Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/91592978-0c16-3a4f-8fcd-1722428bd842.roa
File:                     91592978-0c16-3a4f-8fcd-1722428bd842.roa (raw, json)
Hash identifier:          OlVBG/GjHojtbuqohqXNDJVspN3D1pT2HXx9ZN8ppz0=
Subject key identifier:   3A:A2:E0:27:FF:DC:2D:A1:0F:97:2C:80:AC:41:0A:E3:17:CC:80:4F
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584D2BDA01D16C191434A0266BC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/91592978-0c16-3a4f-8fcd-1722428bd842.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     7029
IP address blocks:        71.28.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:01:d1:6c:19:14:34:a0:26:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=96a945a8-8a36-44f5-960c-4d26c32bf405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:62:12:e0:7b:ba:64:8d:5b:18:32:48:ed:f2:
                    58:df:4e:ca:b6:27:81:42:a8:57:ca:41:e3:c7:b9:
                    34:e6:f3:b6:6f:3d:72:2d:79:54:d4:5d:cc:a9:86:
                    1b:1e:1e:f5:6f:c1:3e:0b:f9:47:98:6a:ad:9c:2d:
                    b0:f2:02:46:b5:34:94:42:82:ce:d3:53:e8:2c:af:
                    86:db:5b:6f:a0:70:9f:65:65:3e:75:4d:aa:60:17:
                    b5:a7:3c:b8:bb:7d:4e:aa:67:6f:da:cd:4b:90:66:
                    a8:9e:1b:5c:3d:93:99:43:1b:23:f8:36:bb:48:e0:
                    4b:bf:87:11:79:ed:b6:72:b5:b9:e8:11:f6:20:67:
                    18:22:85:6e:03:e1:8b:71:12:5e:3b:ef:fd:59:53:
                    56:5e:6d:40:fa:4d:83:71:cd:a4:08:d9:37:6e:42:
                    f4:f7:af:78:c0:8a:b8:53:f8:a3:0b:8c:fe:95:33:
                    fe:66:a0:d0:71:67:ed:52:29:3a:5d:af:cf:76:9f:
                    1e:bd:5b:e8:a5:8e:da:85:c5:51:1a:37:05:19:25:
                    e4:0f:84:a7:ae:3d:ef:c0:7f:79:00:53:cc:6a:01:
                    80:70:e7:89:08:d1:67:0e:a9:fd:2a:db:03:4d:fd:
                    e6:84:58:4c:cf:28:c5:97:cd:db:1d:ce:6d:dd:77:
                    f0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A2:E0:27:FF:DC:2D:A1:0F:97:2C:80:AC:41:0A:E3:17:CC:80:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/91592978-0c16-3a4f-8fcd-1722428bd842.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.28.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:de:10:2f:40:37:6c:24:aa:12:3b:4e:99:bd:a6:c6:7f:46:
         a8:70:87:bd:6c:a9:44:75:17:98:24:bd:fd:ad:e7:43:a4:90:
         1f:f9:3c:84:7b:90:9b:7c:f0:1e:45:5d:ab:31:38:ab:be:55:
         7b:f4:14:61:48:53:26:8e:60:40:46:89:13:a5:9b:7f:18:36:
         d4:5d:4c:4b:60:c7:04:5c:1f:a7:e8:f6:be:dd:06:78:c9:8c:
         50:f2:e0:df:c1:ae:3d:2a:fe:aa:91:37:fd:f8:b7:d5:03:74:
         85:60:d2:c6:66:3c:8a:40:c9:8d:51:e8:e5:55:7e:07:34:91:
         e0:83:ef:92:a2:67:f3:09:5a:36:3a:55:39:60:9c:a6:74:4e:
         e0:84:e3:43:07:95:5c:9b:03:4b:9a:ce:97:89:cc:69:f1:3e:
         78:29:32:e3:50:e9:ef:5e:08:37:de:4f:70:2b:f6:17:51:cc:
         17:5c:e9:30:76:be:c1:57:bc:c7:1a:b4:5f:91:d9:1f:b8:7d:
         44:5b:26:94:73:09:45:49:fa:49:8a:32:87:0d:af:ba:9f:2b:
         90:17:96:2a:eb:15:0f:3c:5a:d9:7b:43:0e:f8:3b:9a:22:4f:
         e9:0b:05:3e:56:7d:61:90:88:6f:ae:db:2d:92:11:e1:58:1e:
         c7:92:2b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:30:05 2026 by rpki-client