Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d0ed1e6e-cd53-336b-ade0-c38427c13588.roa
File:                     d0ed1e6e-cd53-336b-ade0-c38427c13588.roa (raw, json)
Hash identifier:          Gnd/gSk+rOYzxTDhTtMU39sAs3s+M372CUSD1Tu/NbY=
Subject key identifier:   B6:B0:9D:31:60:1D:CD:0C:22:68:7E:A2:11:C2:45:07:11:1E:A3:C3
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584D300A423BAF9B4DD19D61C380
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d0ed1e6e-cd53-336b-ade0-c38427c13588.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     7029
IP address blocks:        75.89.210.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:42:3b:af:9b:4d:d1:9d:61:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=6815b84b-35d3-42b8-9ac9-7c62aa723be6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2e:f1:9e:cc:1a:3c:89:24:af:56:0f:f2:ec:
                    ae:35:4c:d0:4e:99:30:4f:d0:c8:e6:b3:3d:29:c1:
                    d2:8c:12:ee:a9:dc:33:5e:64:b3:1c:be:19:c1:1d:
                    c8:59:08:d7:30:ba:99:26:34:10:90:9d:20:53:e5:
                    d0:76:24:59:95:a5:98:9e:68:c5:96:11:e5:1d:75:
                    62:c1:ed:92:4a:a1:e0:69:95:c8:43:00:a0:f0:59:
                    bb:7b:3c:27:11:08:be:67:f6:b0:d8:ae:50:5a:ea:
                    1e:52:47:5b:f6:1d:26:c3:2e:d3:f3:d5:b8:9a:ee:
                    0c:6e:e1:a8:43:2d:20:c8:91:57:e8:b2:ca:ed:45:
                    05:9f:a6:d2:08:56:a1:fc:12:5d:93:98:3a:6f:0a:
                    d2:88:f3:6d:9e:23:8b:3c:e7:4e:52:e6:0d:db:02:
                    20:03:e4:a7:8a:53:86:ed:41:30:74:e9:88:10:23:
                    8c:76:a1:32:59:b9:4e:02:f6:88:a4:67:f6:b9:a1:
                    38:3c:2e:2b:b6:c4:8c:03:ce:8c:f8:c6:69:ae:9c:
                    10:d5:95:13:45:82:d6:d2:23:6c:37:3e:4d:d3:70:
                    10:ae:32:79:1c:32:74:35:f7:9b:5f:d0:77:ec:7e:
                    a5:73:d3:c7:06:e3:a1:20:c3:eb:08:c9:14:24:6e:
                    f0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B0:9D:31:60:1D:CD:0C:22:68:7E:A2:11:C2:45:07:11:1E:A3:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d0ed1e6e-cd53-336b-ade0-c38427c13588.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.89.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:28:41:45:ad:33:ad:63:e4:95:c9:84:dc:96:31:db:11:56:
         ff:2e:a6:42:bf:a8:65:0d:ed:32:85:6c:27:a8:70:41:ce:db:
         2e:6d:03:12:8f:93:ec:cf:32:33:a6:ca:b9:5c:a3:9f:dc:b4:
         5a:25:a3:66:bd:1c:d2:87:b7:d1:6c:93:b9:ad:d0:83:3c:d3:
         59:38:a6:f0:73:01:79:ff:59:fc:6c:5f:0a:3a:2e:6d:63:fe:
         20:80:58:63:5a:db:44:db:6c:52:a8:5b:62:3f:94:6e:a2:a8:
         6a:77:70:c7:6a:3e:e9:42:67:37:3c:0d:07:82:a0:5f:af:b4:
         8b:af:b1:b9:0a:69:c0:a9:74:e1:79:2b:6b:bb:d1:f8:20:db:
         cf:78:71:f5:44:da:4a:f8:c6:c2:a8:cd:c1:5f:98:70:d3:e0:
         3e:cb:20:9c:7f:9e:2a:74:6f:59:45:a6:5a:72:27:9f:a3:ba:
         32:3c:ae:d8:3e:80:83:9a:85:ea:87:07:40:63:1d:c2:bc:85:
         58:9d:2e:b2:31:60:31:97:63:a2:0f:8b:6b:40:d4:41:4f:c2:
         63:3d:d8:60:1f:16:46:cd:eb:7a:31:01:3f:b9:0d:91:02:23:
         0e:73:9a:3d:82:6c:a3:66:29:b6:75:73:a3:f9:58:3b:dc:61:
         4e:a6:69:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:22:38 2026 by rpki-client