Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21e30966-1560-3fc3-86b8-d02897b182db.roa
File:                     21e30966-1560-3fc3-86b8-d02897b182db.roa (raw, json)
Hash identifier:          zFt3Xe6VBkCfV11jlGuZVmsjz4GL/UxjjOo/JWZ8YQ8=
Subject key identifier:   D7:EE:58:E5:22:9E:74:ED:DA:55:9B:3C:25:63:39:E0:57:F6:71:5D
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584BBE4051C9EFDCC08383BA0200
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21e30966-1560-3fc3-86b8-d02897b182db.roa
Signing time:             Tue 04 Nov 2025 02:00:31 +0000
ROA not before:           Tue 04 Nov 2025 02:00:31 +0000
ROA not after:            Mon 02 Feb 2026 02:00:31 +0000
asID:                     7029
IP address blocks:        69.40.56.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:be:40:51:c9:ef:dc:c0:83:83:ba:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Nov  4 02:00:31 2025 GMT
            Not After : Feb  2 02:00:31 2026 GMT
        Subject: CN=ead49054-418c-43c0-8daa-d3462019035d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6a:09:ae:3f:5c:ee:37:97:15:ed:1c:9a:ad:
                    af:75:8e:16:43:53:6e:83:44:34:bc:05:64:07:06:
                    94:21:83:53:8f:dd:79:a0:90:5c:c7:6d:c6:03:06:
                    23:6c:ff:32:ad:57:a4:3e:9d:61:b9:71:55:d9:d6:
                    fd:9f:50:82:f7:8f:8d:56:88:e4:41:00:d4:85:9d:
                    38:3f:74:8f:a2:bb:e6:4e:e6:13:cb:a4:df:94:79:
                    05:5f:61:f7:db:08:2c:a1:85:b7:fd:d9:f4:13:0f:
                    6e:25:ad:d5:87:38:09:56:ae:b6:dc:74:17:f0:54:
                    d5:43:dd:c1:e1:69:ae:b3:d5:9e:ac:48:2e:6f:84:
                    87:7a:10:85:a0:e4:c9:5c:34:b7:11:32:ed:7f:f1:
                    5d:9d:9f:e7:7a:e8:f8:4a:d9:cb:17:1d:04:98:a6:
                    11:a4:d0:dd:02:19:56:40:82:ce:0f:3e:53:b1:ea:
                    d8:3c:c3:91:44:aa:e0:83:70:5c:d5:db:32:3b:18:
                    f8:a6:ff:bc:27:a0:e9:83:6a:4b:60:03:c4:08:fe:
                    0f:37:72:6e:15:39:bd:f3:96:a4:2d:d1:7b:b0:44:
                    52:6b:91:c2:77:27:1a:14:42:cd:17:91:b7:08:25:
                    f2:1f:da:81:7c:fd:f9:d2:d3:03:5e:ab:5f:80:0c:
                    74:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:EE:58:E5:22:9E:74:ED:DA:55:9B:3C:25:63:39:E0:57:F6:71:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21e30966-1560-3fc3-86b8-d02897b182db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.40.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:9f:87:05:87:e4:0b:fe:89:77:3a:9e:75:34:ec:c8:4d:79:
         e9:97:44:c5:00:6a:93:43:46:05:48:8d:7a:d8:db:d5:b4:15:
         67:c2:61:ae:8b:fb:23:fb:a2:60:67:33:52:c3:40:a4:16:26:
         01:c7:d8:2c:4a:28:da:77:59:ca:b0:a6:ce:45:9d:cf:17:bb:
         ef:66:fb:65:7e:0e:bb:4b:98:68:36:9d:5c:cb:5d:f0:d3:15:
         0e:75:93:c0:42:9a:de:7a:ab:60:2a:24:c1:db:fb:c4:bf:50:
         9a:dd:f2:46:08:15:85:6d:bf:43:a4:6b:db:60:fd:ac:31:1e:
         75:fc:a9:56:2d:92:36:37:8a:cd:cf:ed:8e:2a:21:1e:45:d3:
         f4:74:00:b9:3e:0f:b5:e1:f8:a6:d1:f9:c5:9b:99:d5:e5:76:
         c8:dd:ce:33:fe:45:22:61:f4:a2:e6:72:5d:7e:5c:d1:e4:fc:
         a1:16:29:01:f2:71:73:54:c0:86:61:6a:6c:ed:f9:86:f9:c8:
         56:d6:4a:67:1d:41:96:84:9e:b7:40:4c:13:77:ba:f2:24:3c:
         c8:b6:45:cb:22:ed:a4:4b:a0:2e:d1:04:67:b8:56:3d:01:78:
         ce:6f:2b:b1:ea:32:6e:36:5f:85:b8:2f:3a:e6:65:33:19:1c:
         3d:d9:15:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:59:47 2025 by rpki-client