Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f9d1f996-66e4-37bb-a48c-1892a19f4fb5.roa
File:                     f9d1f996-66e4-37bb-a48c-1892a19f4fb5.roa (raw, json)
Hash identifier:          h53M+Gnbna0uSnTB4116IFD5KURZfiqxbitHYwRbjKU=
Subject key identifier:   F7:8D:DD:B2:E9:71:E8:E7:8C:AE:FB:C1:9F:A0:B4:F0:BE:94:CB:C0
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584DCAFB118E2735F03703B10A80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f9d1f996-66e4-37bb-a48c-1892a19f4fb5.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     7029
IP address blocks:        98.21.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fb:11:8e:27:35:f0:37:03:b1:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=4aaad67c-5221-43d8-b49b-633590f99374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f7:79:48:26:7f:58:35:81:97:8f:8d:68:05:
                    4e:df:6b:e2:6e:45:98:f8:e2:74:fc:7c:2a:af:d5:
                    91:1d:84:19:dc:8e:24:23:f4:c7:46:5c:40:6c:1d:
                    db:2b:ba:0c:9c:ff:37:98:c6:40:6f:6b:cc:fd:49:
                    07:13:e9:5e:78:7e:20:68:dc:25:f8:d6:c8:0f:bc:
                    ff:f7:51:51:26:ff:2d:78:de:80:3f:7b:3a:11:69:
                    68:71:3c:36:80:30:f6:9c:bd:55:2a:1b:f0:96:8a:
                    40:d3:42:de:16:d6:3e:6a:e2:38:2d:e8:1f:fd:1e:
                    89:27:89:a6:e7:a3:1e:1a:c5:3b:70:ac:c2:f8:c1:
                    0c:4a:cf:b6:ae:1a:5b:49:cf:8a:b0:39:08:f8:c3:
                    86:4e:b8:dc:6b:74:f6:1d:34:e2:0e:88:e5:93:32:
                    cb:0c:fb:3e:ae:74:a1:3d:f0:7f:67:0a:a6:38:4f:
                    46:50:3e:7e:1c:f7:14:34:e3:0d:cc:7b:5e:e5:dd:
                    9d:08:28:6b:ab:ba:df:98:dc:c4:48:30:73:4d:80:
                    62:9c:59:0d:8d:10:50:77:ba:1b:96:d6:e6:7a:65:
                    d2:81:89:c9:2a:a1:7d:d8:df:b3:75:7b:5b:2b:a7:
                    1e:6d:6c:0d:bb:77:13:aa:ab:a7:c6:7b:f8:25:7a:
                    13:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8D:DD:B2:E9:71:E8:E7:8C:AE:FB:C1:9F:A0:B4:F0:BE:94:CB:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f9d1f996-66e4-37bb-a48c-1892a19f4fb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.21.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:f6:2d:61:ba:40:ff:ef:d0:5f:1e:6c:e9:03:38:55:1f:6b:
         46:55:51:dc:92:ac:28:6b:5d:32:c8:79:85:0e:d8:60:f0:51:
         34:53:89:be:80:98:28:97:01:11:0d:46:87:be:94:87:a2:d1:
         8c:ba:84:81:19:15:1b:e3:1a:26:30:01:12:f6:4c:7e:5f:b2:
         c0:e2:b9:26:d0:f6:3d:97:9d:f5:cc:51:30:36:89:6f:b5:85:
         2a:1e:cd:71:6f:26:5e:32:6d:f1:07:8a:a5:a5:11:08:f9:ab:
         17:60:97:67:0a:3e:45:51:f2:04:5d:ec:06:a5:16:33:1c:b1:
         80:de:f7:29:4b:37:2d:ac:84:e2:01:c4:93:52:f0:36:e4:0d:
         ab:ad:f6:5d:5c:99:49:5e:6b:56:a9:1b:e3:91:51:1b:2b:8d:
         1a:f8:a8:a6:5c:3c:f4:e2:e9:7d:f6:a4:98:fb:7f:9c:17:6b:
         7d:8b:ce:74:69:44:39:b5:e3:c3:3f:f9:16:c3:4d:3c:35:68:
         1c:fe:28:d4:45:43:09:22:50:d1:5c:98:7c:59:ff:9d:3d:cd:
         0d:a4:df:08:5e:84:da:95:d3:0b:35:a2:bd:92:2a:d5:3f:57:
         e9:29:a6:a6:53:27:44:9e:a9:d7:fb:61:2a:81:9e:24:b8:5b:
         06:22:8a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:52:37 2026 by rpki-client