Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bdc6966-5141-3334-888e-7e197a25c456.roa
File:                     3bdc6966-5141-3334-888e-7e197a25c456.roa (raw, json)
Hash identifier:          wH2QS3IulxWo8yrCznaM9o2SqUyR/kSSVEJXEHEqSaM=
Subject key identifier:   97:88:15:52:0B:B7:79:AD:09:AB:4A:BA:90:49:90:67:05:31:6C:44
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584D7F9A99175FE33BA3A5662400
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bdc6966-5141-3334-888e-7e197a25c456.roa
Signing time:             Tue 14 Apr 2026 01:00:24 +0000
ROA not before:           Tue 14 Apr 2026 01:00:24 +0000
ROA not after:            Mon 13 Jul 2026 01:00:24 +0000
asID:                     7029
IP address blocks:        71.31.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7f:9a:99:17:5f:e3:3b:a3:a5:66:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Apr 14 01:00:24 2026 GMT
            Not After : Jul 13 01:00:24 2026 GMT
        Subject: CN=93856401-7dfa-4676-a350-57f4bcde0d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:22:71:81:2e:78:0f:a1:b6:14:a0:f2:e7:ee:
                    1b:43:0e:7b:b6:f4:8b:37:a1:55:7d:7d:19:2b:6f:
                    dd:23:8d:de:a7:dd:42:59:29:73:78:9a:a5:f5:19:
                    b4:c9:5f:ee:92:ca:5f:fc:47:c9:68:8a:71:84:37:
                    61:96:b1:91:bf:2e:b9:8d:31:27:a4:69:0b:fa:ea:
                    0e:6b:7b:0a:74:6d:bd:5a:a5:0f:9a:f4:dd:f8:b3:
                    f6:f2:58:a8:c8:31:f9:07:14:87:cd:54:35:05:15:
                    34:58:73:2b:4a:06:94:8c:d5:d5:b7:38:b2:94:7c:
                    71:a9:cc:45:b2:0d:e6:3b:18:2b:ad:5a:40:d1:df:
                    34:57:26:86:7b:3d:00:fb:ec:6b:8a:8c:46:d9:cc:
                    66:36:23:c1:5f:7a:16:ad:9d:f1:4e:87:a7:a1:67:
                    fd:34:3e:ba:7a:58:1c:a5:ba:9f:f4:7c:b6:7d:9f:
                    e5:72:c2:6a:8e:35:c1:99:22:61:2d:17:dc:0e:8b:
                    e4:cd:58:23:67:d7:39:84:d0:00:1b:1d:84:bd:91:
                    b6:4f:49:bb:3f:e6:45:39:43:61:9a:35:94:d6:e2:
                    42:d9:7f:89:74:03:ee:16:3a:6a:6c:ed:cb:26:bb:
                    b4:4c:05:99:00:6c:83:78:df:4e:2c:a2:97:12:25:
                    51:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:88:15:52:0B:B7:79:AD:09:AB:4A:BA:90:49:90:67:05:31:6C:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bdc6966-5141-3334-888e-7e197a25c456.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.31.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:ca:2e:15:50:f8:f7:fa:6b:36:f5:ff:ef:ee:4c:c4:04:75:
         6c:96:25:fc:2b:49:c8:c9:b4:e3:61:57:d0:2b:c9:1e:d6:b1:
         45:b0:95:cc:47:33:8b:f3:2d:4e:be:c4:c6:1a:f8:b1:3d:1d:
         2f:ab:8a:31:03:7c:2b:2a:fc:ee:f9:c7:6a:fe:89:15:af:7c:
         08:76:c1:fd:3a:b0:a0:42:ec:82:da:03:06:fa:aa:af:f8:02:
         b9:f9:5e:ba:a7:aa:ba:7a:23:fd:a3:77:f2:d6:82:0a:2e:32:
         7d:f6:99:6e:ee:9a:18:bf:67:5f:5e:77:a7:b0:49:be:4c:5c:
         b2:d5:7b:60:9e:90:c4:8a:f4:f2:64:2b:eb:f7:18:a3:72:9d:
         e1:98:82:2e:a6:46:57:40:91:9f:ff:fe:be:3f:a9:9e:2d:55:
         54:07:3c:77:a7:c3:f8:6a:2c:1d:f9:89:08:2b:3f:12:15:11:
         a5:aa:af:f0:89:cd:17:aa:13:e3:a7:0e:a8:3a:2c:50:42:bb:
         f2:2a:12:7d:c1:cf:e5:b3:f3:ac:6e:0e:64:eb:1f:fe:0d:42:
         53:6e:ce:3e:8e:6d:47:f9:02:82:e6:e5:b0:21:76:7c:fb:1f:
         f5:d2:7b:91:dc:55:7d:3a:b0:0b:ee:17:75:f2:8a:06:95:d3:
         4e:6e:4c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:42:18 2026 by rpki-client