:94:26:5b:5c:38:8f:5a:d4:5b:bf:96:a6:a8:94:
                    6b:1e:5f:01:b5:47:19:e8:3a:87:92:49:79:bb:16:
                    2b:e3:f7:cc:65:42:5c:09:91:d6:32:d5:64:96:51:
                    0f:a3:4c:59:3d:6c:31:57:cc:f4:3d:bb:4f:bd:3a:
                    22:d8:ec:5f:39:28:7e:13:08:e5:26:e4:b6:5a:1b:
                    7f:26:d4:54:b1:af:4c:92:65:9a:02:4b:8b:4a:4a:
                    8c:2c:4e:b1:69:17:3f:85:cd:9c:67:7c:f4:ec:d7:
                    d7:e5:a4:5d:5b:f0:ac:81:80:e7:28:3e:22:e7:1a:
                    db:fe:a3:27:ad:5d:f5:36:48:b5:f7:c2:87:77:b6:
                    67:cc:c7:67:c7:ee:98:2e:b6:b1:63:4d:63:1c:37:
                    0e:28:01:6b:b9:f2:c4:4b:17:d7:0b:60:6d:01:c2:
                    d3:4d:d2:70:15:93:f4:1e:d8:2a:72:32:cb:69:75:
                    c0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C9:2C:53:EC:1E:12:3B:86:61:46:F0:3B:9C:95:B6:78:5B:AA:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/390db6c1-d4e0-370e-8d74-59676799011e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.9.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:25:46:ee:3e:3e:bc:57:a6:96:87:dc:e3:ab:53:1d:5d:5b:
         c8:7a:7b:ba:f1:ae:97:87:61:83:a0:53:90:65:96:27:c1:d7:
         b7:e7:6f:8c:7b:b6:da:6c:f1:9c:ca:3c:16:bf:e6:cf:ac:5d:
         eb:dc:5e:27:50:ec:9e:79:e6:7e:cc:7a:dc:d9:c4:62:eb:35:
         33:61:93:8e:0d:0c:2e:25:cd:fa:bb:bb:4f:e4:97:4c:61:4c:
         15:a9:83:fc:33:fe:bf:3c:c4:38:dc:76:d6:c3:68:f7:22:fc:
         7d:7b:20:f5:ad:88:8d:02:89:ee:2b:e5:07:2d:98:29:59:95:
         ec:15:cd:4c:e3:86:80:29:84:5f:fa:3a:d8:4e:3e:48:30:76:
         d2:67:2d:11:5a:e5:be:59:0c:d8:1c:3d:df:7c:0d:4a:9b:66:
         7a:e8:fe:94:01:f4:90:40:04:a1:46:c0:21:b5:e5:7b:d0:50:
         0f:0f:89:d0:10:61:fc:81:15:fa:43:e1:56:17:01:81:83:6e:
         6a:85:f7:66:b5:c8:3b:63:31:64:ef:da:6b:16:cb:8d:31:3e:
         76:9e:1d:a0:e0:bd:4b:f1:93:1d:57:80:5e:f2:55:90:39:fe:
         63:39:77:c4:a7:ab:42:0c:67:f4:82:1a:9c:d8:56:13:09:24:
         1b:f4:41:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:44:00 2026 by rpki-client