Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/ec60ded0-1bfa-3e2e-af74-4a81ae7eaf1d.roa
File:                     ec60ded0-1bfa-3e2e-af74-4a81ae7eaf1d.roa (raw, json)
Hash identifier:          bLRb6ZIyxxakXn5ll7IBstmB0JhKgS/ynCsqSU0KyvY=
Subject key identifier:   E0:07:3A:E8:01:9A:43:71:AE:8C:D5:58:14:8D:59:36:93:26:C6:51
Certificate issuer:       /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Certificate serial:       010D0C9F4328584DB075928B6730E7EE47A3F2A0
Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/ec60ded0-1bfa-3e2e-af74-4a81ae7eaf1d.roa
Signing time:             Fri 01 May 2026 13:00:30 +0000
ROA not before:           Fri 01 May 2026 13:00:30 +0000
ROA not after:            Thu 30 Jul 2026 13:00:30 +0000
asID:                     19905
IP address blocks:        198.23.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b0:75:92:8b:67:30:e7:ee:47:a3:f2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
        Validity
            Not Before: May  1 13:00:30 2026 GMT
            Not After : Jul 30 13:00:30 2026 GMT
        Subject: CN=cfd447e2-f950-4d8b-ac63-5ec545ea1754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:39:36:f2:e9:b0:c8:f0:b6:51:3a:a1:e6:ff:
                    fd:67:f4:2f:e8:a7:69:16:61:b0:96:4c:ca:36:d9:
                    94:88:43:02:f2:d3:2f:84:6d:f5:b4:be:02:14:f8:
                    16:14:99:a7:66:80:e8:e4:2d:fc:3b:e6:0c:45:9f:
                    fc:90:f8:77:c5:96:4b:28:fd:b7:61:70:7d:c7:be:
                    00:c2:7e:b5:32:c1:30:33:d0:9a:fc:ed:ef:04:ca:
                    55:95:76:ef:8d:19:f4:c1:20:35:b3:f6:a7:7a:08:
                    27:7e:94:d9:74:da:84:74:2c:4e:cc:8c:44:fc:e0:
                    cd:cd:57:0c:dc:92:4b:ec:62:d7:52:c0:07:15:27:
                    7b:ab:49:f3:ac:84:5e:9f:db:20:b6:3a:f3:d0:e2:
                    bd:bd:34:9d:df:43:26:40:e2:9b:cd:1f:92:b5:87:
                    fc:71:90:80:0f:07:d9:dd:15:86:db:e2:d5:f2:1a:
                    7c:49:c4:09:a2:03:e4:ae:f6:bb:aa:e8:a0:9a:5f:
                    4c:f4:51:3b:1c:a1:9a:db:f8:e7:ee:97:07:15:b8:
                    50:53:37:04:85:28:ee:c7:2b:95:f0:da:62:3c:80:
                    fc:8f:fd:a0:2e:fc:0b:73:da:60:25:7c:5b:4b:a5:
                    be:1a:01:34:d0:8f:85:e8:ef:4c:b1:74:18:9d:5c:
                    70:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:07:3A:E8:01:9A:43:71:AE:8C:D5:58:14:8D:59:36:93:26:C6:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/ec60ded0-1bfa-3e2e-af74-4a81ae7eaf1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl

            X509v3 Authority Key Identifier:
                keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.23.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:ad:03:0b:0b:89:40:8c:02:40:0e:53:b0:0c:2f:52:7b:8c:
         fd:c4:4a:8c:0b:6d:77:a4:89:2d:a9:4e:32:6e:49:ed:b9:82:
         e3:71:9a:6d:b0:2d:1f:34:52:c8:91:2f:53:22:8b:44:7d:74:
         9e:fc:58:bb:5e:1b:b2:75:65:65:7e:79:bc:6f:80:1d:69:84:
         5d:c9:b9:f4:90:4f:62:8c:a0:1c:aa:9b:64:e8:4d:e4:0a:18:
         75:28:c3:8f:3d:d5:a7:d8:2b:e4:04:3e:80:3b:ca:c8:ba:54:
         bb:88:e9:72:73:98:86:ea:e9:4e:9f:ca:44:a4:d6:88:4c:bb:
         61:19:ff:f2:d5:c3:84:25:cd:06:f0:73:4d:b6:ae:71:92:e6:
         d8:46:01:2b:6a:3b:3b:fc:b4:7f:88:45:11:ab:7e:b4:7c:31:
         e9:bc:e1:64:56:cd:0e:58:53:42:78:07:af:cc:6a:84:d2:81:
         cc:a7:91:e6:23:07:39:b3:9c:68:36:f9:92:4f:3d:bb:b8:e9:
         55:a0:b8:9d:0e:aa:8d:29:c9:6c:91:fc:1b:d8:79:e3:07:01:
         3f:53:3e:1a:03:ff:c4:84:f7:09:03:c1:c5:55:e5:3a:f5:32:
         4f:f0:82:d8:2d:5b:28:34:0d:c7:ea:d7:af:9b:54:71:5b:5f:
         68:02:99:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:53:34 2026 by rpki-client