Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/94295925-4b63-31fe-9f02-827bd779d638.roa
File:                     94295925-4b63-31fe-9f02-827bd779d638.roa (raw, json)
Hash identifier:          +q1bK6PMKYssrmoxPNw7wHlTvEn6i1WzL4+7DavmHvQ=
Subject key identifier:   BE:83:B3:43:66:84:D4:0F:97:32:20:96:DC:48:FF:06:C1:7B:02:55
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584D300A9F5EEC321B2C00C6C980
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/94295925-4b63-31fe-9f02-827bd779d638.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     7029
IP address blocks:        216.214.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:9f:5e:ec:32:1b:2c:00:c6:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=d4b9f7a6-4ca0-4b1f-b89b-b74bf452be20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ea:19:35:dc:8b:9b:e9:0f:83:7f:da:21:68:
                    00:66:be:aa:56:76:a2:75:46:b0:e2:cd:83:2b:a9:
                    71:28:0d:c6:7a:97:09:7f:40:ee:21:16:e2:08:98:
                    c2:21:b8:85:85:21:aa:bd:8b:61:35:37:02:de:02:
                    67:2e:be:14:79:ba:ed:f2:d9:95:4b:cf:88:da:cf:
                    33:35:79:6a:e1:86:dd:50:c7:74:cd:37:86:ff:f4:
                    08:21:30:fa:8d:ab:9b:66:de:37:c2:7f:2f:ba:26:
                    1a:11:8e:1d:03:c9:6f:19:1c:f5:10:48:4d:2c:de:
                    e0:c3:8a:e2:d2:5f:57:8a:b5:0d:f7:b5:d5:a3:3d:
                    77:55:de:64:26:9b:b3:e5:f3:8f:a2:be:d7:fe:67:
                    0f:c3:63:ae:09:96:54:4f:e7:19:42:d5:d0:a2:bd:
                    99:21:75:b6:42:20:34:20:c0:1a:91:9b:f8:20:de:
                    82:f4:e0:a7:fb:8d:e1:d7:8e:e6:f1:6f:c7:2c:50:
                    0e:47:83:b6:f3:a7:d9:06:e9:c9:50:3a:ce:d6:f1:
                    c9:3c:5b:d8:b0:01:6f:65:3c:9d:a1:c6:c6:a2:1f:
                    dd:47:35:89:71:18:fe:84:af:48:3e:25:28:12:ac:
                    b1:ae:31:ea:23:05:c1:64:51:99:22:bc:2b:14:e7:
                    f2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:83:B3:43:66:84:D4:0F:97:32:20:96:DC:48:FF:06:C1:7B:02:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/94295925-4b63-31fe-9f02-827bd779d638.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.214.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:e3:3c:3a:9d:ce:bd:db:5b:84:eb:bd:81:12:86:98:b7:54:
         ff:aa:b7:b0:c8:3d:4e:a8:17:d6:8a:a3:5c:c5:57:e3:f8:bc:
         9f:ee:a7:02:3d:b8:33:43:c2:5b:c3:ab:5d:36:91:2b:bc:3e:
         e2:e9:b2:c5:03:4e:62:0b:f3:e5:a9:99:98:25:83:6a:80:03:
         fd:b0:e8:b1:09:12:8e:fa:cb:76:a7:a5:11:a7:bf:52:19:fe:
         7b:0d:0e:cf:e3:32:97:05:3c:eb:89:3c:b6:9f:5a:31:ad:ac:
         fb:ed:98:1e:27:94:8b:99:e5:ea:4f:62:23:f7:82:db:82:e7:
         b6:26:f4:79:bc:26:74:2d:ff:b3:5f:29:9a:9a:7e:50:1d:a9:
         93:13:59:61:9d:ef:7f:63:1d:6b:18:d1:bc:70:5a:6f:af:e0:
         a1:a5:92:01:e5:17:05:4b:de:52:50:66:4f:44:5c:64:d5:0a:
         5f:d2:fd:d5:4c:3f:37:cd:d4:9c:f0:fb:35:e2:55:a1:d0:8c:
         9a:76:a7:97:f7:1c:ac:89:ec:9b:c1:94:4f:c9:7d:3c:4c:49:
         8d:aa:d1:c0:2d:5d:f5:0e:8a:e8:fb:18:f9:a1:91:d4:b4:06:
         48:8c:b1:7d:a3:7f:c1:b0:e5:ed:10:d4:5f:04:e9:79:66:10:
         5a:e0:1e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:26:56 2026 by rpki-client