Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d5729030-dd12-3a6c-8da6-ac73c670fcb6.roa
File:                     d5729030-dd12-3a6c-8da6-ac73c670fcb6.roa (raw, json)
Hash identifier:          J58aRcJeh7ytvlmELoXU888Oqx954/S8rK+uQ7rUJkk=
Subject key identifier:   56:DE:23:7E:CD:3D:9D:3E:DE:82:8E:FC:66:B6:B6:21:E2:6B:C2:60
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584F23C2896233E43DA5F52BA600
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d5729030-dd12-3a6c-8da6-ac73c670fcb6.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     7029
IP address blocks:        208.101.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:89:62:33:e4:3d:a5:f5:2b:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=cf2a5637-d18b-4cf7-8a21-83cb67c7cdc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:bf:a6:4c:1b:2e:36:10:f3:04:b0:19:a5:58:
                    29:c4:3a:54:d2:8f:f3:ce:03:e0:7c:2c:8a:47:19:
                    b7:f3:df:90:d9:0c:8b:c7:b6:f1:c4:09:65:88:30:
                    26:48:b5:43:ae:5f:0e:e2:17:61:5e:09:4d:e0:6a:
                    a1:c3:53:a6:da:67:92:31:e4:a4:83:d9:90:88:ea:
                    47:c1:c4:a2:ce:94:f8:e1:bb:c5:1f:cc:c3:ef:41:
                    d3:b0:d9:2b:24:e4:0c:97:70:c4:c1:39:21:89:86:
                    a8:a2:b5:8b:20:37:79:bd:77:de:24:c8:08:d3:46:
                    2d:ba:7b:bf:5b:46:0d:4f:f4:2b:b5:07:7f:fe:71:
                    62:22:46:80:9e:86:3f:74:0a:16:2e:0a:94:8e:71:
                    ba:7a:36:50:28:17:d8:34:3d:9f:b4:d7:ad:be:f2:
                    60:6c:08:f1:4e:a6:23:2c:ee:70:0c:03:da:8f:0c:
                    8c:e0:05:f6:01:43:3f:a1:94:9b:8e:3d:e4:9e:a3:
                    1a:e5:b4:1e:e2:47:0e:c7:64:84:59:90:1a:78:af:
                    be:1e:fe:13:7a:93:6c:e5:76:d1:e7:58:dd:21:35:
                    1d:92:fa:e9:1b:ce:72:e0:af:51:37:f6:0d:a9:f5:
                    9a:bb:8f:63:07:08:13:91:03:b6:a0:da:b7:e7:19:
                    74:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:DE:23:7E:CD:3D:9D:3E:DE:82:8E:FC:66:B6:B6:21:E2:6B:C2:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d5729030-dd12-3a6c-8da6-ac73c670fcb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.101.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:d0:e5:37:93:30:a8:17:91:21:c5:7a:43:b7:05:37:ff:3b:
         89:20:c3:f3:67:d2:e5:1b:f2:34:50:31:57:40:89:a5:6c:55:
         d7:68:3b:9d:94:66:85:d2:31:c5:38:e6:ec:bf:de:93:4b:04:
         95:98:33:fe:c7:52:5a:cb:3b:7b:7d:36:eb:83:89:e1:07:a4:
         1a:01:7a:d4:bf:93:8e:e0:39:83:b6:07:06:41:c7:47:b5:05:
         0f:8b:7b:6a:f6:6a:29:ae:b9:40:34:a8:e7:b5:75:6c:43:aa:
         f5:b4:e1:db:a3:48:93:7c:b9:3e:7f:cf:93:03:e4:6b:54:b0:
         23:f3:5f:ba:2c:d7:04:cf:1f:2f:bc:24:62:95:2e:92:0f:cf:
         38:b2:fe:2c:73:91:57:2e:dc:85:5e:d5:e9:78:e2:bd:85:92:
         0c:b3:9d:31:c9:db:43:99:ea:74:ba:89:8d:f3:fe:f8:3f:e0:
         a6:6e:31:dd:d8:35:b8:21:6d:49:84:71:90:b9:1d:93:f8:b7:
         15:97:ef:c6:60:39:18:d9:8a:34:09:38:b6:85:af:e6:11:2f:
         5a:fa:3f:c5:28:63:52:f5:8d:42:8e:1c:b8:b9:b1:f1:78:82:
         e9:dd:78:11:ef:34:d3:58:aa:93:94:54:6e:2b:68:e0:0b:12:
         29:88:6a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 11:24:30 2026 by rpki-client