Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5338ef0f-921e-34fb-9c0b-c753c46e0181.roa
File:                     5338ef0f-921e-34fb-9c0b-c753c46e0181.roa (raw, json)
Hash identifier:          GpgUm7eocMt8plFD2AOInicl9UMP9PRiywFupShvvqM=
Subject key identifier:   57:74:7B:DF:18:F4:25:FF:FE:AA:98:DF:87:EF:E3:36:AE:00:11:CD
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584D2D3F88A49DFA369B040E7980
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5338ef0f-921e-34fb-9c0b-c753c46e0181.roa
Signing time:             Sun 15 Mar 2026 13:00:41 +0000
ROA not before:           Sun 15 Mar 2026 13:00:41 +0000
ROA not after:            Sat 13 Jun 2026 13:00:41 +0000
asID:                     7029
IP address blocks:        69.40.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2d:3f:88:a4:9d:fa:36:9b:04:0e:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 15 13:00:41 2026 GMT
            Not After : Jun 13 13:00:41 2026 GMT
        Subject: CN=0d1c1780-9aa4-4319-ac6a-02e59e7097b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d3:eb:7d:d0:31:9d:62:d5:94:23:06:09:ed:
                    a7:53:7c:e8:68:58:03:a5:cb:0d:61:5c:b1:6f:c9:
                    38:2a:c0:01:19:2c:9d:31:57:5b:20:64:67:15:21:
                    6c:5d:29:69:73:3a:23:dd:de:07:a0:ab:74:6f:a9:
                    55:3d:08:ef:e0:70:37:18:4f:56:a8:1c:ed:43:b2:
                    5a:80:6b:38:1b:7f:cb:06:61:f3:d8:96:3d:f5:8d:
                    1f:8c:19:c6:f5:05:b4:bc:84:06:a9:c3:81:cf:f1:
                    71:b4:41:58:0b:a7:e5:9b:9c:7e:c3:dd:13:4e:ee:
                    ff:54:f2:89:43:6d:d3:bb:cc:2b:db:51:a0:f0:6e:
                    16:92:3c:28:b3:de:9f:7b:8d:07:04:3e:b0:48:8b:
                    cb:76:b9:c4:b3:9f:9f:31:09:53:00:27:1d:f2:a2:
                    4a:30:81:a1:94:b1:10:55:10:cb:4c:c7:93:2d:fa:
                    9f:09:d6:97:4a:c5:d6:78:de:30:55:2f:35:8a:2c:
                    bc:da:c6:85:d5:5c:2c:86:11:10:04:81:74:65:a2:
                    c7:ba:d1:fa:cc:46:61:a0:d1:03:dc:40:e5:cc:4a:
                    21:c7:b5:8f:58:81:55:c4:d4:86:7e:46:c7:a9:35:
                    3e:b8:56:a0:57:ed:64:90:f0:5f:58:88:78:04:9f:
                    c8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:74:7B:DF:18:F4:25:FF:FE:AA:98:DF:87:EF:E3:36:AE:00:11:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5338ef0f-921e-34fb-9c0b-c753c46e0181.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.40.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:49:7a:7c:f9:be:02:c5:2a:0f:d5:75:8c:85:e4:9f:58:78:
         70:31:f7:d6:64:07:3a:71:04:2e:f6:ae:70:32:99:a3:22:ee:
         1b:e8:e0:fe:da:34:d8:f0:18:b1:d3:e2:13:ab:82:4e:92:6f:
         b0:d0:b2:88:a1:c1:78:7a:6f:fb:72:35:42:62:65:01:42:6a:
         81:6a:dc:41:bc:5f:82:cf:d1:33:31:c2:c2:c2:9c:9c:0a:ed:
         78:1e:e5:73:58:af:b0:c3:f8:d0:8a:1b:df:da:ef:d4:75:b3:
         23:11:1c:67:33:c5:28:f5:68:9c:72:ad:53:46:16:7b:ad:11:
         41:d4:05:c1:6a:16:b6:ec:57:09:14:64:c0:44:cb:f8:67:47:
         9f:d0:5c:c7:ef:e4:cb:75:f7:e3:18:e3:49:b0:d3:6e:c7:85:
         c0:77:e7:38:be:82:d0:9c:9b:92:ab:08:07:81:0b:ba:93:34:
         2e:2b:f2:7b:15:d1:02:87:68:7c:7a:7e:7d:d1:73:dc:76:af:
         3d:35:17:d9:ca:3f:67:a9:81:71:14:f0:82:6d:dc:31:e9:8a:
         7a:e1:e9:37:8e:16:9a:21:6c:7d:38:e4:c1:37:78:54:f3:10:
         bc:42:d0:63:17:8f:ac:88:58:f8:0b:e3:a5:47:cd:08:56:7e:
         bf:e9:7d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:30:47 2026 by rpki-client