Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5514b8f-46aa-3af8-998f-2a0964724887.roa
File:                     b5514b8f-46aa-3af8-998f-2a0964724887.roa (raw, json)
Hash identifier:          l7YnbNBN0et0iXcwvCF25TyOxDBc+ZkrrCG8EznTz5g=
Subject key identifier:   EB:1C:F9:5E:8A:37:F7:D0:F9:84:3F:DE:62:59:A1:E7:87:B3:61:84
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584E104EFAA6F93EB94163D2B580
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5514b8f-46aa-3af8-998f-2a0964724887.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     7029
IP address blocks:        207.222.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4e:fa:a6:f9:3e:b9:41:63:d2:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=c28871ed-4dfc-4da4-a89c-38476a041892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c2:52:30:9f:02:82:fb:4a:ec:14:ec:95:df:
                    0d:b4:39:e4:4f:a3:e9:46:7b:9e:0d:03:03:5d:dc:
                    88:95:9e:69:7b:74:c2:34:c9:f8:f0:94:5c:1b:6b:
                    a2:83:68:8c:0d:3a:5a:bb:01:c2:10:2a:8b:b4:e3:
                    64:b7:f9:bd:8a:71:cc:68:cc:97:9f:45:60:7e:55:
                    d9:47:08:64:17:fd:3c:bd:78:2a:13:7e:39:03:99:
                    d9:bc:d6:bd:60:0f:80:78:e2:2d:6a:b8:2f:02:d1:
                    ab:e8:2c:b1:8c:04:c1:cf:77:b0:1c:79:2e:c7:b7:
                    2a:4d:08:11:f2:9c:8a:51:6a:9b:28:cc:b2:56:f4:
                    75:66:ee:0d:c6:e8:25:9f:b2:6c:43:4a:fe:a1:6d:
                    fa:0d:df:9a:5f:80:5f:bd:d7:a4:2f:c1:3e:4a:bf:
                    07:6a:c7:32:79:9d:5c:54:36:27:b1:f8:1d:7c:93:
                    f4:ba:52:d9:a4:b9:2f:d0:6c:c9:91:27:25:86:29:
                    20:7f:14:5d:41:a0:c9:90:ee:20:c0:fa:89:4c:79:
                    9d:11:d6:9d:90:ce:8e:e3:e0:2d:cc:cc:19:4e:bd:
                    22:b3:8e:79:ec:9c:f0:7f:01:c3:ec:0c:ef:54:33:
                    65:24:2e:bd:c6:ae:8d:9b:7b:00:0d:25:3f:af:ce:
                    dd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:1C:F9:5E:8A:37:F7:D0:F9:84:3F:DE:62:59:A1:E7:87:B3:61:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5514b8f-46aa-3af8-998f-2a0964724887.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.222.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:78:f5:30:6f:e1:e9:b8:e8:1a:84:8f:3f:da:df:2a:49:2a:
         f0:5e:db:7f:da:69:cb:41:d0:b2:a4:90:23:ef:60:e7:dd:43:
         42:69:5b:ad:f6:bf:16:d5:c2:ac:58:c7:f9:7a:b1:4e:28:5c:
         e5:92:73:39:40:6a:06:ad:9e:b9:25:00:9b:c3:f1:4f:f3:93:
         6e:4a:3b:ec:90:14:d8:52:c9:b4:11:b8:73:11:e4:b8:90:ea:
         cf:eb:8c:88:a2:20:97:cb:55:93:52:35:c7:46:75:b2:2f:f9:
         2b:aa:2b:e9:b6:ed:a3:ab:2b:77:4c:60:8f:b3:ea:9d:a2:cb:
         06:ba:9b:7c:20:87:02:55:c6:ec:60:89:71:21:43:be:77:22:
         75:37:6c:1f:68:40:18:22:4d:57:8b:22:ba:46:52:7b:53:5e:
         83:9f:10:ec:d6:43:51:d1:86:ae:25:91:20:36:5d:03:68:1e:
         62:9c:e0:78:b7:9a:50:d1:be:e1:ac:43:35:96:08:43:a2:32:
         f7:f3:c9:ad:64:86:64:6e:4a:04:e4:f7:d9:c4:b4:9c:5c:d4:
         f8:e6:b4:be:8c:76:2a:4f:92:35:37:8b:ae:03:d9:3a:93:e9:
         c6:4e:85:6f:32:74:b8:9e:ce:57:a0:87:15:0a:82:23:c1:9d:
         17:8f:56:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:57:54 2026 by rpki-client