Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e5e9155d-ef98-35bb-95a4-1f9c709c73f7.roa
File:                     e5e9155d-ef98-35bb-95a4-1f9c709c73f7.roa (raw, json)
Hash identifier:          D+iw9VFIizgy+Ki1HtdDW+OHmsIQ1ueotkbgBJH4bhA=
Subject key identifier:   1D:D0:11:8A:B6:F5:A9:72:B2:7D:B4:56:1C:D3:C7:63:08:D1:E9:14
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584D300A76E04ACC6259EAF60AC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e5e9155d-ef98-35bb-95a4-1f9c709c73f7.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     16560
IP address blocks:        162.39.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:76:e0:4a:cc:62:59:ea:f6:0a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=4148656b-9001-49fd-8e2b-02513a574003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:18:9c:72:d0:55:ed:e1:49:9d:52:97:e8:d7:
                    20:7b:8d:9a:3c:f5:25:f8:e4:9d:aa:06:f4:ce:0d:
                    32:37:a9:c3:53:71:65:fc:52:30:02:18:36:3e:3f:
                    02:74:41:9b:9c:12:d6:c6:36:bd:8c:c5:4d:6f:59:
                    2c:aa:8f:17:ef:49:67:63:b0:d9:2c:15:9d:63:d9:
                    98:f0:b2:c9:b4:cc:db:cc:91:3d:dd:be:6d:d5:ec:
                    cb:fe:fb:e2:cd:5e:b8:ea:4b:65:30:0f:8d:cb:07:
                    d7:18:3c:9b:30:26:10:b3:a6:c5:6a:5f:32:30:cb:
                    13:d1:de:0a:70:73:a9:e1:e3:c0:69:78:ef:ab:da:
                    3f:31:56:60:74:f5:93:0c:7b:af:7c:9b:ba:2f:97:
                    78:5a:13:3e:d8:7c:ae:82:67:85:7d:3a:7c:be:0e:
                    09:ee:38:ec:f5:82:ab:e7:ae:aa:3d:f9:22:a5:6b:
                    bf:dc:7f:12:d0:14:20:c0:f6:b9:47:4e:03:11:94:
                    5d:09:e9:cc:6f:06:5a:1e:28:85:44:d4:13:60:3b:
                    09:5c:e4:d6:c0:6a:65:f5:ea:91:62:71:05:f5:8e:
                    af:42:34:3d:79:62:38:e5:eb:a2:64:92:d9:ed:8c:
                    91:a1:16:18:54:5f:6f:b9:5d:7b:b0:e0:bf:a9:8e:
                    fd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D0:11:8A:B6:F5:A9:72:B2:7D:B4:56:1C:D3:C7:63:08:D1:E9:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e5e9155d-ef98-35bb-95a4-1f9c709c73f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.39.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:c4:1d:0c:c4:85:00:d2:bb:b5:1c:fb:4b:04:53:ab:4f:ca:
         f7:88:e0:1a:11:4f:6e:52:c5:5d:5c:c5:56:6a:11:05:f3:75:
         9a:3b:0c:a0:a9:5a:1c:0b:58:8b:24:02:c9:e3:b2:fe:0e:13:
         98:26:2a:4d:0f:8e:0b:16:17:09:f4:37:3d:0f:d9:f2:80:5c:
         fa:e9:10:82:ce:62:57:7e:e0:cd:04:e5:69:c5:9e:57:49:fc:
         a9:2a:46:40:8c:25:4b:ba:19:b8:2f:d9:1c:c1:2e:e3:41:68:
         4d:e8:b9:a5:4b:39:d9:ff:36:3a:df:f0:4e:34:d5:27:70:ea:
         b8:c4:3f:3a:54:01:15:ab:f1:50:5d:35:9b:6a:45:0b:4a:c5:
         34:4f:f7:6f:6c:21:0a:79:b9:51:36:57:bc:df:93:91:07:ee:
         74:58:b3:46:9e:74:12:8b:0c:27:ca:13:78:76:00:5d:35:85:
         db:82:4d:93:b5:96:53:ec:7a:b3:98:70:ee:9b:df:48:3f:7b:
         ef:0b:50:01:22:13:a2:c0:48:02:85:0a:5f:c4:03:4d:f9:67:
         39:16:1b:f0:80:cf:d0:ac:f7:2f:31:19:f8:f9:5d:46:bc:25:
         5b:76:df:d7:9f:23:ed:d2:18:62:3e:c2:7d:78:90:c5:fe:7d:
         8e:68:e9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:40:05 2026 by rpki-client