Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c3503e4d-f8af-3c8f-9581-42da4ef0073e.roa
File:                     c3503e4d-f8af-3c8f-9581-42da4ef0073e.roa (raw, json)
Hash identifier:          /C+jv1ab5LKPRMEcUuRAFBMv13Dm5/5urzKunYd61Qw=
Subject key identifier:   0B:C2:96:BF:76:9A:B5:24:19:29:BA:49:CF:DE:68:4B:84:9E:D4:9A
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584F4986201BF9571B42A17D8500
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c3503e4d-f8af-3c8f-9581-42da4ef0073e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7029
IP address blocks:        151.213.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:20:1b:f9:57:1b:42:a1:7d:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=1fec29e9-150c-447d-a9e1-5ee5669ef401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5c:28:f5:1f:67:c3:40:97:26:a7:68:09:b7:
                    11:b4:6d:55:86:a3:0c:bf:0b:a2:f8:a5:72:42:9d:
                    a7:11:68:ab:e3:f9:7d:e7:f9:97:fd:ee:f6:61:1a:
                    ee:78:3d:f1:f9:0d:7f:8f:4c:68:b1:91:2b:b0:e0:
                    de:21:60:9c:1c:1f:a3:8b:a7:a3:7b:39:a0:bb:1e:
                    f2:d1:b1:07:2d:56:47:f5:29:ae:e7:65:5e:bf:cc:
                    30:1f:d7:a7:ae:48:8d:62:5d:3c:9c:5c:ff:e8:b4:
                    2f:ec:a3:91:3f:20:5b:ac:e1:d8:3c:25:28:da:0b:
                    c4:9b:53:52:e8:d5:ac:8b:1a:3e:4c:b3:6c:ed:af:
                    47:06:b8:7b:ed:20:92:a0:87:cb:bb:a7:1d:79:bf:
                    8e:3b:c0:8e:5b:ec:97:c2:4c:49:d6:20:a5:8b:4f:
                    44:52:88:99:64:c3:46:ec:ea:1e:7f:f5:2a:83:4a:
                    34:59:db:93:ca:32:f9:a7:6b:7d:26:70:b9:f1:38:
                    0a:38:9d:f5:03:2f:c7:fd:9b:87:cf:8f:5c:58:e6:
                    1f:51:41:7d:82:17:7c:db:d1:25:6d:bd:48:89:e2:
                    d0:dd:f3:e4:aa:6b:65:d0:76:a3:07:de:95:16:32:
                    7b:e3:35:af:16:8b:73:9e:e7:fc:6f:ff:95:fb:f0:
                    67:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C2:96:BF:76:9A:B5:24:19:29:BA:49:CF:DE:68:4B:84:9E:D4:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c3503e4d-f8af-3c8f-9581-42da4ef0073e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.213.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:d4:80:e4:47:ec:cf:a2:c6:36:32:e0:42:92:9b:89:7f:00:
         ee:cd:48:73:5b:e7:d0:c7:7e:24:5b:d7:4c:f0:59:70:87:66:
         3d:55:e9:4e:ad:b8:78:a3:65:99:77:a9:19:93:62:a8:c8:2a:
         1f:5b:3c:f9:f8:dc:86:ba:f8:91:66:12:58:22:e5:55:68:ad:
         d2:9e:3d:78:92:eb:5a:3a:55:26:f9:bb:59:f6:88:cf:44:84:
         97:30:86:c6:35:3c:30:7f:8a:d7:24:c3:9c:18:91:ae:79:2f:
         c5:36:c2:1e:a1:fa:a0:bb:79:a4:11:63:f8:f5:ba:16:03:f7:
         02:fc:22:62:4c:92:a5:68:eb:76:f4:5a:e3:8d:0b:37:8d:13:
         26:73:93:a3:cf:59:1b:7f:69:a5:86:9e:63:5c:f1:dd:ff:5c:
         ff:e0:94:af:dc:8a:c8:34:3c:44:b5:95:e4:90:3c:df:b6:9f:
         3a:6c:5c:82:95:e7:9f:2b:9c:2f:0a:fb:34:ed:ad:fc:eb:1c:
         9b:9f:0a:8d:a9:53:6c:37:87:f1:81:2f:05:56:d6:af:66:67:
         7e:d9:3e:89:ba:7c:ec:51:b3:c2:9c:6c:9b:fd:b4:39:d3:44:
         ab:a4:a1:2f:2d:7e:aa:d2:94:5a:62:24:ed:dc:09:8d:48:ba:
         78:e0:4c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 07:23:43 2026 by rpki-client