Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b9f849f9-e596-3f52-93a2-e526e4138027.roa
File:                     b9f849f9-e596-3f52-93a2-e526e4138027.roa (raw, json)
Hash identifier:          u4+V5ly7A26+rgou7DcWt3u5zEPgUKYf1ybDgfEhx7U=
Subject key identifier:   4A:68:31:01:E0:0F:AA:A8:C5:56:51:63:DA:EF:27:DC:37:E1:47:DA
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584D2BDA36FE1EFFD10E5FB626C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b9f849f9-e596-3f52-93a2-e526e4138027.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     7029
IP address blocks:        71.31.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:36:fe:1e:ff:d1:0e:5f:b6:26:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=a6211865-8f4b-4ffc-9d0c-9e6a742502b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:35:fe:07:3c:60:b3:10:cc:09:ac:4a:1a:5e:
                    60:72:a3:17:73:65:f8:39:77:18:a7:bf:82:4f:c9:
                    8d:b9:15:0f:38:74:fb:75:c1:e7:7f:b9:ed:f6:3a:
                    49:6e:9c:31:2c:18:9c:ce:a2:d0:b2:5d:ad:53:7e:
                    45:d3:d7:6c:83:ad:ef:7b:ad:c2:1b:1a:14:f7:2b:
                    58:a9:24:0f:e5:6b:2e:aa:b2:84:1c:0c:0c:66:28:
                    70:d1:13:fa:00:3b:0f:63:58:59:a0:ed:6b:ee:32:
                    04:34:6b:15:df:ae:3f:4e:f7:fe:c5:6c:63:8e:e8:
                    d3:bb:16:ce:49:65:9a:77:4c:b5:ed:c7:48:d5:df:
                    d4:0e:24:73:66:38:64:94:61:e7:61:53:82:5d:bf:
                    7f:60:57:57:cc:dd:91:85:29:9a:ba:12:70:53:23:
                    f1:5d:59:a5:cb:4c:21:25:5c:b8:4f:b1:1a:db:8e:
                    f3:0f:12:0a:4f:eb:18:41:9c:be:05:bf:a4:b5:c2:
                    76:09:45:e1:51:63:11:3b:c7:03:e7:e9:76:74:3d:
                    07:cd:f3:36:2b:46:65:d6:e0:38:93:67:19:c1:f6:
                    0b:8a:47:2b:a2:20:cc:c8:cf:c1:d1:ff:74:fa:09:
                    26:c8:de:28:7e:37:eb:16:5c:29:f2:77:dc:84:ae:
                    66:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:68:31:01:E0:0F:AA:A8:C5:56:51:63:DA:EF:27:DC:37:E1:47:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b9f849f9-e596-3f52-93a2-e526e4138027.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.31.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:a6:a0:36:74:6f:96:90:e5:ed:34:41:45:1c:00:c7:9e:9e:
         02:ae:33:c5:35:58:34:4b:06:4d:f1:e9:56:3d:85:f3:c2:33:
         88:4f:75:37:6f:00:e7:f1:3b:f6:56:69:ca:ac:b7:60:e7:24:
         84:c8:9b:6a:86:09:f8:66:2d:4f:50:4d:9f:3a:cb:dc:33:c3:
         c0:13:91:56:7c:5b:40:1c:97:79:b2:f1:65:ef:bb:58:6c:ba:
         14:80:cd:00:70:95:6d:c3:bb:8b:71:dd:3c:84:7d:07:37:5f:
         cf:53:a2:51:73:f3:13:84:64:b4:8c:d2:37:01:24:5e:27:2f:
         7e:97:6f:5b:b5:98:e5:5e:bf:5e:7c:36:0f:3e:0e:69:55:4b:
         d6:28:af:01:2a:b2:bb:bd:4b:dd:50:a5:f7:31:94:47:95:40:
         64:0b:81:34:2e:38:fb:c6:10:68:7e:bc:79:01:f5:66:2b:e6:
         17:5c:7a:0d:1d:ef:a5:77:eb:56:69:97:b6:3b:7a:f1:d3:c7:
         37:39:02:19:cc:67:7a:7c:60:70:c7:f1:d2:7e:fc:11:29:01:
         e2:3b:7f:3b:e4:1b:40:36:2a:7a:69:d7:e2:c4:82:aa:92:fe:
         fc:ca:68:39:79:f7:0f:54:6e:ec:09:c0:13:68:de:29:c9:98:
         40:cf:94:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:23 2026 by rpki-client