Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dabf323e-14a0-380c-b75c-2b2dd35b54f3.roa
File:                     dabf323e-14a0-380c-b75c-2b2dd35b54f3.roa (raw, json)
Hash identifier:          /oJOSLnRqjZtZa59kMARPSWMOOQXw+qq0nJiGqgeT7c=
Subject key identifier:   CB:1E:63:8C:D4:93:8C:D6:05:DD:FA:B7:FF:C5:D8:A3:19:99:F6:08
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584D300A9CD0986930C1DADBFE80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dabf323e-14a0-380c-b75c-2b2dd35b54f3.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     7029
IP address blocks:        205.232.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:9c:d0:98:69:30:c1:da:db:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=192317ad-8caa-409c-ad9a-9ef08e574ca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:59:b8:eb:fd:4b:8f:f0:07:73:9b:a4:35:2c:
                    2a:11:bc:31:ec:05:e4:eb:d6:e7:91:13:8b:68:2c:
                    55:29:f5:82:66:97:8e:51:1a:f7:41:74:e8:cf:52:
                    9b:38:cb:bf:4d:a3:f1:75:e1:ab:55:36:27:e0:55:
                    0d:b9:da:e0:15:2d:56:6e:bd:bd:45:53:ac:0a:ca:
                    58:37:df:ab:25:3f:6f:75:3e:ce:84:a4:cd:60:f2:
                    3d:d4:ea:63:81:85:34:65:b0:70:35:b3:da:86:29:
                    c3:62:fb:79:25:31:61:33:27:ea:f9:ee:b6:80:d1:
                    e9:6a:4a:87:c5:9b:9d:33:bf:81:c8:62:2c:c4:d4:
                    26:76:8e:ae:64:93:07:84:b8:0c:21:0d:d8:1e:6f:
                    81:df:cf:85:ac:00:f4:f9:2c:92:a0:c4:b6:bc:0b:
                    d7:4e:02:b9:8f:12:17:02:fa:75:c6:97:cd:88:5b:
                    84:72:cc:22:20:dc:00:d1:c2:d0:21:fb:98:9d:ae:
                    49:2b:54:a0:aa:4f:3f:9f:a4:0d:7d:22:a5:8c:a5:
                    72:9d:2d:73:fb:eb:9c:7a:8d:a8:56:ad:f1:b5:d7:
                    bc:57:11:15:1f:e0:fc:3d:a1:29:40:78:4d:99:da:
                    87:42:03:1f:bb:bc:e2:77:0f:98:47:18:1b:57:e5:
                    91:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1E:63:8C:D4:93:8C:D6:05:DD:FA:B7:FF:C5:D8:A3:19:99:F6:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dabf323e-14a0-380c-b75c-2b2dd35b54f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.232.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:2b:ce:29:b6:ad:dc:96:9d:47:03:c2:90:94:53:62:4e:73:
         a6:ff:f7:5f:dc:44:ac:35:c3:2c:79:cd:fe:f8:47:b8:18:67:
         8d:ec:16:b0:ea:f7:68:4a:fa:d1:5b:27:fa:ea:45:81:fa:d3:
         f4:81:07:7b:48:2e:fe:4b:ff:39:16:7b:eb:57:6c:88:ef:9f:
         85:be:ca:c5:14:cb:3a:dc:66:23:e8:52:ba:75:18:9c:c0:4a:
         ae:09:a0:76:42:0b:6b:9c:a2:c2:26:0c:f7:96:3b:d4:80:c9:
         13:b8:57:4f:6f:9a:04:19:72:e1:6c:55:be:b6:6c:4f:68:0f:
         92:8d:c5:a1:bf:c5:72:11:67:25:b2:b3:ba:dd:d6:f7:ed:4b:
         ed:61:9d:e7:bf:a7:70:a6:29:9a:0d:95:fd:fa:67:47:cb:40:
         f4:f3:d4:0d:1a:21:e3:04:ea:d6:f3:33:06:a0:3d:a7:aa:9a:
         29:4f:ba:e1:88:b7:0e:cf:e2:cf:6d:77:7a:9a:c0:14:ee:cc:
         20:93:bd:b6:06:6e:c8:de:5e:e6:9d:49:35:63:24:67:f3:62:
         35:c3:c2:21:6b:22:e1:16:bd:b6:1b:24:24:82:9d:d6:54:1e:
         79:ed:d7:cd:65:d6:34:14:82:ca:7c:e9:18:b1:c9:54:f4:c6:
         e5:0c:97:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:38:52 2026 by rpki-client