Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d75ba6fd-c2e9-38bd-b4d2-0aaf2c64e221.roa
File:                     d75ba6fd-c2e9-38bd-b4d2-0aaf2c64e221.roa (raw, json)
Hash identifier:          PyaZLjOrGSjj1kD4jOPfubh373SFycbAFK/MU2/kpJg=
Subject key identifier:   47:53:6E:79:C0:07:F7:BF:E6:AD:34:BC:EF:F0:F4:30:55:B1:66:B0
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584D2644B9CA347B16862A8AF7C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d75ba6fd-c2e9-38bd-b4d2-0aaf2c64e221.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     7029
IP address blocks:        151.213.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:b9:ca:34:7b:16:86:2a:8a:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=7efd9bda-9a2b-42aa-9636-b0cc3407298d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:16:84:9c:91:a0:9f:e4:fc:d8:83:b8:c8:b3:
                    de:8a:07:26:9c:f4:af:8b:c1:0b:97:d3:a0:ea:74:
                    88:18:5e:48:a5:8c:47:03:5a:1c:33:06:50:fa:56:
                    00:25:d3:36:5e:7f:c0:83:9c:18:d1:2b:bc:cf:c9:
                    d0:b3:1f:08:e1:66:e9:56:27:b2:9c:8c:1d:d8:ac:
                    38:45:b3:e5:dc:9e:13:88:4f:58:96:39:dc:ad:eb:
                    59:02:e2:f4:c4:f4:c1:e1:08:16:e5:d5:3d:56:18:
                    19:f5:22:b6:45:93:78:63:e6:9d:ac:7a:ae:33:3f:
                    95:fa:58:86:16:15:e0:54:ce:2c:93:c8:21:db:22:
                    df:65:77:43:35:ee:da:85:78:12:fc:5e:67:6d:16:
                    9f:23:5d:78:d0:fb:2b:38:44:d3:5c:c3:e1:f2:fb:
                    c7:0e:9f:3c:f4:a3:00:39:7c:7c:24:98:d9:a8:8a:
                    83:26:94:d7:c8:76:49:d1:9e:9f:ba:e6:d3:66:79:
                    fa:fb:b3:1b:a0:de:a4:65:8e:da:77:4e:fc:2b:91:
                    be:bb:51:78:c6:57:6f:ab:80:ac:a6:92:c8:f9:0e:
                    c8:8d:9a:86:fd:a8:12:27:6e:6c:90:2e:ad:09:7e:
                    e2:ea:ea:8e:6c:49:f2:64:4a:a4:3a:e8:7e:bf:00:
                    79:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:53:6E:79:C0:07:F7:BF:E6:AD:34:BC:EF:F0:F4:30:55:B1:66:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d75ba6fd-c2e9-38bd-b4d2-0aaf2c64e221.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.213.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:cc:e9:2f:4e:42:b1:d9:13:58:15:59:1b:5c:97:d7:34:a0:
         a8:91:e0:e6:e1:e8:1a:f2:01:70:b9:71:af:ef:e1:5b:4b:c9:
         08:98:44:e8:11:8b:ec:c6:e5:a4:0d:3b:88:aa:ae:44:d7:ce:
         b9:62:c4:24:d3:3b:f1:dd:b9:df:1e:b2:e1:74:8f:a2:bc:61:
         6e:17:ef:16:fa:cb:f8:5d:78:24:4f:75:65:33:08:a2:34:95:
         b4:90:cf:48:57:ba:6b:16:8f:3a:f7:de:c8:38:39:a3:0d:cc:
         6c:f1:54:80:a6:28:e6:17:df:95:30:f7:b0:6d:17:fe:7e:f9:
         f0:87:69:72:c8:ee:43:17:25:c5:ad:ed:59:1c:2a:b8:de:cf:
         e5:6c:f9:af:e8:c4:e0:6f:15:ea:b3:b3:18:27:c7:80:e8:73:
         58:11:62:d9:18:58:ce:33:ec:b7:24:e3:45:5b:9c:a4:c8:f8:
         94:78:29:04:d6:e7:84:7d:cc:51:95:e3:f7:40:b7:11:be:1f:
         d7:61:c1:da:12:90:c5:7b:a6:a5:45:5a:f3:52:bc:03:d8:3f:
         5b:d0:77:7c:7c:03:5d:ed:cf:bf:2e:1b:f7:96:10:a7:c8:8a:
         7d:8d:9a:94:f3:eb:de:ad:a5:d3:75:59:63:70:94:94:6f:99:
         60:1c:66:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:42:31 2026 by rpki-client