Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c78658c-11ab-3125-b2fe-4bb271c7f3a7.roa
File:                     4c78658c-11ab-3125-b2fe-4bb271c7f3a7.roa (raw, json)
Hash identifier:          n+5FPcq6edZL4kDTrQ5FHvLQgyvLVRn9Tu7IYFJVJag=
Subject key identifier:   27:60:89:DA:11:8F:D5:76:29:B2:1C:C5:3F:F0:7C:CB:83:81:FF:D2
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584E104F1A8C9F973FBB12A40EC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c78658c-11ab-3125-b2fe-4bb271c7f3a7.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     7029
IP address blocks:        207.155.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4f:1a:8c:9f:97:3f:bb:12:a4:0e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=4fe8a8eb-f4e7-4470-8fc1-d90505f25046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9f:05:58:6d:c9:7d:c2:d4:4a:7f:5b:de:3d:
                    88:12:30:72:b5:b0:43:22:33:28:86:14:8e:82:48:
                    63:c3:91:6f:99:ec:9f:eb:f9:01:c9:53:3c:02:b9:
                    04:28:a1:93:9f:86:b6:bb:95:78:aa:65:55:a2:73:
                    ba:86:a8:0a:84:06:9a:f1:b8:20:52:3c:0d:72:87:
                    bd:8d:0a:c2:70:03:0a:c2:c1:7a:b8:3f:59:2f:1c:
                    c4:0e:e5:34:4b:13:71:b5:50:0f:22:90:c3:3f:9c:
                    ac:3d:2f:a1:14:eb:89:4e:14:b1:d7:df:c5:3a:c4:
                    b4:65:54:96:7f:b8:f2:23:96:9e:02:e2:1e:d1:96:
                    b5:ba:ec:2a:46:f3:a9:a4:26:f5:77:5f:0a:0b:7c:
                    d2:55:14:eb:33:84:d5:c6:6a:0b:fd:78:bb:2d:31:
                    a9:8f:ae:72:4a:33:49:56:bf:83:fe:6d:a0:fb:b7:
                    43:81:7d:ce:9f:51:d9:d1:19:71:9e:33:72:f3:c5:
                    67:ea:1b:cc:99:e2:b5:62:8b:91:65:ce:5d:32:a0:
                    3c:bf:ce:fe:43:9c:8b:ec:f0:98:56:c3:d4:19:2b:
                    cf:1e:b9:f6:3c:14:84:7e:4f:d4:27:28:ae:46:49:
                    d0:64:8b:1b:be:f1:54:d8:a6:34:c1:56:f2:e5:02:
                    1a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:60:89:DA:11:8F:D5:76:29:B2:1C:C5:3F:F0:7C:CB:83:81:FF:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c78658c-11ab-3125-b2fe-4bb271c7f3a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.155.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:fd:a3:7b:08:66:da:e9:83:5a:33:00:75:ea:69:07:c2:d8:
         d2:9b:9c:4e:c7:ac:dd:0a:a4:df:09:8a:b7:70:fb:02:a1:87:
         21:93:2e:2f:2d:d7:99:96:4b:93:08:28:1e:bb:ad:2d:92:1a:
         13:7d:af:fd:53:4b:f3:09:f7:0e:ba:4e:80:7a:88:5a:a3:0a:
         9e:28:67:01:57:eb:94:d9:93:91:67:f0:b2:c7:75:8b:bd:b0:
         c2:f5:61:2c:24:de:8b:b9:94:f4:b4:8b:a7:87:ec:a9:9b:e1:
         5c:af:17:bb:c6:81:af:a1:2e:bc:f1:5b:16:27:04:ea:55:11:
         6b:b1:20:27:9e:5a:29:a8:55:ff:a2:8b:17:7a:6d:8e:4c:12:
         7e:bd:1c:2c:19:02:f3:4e:0d:d6:7e:16:ce:70:d9:b3:d2:a1:
         dc:64:b9:e1:5b:14:5b:a5:8e:6a:f1:a4:fd:9b:be:42:99:e4:
         3d:ee:81:b8:b5:af:b9:70:af:2b:ff:3d:61:8f:cd:45:54:aa:
         dd:bf:a8:ea:84:05:11:a4:31:4f:1c:ab:bd:57:e4:85:21:49:
         2b:ff:fe:62:b7:c1:c7:44:c7:7e:32:3a:d5:1d:5b:9c:c3:2b:
         c9:46:1d:37:dd:0c:ad:a2:7a:ce:9c:bd:94:db:f2:1d:3e:d0:
         b7:1b:21:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:55:23 2026 by rpki-client