Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5dae7c24-e4d7-33ee-96fd-b80628dcbf04.roa
File:                     5dae7c24-e4d7-33ee-96fd-b80628dcbf04.roa (raw, json)
Hash identifier:          UwAOI5xYNX6sSh2sFMMMofrazmNPBjdy5HnnfTXCm6E=
Subject key identifier:   E4:B1:E4:49:BC:5E:45:24:B1:A8:D4:D3:86:53:FC:01:CF:A7:2E:80
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584D7F9A98873021A7C917C75A00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5dae7c24-e4d7-33ee-96fd-b80628dcbf04.roa
Signing time:             Tue 14 Apr 2026 01:00:24 +0000
ROA not before:           Tue 14 Apr 2026 01:00:24 +0000
ROA not after:            Mon 13 Jul 2026 01:00:24 +0000
asID:                     7029
IP address blocks:        69.40.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7f:9a:98:87:30:21:a7:c9:17:c7:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Apr 14 01:00:24 2026 GMT
            Not After : Jul 13 01:00:24 2026 GMT
        Subject: CN=c5c55d24-5c83-4680-9178-ca00dd66ab64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:05:f8:05:a4:cc:01:a6:fe:bb:1a:d0:50:1a:
                    11:86:89:3d:fe:03:a2:46:f9:b2:5e:26:66:8d:cf:
                    4a:bd:f4:88:a6:86:40:4d:9b:0f:ad:2a:7f:c0:da:
                    d8:64:1c:b0:2c:a2:d1:53:d4:3b:51:1a:28:13:3a:
                    31:29:20:f2:a6:9e:b1:fd:d6:c7:fb:28:f2:ab:e1:
                    60:a7:f7:83:67:52:06:fb:b6:1d:a8:e7:94:0e:fd:
                    76:3b:0b:71:c7:1c:69:5b:7a:ef:a2:34:13:dc:4f:
                    79:ab:e8:7f:39:f8:e3:3a:52:28:a2:f3:38:e9:a5:
                    15:27:f5:d0:21:15:1f:11:fb:7c:69:e2:2b:2c:d6:
                    8f:be:a9:9b:8e:e6:dd:3e:45:2f:01:f5:80:ea:9f:
                    bd:75:72:d0:a8:14:22:98:28:d1:a6:08:b6:b0:78:
                    77:d9:db:7c:19:43:1b:4f:b3:a6:27:0f:1a:b7:0a:
                    1c:4b:1c:0d:88:96:f3:cd:ec:a8:f0:46:b6:56:8a:
                    80:95:a0:7b:8b:a0:ff:84:56:3d:ac:e8:fb:f6:66:
                    50:31:95:66:be:2a:55:94:6a:d9:72:a5:b0:8b:11:
                    c8:50:fb:73:9f:91:a2:c9:98:31:67:4c:bd:24:93:
                    c2:a9:ea:c4:2c:c7:d2:1e:7f:b8:ae:b9:c2:cb:f9:
                    95:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B1:E4:49:BC:5E:45:24:B1:A8:D4:D3:86:53:FC:01:CF:A7:2E:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5dae7c24-e4d7-33ee-96fd-b80628dcbf04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.40.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:e0:58:0a:fd:a8:9a:36:5b:e4:54:cb:a3:ca:a2:02:0b:42:
         aa:81:57:0a:79:4c:29:e5:dc:f8:8c:7f:bd:c4:90:a5:c2:8c:
         10:11:1b:b4:e1:49:29:c0:af:0d:27:ae:fe:dc:2a:40:25:da:
         00:77:1c:2f:43:02:9c:23:de:98:ec:8e:b5:bc:cf:df:07:19:
         66:73:56:0c:fa:eb:a6:c1:d6:d7:81:09:9e:81:1a:fc:71:5d:
         bf:42:c6:9c:ec:a8:04:ce:30:8c:9c:07:f1:0e:fd:50:50:6f:
         f1:bd:bb:95:af:20:ee:ff:ba:3f:85:94:c1:78:fe:3d:fc:fa:
         14:72:f2:02:d1:4e:99:50:c1:05:cb:9b:24:1a:8a:10:0d:6f:
         e2:8b:a1:5d:49:ee:71:9b:6a:2a:51:80:c5:56:b0:6c:e4:30:
         38:52:59:d8:03:2b:88:55:10:c4:0c:8a:76:8f:e0:7b:16:4b:
         68:e8:31:66:94:42:01:1c:02:df:e9:02:1f:68:db:17:e1:d1:
         4f:7c:f1:88:0d:a7:ad:ee:54:bc:21:66:05:32:b4:46:f2:45:
         01:63:94:e8:d6:fc:64:27:3c:59:6b:ac:d2:f9:0e:45:8a:d2:
         6b:59:bc:d9:46:59:1b:74:47:9a:02:93:61:d2:1e:59:3d:ec:
         94:b2:91:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:23 2026 by rpki-client