Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fcec51f2-e6d8-31a8-921b-47ce6911b45f.roa
File:                     fcec51f2-e6d8-31a8-921b-47ce6911b45f.roa (raw, json)
Hash identifier:          pcAVTCAYD89XIQ76sVbk+nFaOHN1SHPHK5UX8ZvMH4s=
Subject key identifier:   ED:98:56:2C:21:15:91:2F:72:15:4B:4A:94:7D:05:78:AA:6C:64:CD
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584D300AA81036FCCCCD868B6E40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fcec51f2-e6d8-31a8-921b-47ce6911b45f.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     55104
IP address blocks:        98.141.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:a8:10:36:fc:cc:cd:86:8b:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=3a9bbc62-bfd1-47b1-b56e-21a3804b6070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1b:13:69:40:d6:03:a8:47:6b:57:7f:b9:37:
                    35:7f:d8:24:38:cc:db:17:c8:de:01:49:a1:dc:8d:
                    b9:32:48:61:3c:80:ee:d6:dd:8b:6a:8c:4f:51:18:
                    3e:17:55:7b:89:e5:06:b9:99:76:df:fd:ad:18:51:
                    33:b4:88:4b:e0:bc:6a:ef:19:28:0e:d7:b8:88:cf:
                    ae:d6:c4:74:81:5b:52:68:29:80:f0:b2:bf:ba:d1:
                    ab:8d:c5:4f:d0:33:e9:65:cf:7c:59:e9:01:da:8e:
                    4c:05:24:7e:93:f5:18:b9:0f:a1:42:82:55:8b:59:
                    6d:64:29:06:8f:8e:ef:b7:a8:3c:29:a4:39:0f:57:
                    e9:e9:5e:69:5f:9c:c0:f6:32:7a:53:1a:03:fe:d9:
                    0f:67:2e:f3:35:1f:e5:7b:32:6d:8c:89:ef:49:de:
                    c9:a3:85:c5:23:c2:11:be:83:0c:dd:21:11:a3:72:
                    8c:42:74:5b:68:b4:71:c0:36:64:63:e1:02:f6:5d:
                    be:e2:69:07:a7:fa:87:a9:7c:d7:20:11:ec:89:cb:
                    e4:92:3c:e6:96:06:94:5c:b2:b8:89:0c:65:a5:b1:
                    30:fc:7a:8d:cd:42:d7:cb:4d:2d:80:15:2a:fc:a3:
                    23:1a:87:5a:85:20:79:02:09:6e:76:a7:a8:2d:a8:
                    bf:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:98:56:2C:21:15:91:2F:72:15:4B:4A:94:7D:05:78:AA:6C:64:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fcec51f2-e6d8-31a8-921b-47ce6911b45f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.141.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:12:dc:03:14:a7:12:18:e1:ad:6b:e3:9e:6e:85:ba:22:50:
         68:44:90:f7:cb:4e:3c:60:54:6d:5f:c5:f3:12:cc:54:be:fe:
         7e:c4:8a:5e:51:ab:ff:44:ac:38:ea:45:12:0f:4e:b4:10:75:
         a2:6c:36:4f:30:88:c6:7b:48:54:88:9b:5b:96:a6:40:98:57:
         92:96:3b:6b:8e:7a:7c:72:8d:65:cd:aa:f2:53:42:cd:db:71:
         3a:08:ed:07:5d:34:85:fc:53:eb:2f:15:4b:30:e5:6f:e4:bf:
         12:d2:37:cf:f2:cb:85:8d:f2:33:b1:7d:16:d0:00:ac:45:70:
         ec:bc:ae:6a:76:55:c2:36:c3:3a:a4:71:0f:11:e7:7f:2e:a1:
         ea:a4:37:01:89:c0:4f:d1:db:1c:76:18:79:5c:d4:be:4f:41:
         a4:42:6f:72:15:ea:b7:6d:78:27:4a:c1:68:5b:e5:11:dc:1a:
         c4:87:c9:b3:3e:bb:08:8e:ef:35:1b:ea:e1:a1:98:b6:6d:4c:
         28:0f:b8:cd:bf:92:5d:50:ba:be:e4:3d:41:29:f8:0a:e5:50:
         14:b3:9a:ea:01:45:0a:9a:e5:53:b1:c5:a0:44:bb:49:e3:48:
         74:bf:36:87:c2:c4:f4:37:95:e2:6f:e0:a4:9b:80:05:a1:f8:
         84:f2:f1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:40:01 2026 by rpki-client