Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/690cf52b-ac9d-38bd-adf9-63184043474f.roa
File:                     690cf52b-ac9d-38bd-adf9-63184043474f.roa (raw, json)
Hash identifier:          /OF+PSTMcSf3krmdVJjXBVc1n+3JyN8eoivVnXoq6YM=
Subject key identifier:   05:A5:A4:62:9A:F6:D7:6C:07:B9:8B:91:9B:96:CD:5A:A5:FB:C6:8F
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584E0D84296188F7ED72535C4020
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/690cf52b-ac9d-38bd-adf9-63184043474f.roa
Signing time:             Wed 03 Jun 2026 21:00:12 +0000
ROA not before:           Wed 03 Jun 2026 21:00:12 +0000
ROA not after:            Tue 01 Sep 2026 21:00:12 +0000
asID:                     7029
IP address blocks:        66.153.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0d:84:29:61:88:f7:ed:72:53:5c:40:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jun  3 21:00:12 2026 GMT
            Not After : Sep  1 21:00:12 2026 GMT
        Subject: CN=70513a96-53ba-4ede-b363-350339e28ce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e7:5f:55:c5:d2:9b:93:58:6b:5f:98:5e:f1:
                    b8:ee:74:e0:a4:e0:29:1f:8e:3c:20:8e:f1:dd:a3:
                    22:1b:f8:46:5d:99:41:ac:5a:fb:23:c9:11:c6:be:
                    9c:bb:05:fb:9e:56:5a:32:ca:36:b9:2c:b8:3c:4d:
                    27:7b:15:6c:b6:2a:fb:27:d9:3a:52:69:7e:89:ed:
                    cb:dd:67:ff:e0:65:9d:ea:8a:61:5d:74:53:aa:87:
                    ff:65:53:4e:0c:55:04:91:b1:a8:df:5f:71:bb:02:
                    77:52:1c:27:af:8a:2a:c1:25:91:15:0d:ea:29:a7:
                    4b:45:25:83:46:8f:1c:b2:b9:a5:8a:88:af:dc:13:
                    45:7a:1c:8c:0f:bc:19:72:2d:c9:cc:68:89:5e:9d:
                    56:5c:ad:c6:fe:f2:a4:4d:05:aa:9d:af:00:da:79:
                    59:a9:cd:10:b5:20:a3:95:38:a9:7f:26:eb:fb:4f:
                    bf:1d:e5:05:bb:e0:08:6a:be:8d:d2:46:0e:59:bb:
                    af:28:ca:31:5a:e3:3d:13:7f:f4:f3:cf:35:74:80:
                    bd:24:cd:3e:4d:9d:40:d1:13:e5:db:82:89:e2:1c:
                    60:57:4c:c2:24:8c:c8:40:ee:c6:5b:01:2a:d2:ec:
                    b6:46:2e:32:b5:e5:49:67:31:d1:d9:b8:02:57:45:
                    cd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A5:A4:62:9A:F6:D7:6C:07:B9:8B:91:9B:96:CD:5A:A5:FB:C6:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/690cf52b-ac9d-38bd-adf9-63184043474f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.153.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:74:d3:c3:d2:99:9b:b1:89:bd:fa:1b:db:3a:67:c0:9b:02:
         7e:63:fc:d2:c5:d4:8a:37:43:50:2b:43:0e:51:77:43:22:3a:
         0b:ad:16:c2:ab:7d:e5:46:c3:47:e5:21:5f:a8:b7:bb:f6:09:
         96:fd:3b:49:39:ab:8f:e0:51:c2:11:1d:90:a7:c2:58:3d:49:
         72:cd:a6:14:df:5c:41:ab:c8:69:ac:2c:5d:ad:96:28:09:32:
         c3:cf:95:e5:c6:8d:74:bf:32:2f:3d:42:2d:27:34:f7:dd:44:
         e1:b6:fe:ac:e4:4a:70:c3:4b:af:38:73:4c:56:2d:d7:61:55:
         12:37:55:58:ed:e5:ad:de:06:6f:6b:4d:fb:8d:99:a6:87:ba:
         0c:23:31:a5:db:bb:08:04:dd:c4:36:16:f7:30:d6:45:43:19:
         59:ab:8a:52:05:11:4c:1d:02:ff:03:0e:2c:43:6d:cb:47:76:
         de:b7:db:7a:74:ff:b8:a2:51:a4:19:75:53:7b:af:77:c8:e4:
         76:bd:67:5a:96:61:9f:94:5a:1e:f9:9a:34:f9:b6:1c:95:71:
         f2:19:50:ed:26:04:c7:24:8e:06:67:3b:5d:83:cd:01:72:a2:
         75:99:89:ab:27:03:1e:46:f2:8c:99:32:37:52:cd:9c:44:15:
         04:6d:9e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:28:33 2026 by rpki-client