Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e3e1c5f5-7380-3af2-8283-f8a314db23cc.roa
File:                     e3e1c5f5-7380-3af2-8283-f8a314db23cc.roa (raw, json)
Hash identifier:          FNJSkz7qshxVBjThkET0i2fF/ONe8CB4HofE6Oap5LE=
Subject key identifier:   F4:03:A6:F0:AF:38:77:46:2C:A4:1A:51:97:06:18:0C:3B:84:33:5D
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584D83BB85B3D9876448DBA9C280
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e3e1c5f5-7380-3af2-8283-f8a314db23cc.roa
Signing time:             Wed 15 Apr 2026 12:30:18 +0000
ROA not before:           Wed 15 Apr 2026 12:30:18 +0000
ROA not after:            Tue 14 Jul 2026 12:30:18 +0000
asID:                     7029
IP address blocks:        174.130.50.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:bb:85:b3:d9:87:64:48:db:a9:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Apr 15 12:30:18 2026 GMT
            Not After : Jul 14 12:30:18 2026 GMT
        Subject: CN=6e578868-660b-4efe-8aa4-92aa1febff0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4a:6e:f5:5a:70:86:58:6c:c7:e8:ab:cb:15:
                    91:77:c6:95:09:1d:37:71:0e:b4:ef:2a:66:96:8b:
                    30:a8:0a:0c:78:89:3c:09:50:b7:e7:ca:04:78:f7:
                    0b:63:b9:c4:c5:75:7d:fb:17:cb:4b:c3:c9:0c:7f:
                    d6:ee:07:ac:cd:e9:0e:b9:c1:e7:79:c1:7c:8d:d0:
                    d4:c0:0e:85:96:7a:af:c2:11:af:96:7f:03:d3:84:
                    37:73:a5:95:62:06:ad:8b:30:5d:b7:4a:24:f3:95:
                    55:e2:f0:41:60:5e:2d:d6:aa:0f:45:ab:12:e3:fd:
                    11:e7:f6:34:70:c3:6c:1f:91:eb:5d:e6:e7:43:8a:
                    e0:38:55:57:d3:70:b9:8a:f9:0d:39:5c:0d:c8:82:
                    01:31:01:f0:d6:4e:9e:dc:5d:be:2a:1b:52:6a:f4:
                    0f:b9:2e:02:17:22:e2:ea:c2:75:ff:87:96:78:83:
                    70:32:b5:32:2a:33:26:19:b9:6e:b8:2c:f7:e8:de:
                    a9:ae:03:98:4b:ff:40:91:90:bb:41:f6:7d:e6:5a:
                    ef:15:df:ec:b3:00:b6:23:8f:a6:78:fe:da:74:bb:
                    cf:0a:d2:7b:64:6f:a8:bf:ba:48:e9:6c:b7:d8:99:
                    83:f3:70:66:75:19:e7:77:53:44:6d:74:47:33:8c:
                    6c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:03:A6:F0:AF:38:77:46:2C:A4:1A:51:97:06:18:0C:3B:84:33:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e3e1c5f5-7380-3af2-8283-f8a314db23cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.130.50.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:d2:d0:04:f3:2e:aa:2c:36:ff:58:4a:b4:0e:ef:ab:a0:fe:
         3e:c7:f3:32:00:e3:af:e0:15:fe:ad:ee:1b:d5:e6:39:cf:aa:
         ad:f2:2d:7f:2d:5e:8a:5f:dc:45:3e:85:86:69:8e:70:6e:35:
         4e:d6:1f:30:1e:e8:82:e9:2e:e2:d8:97:5b:61:11:59:70:48:
         ab:1e:c7:f1:e7:3e:0a:c7:4d:29:eb:af:d3:6e:b8:d1:8e:6d:
         30:8f:0f:6a:33:76:c3:df:46:4b:82:8f:94:de:1e:6c:bb:c4:
         4e:f3:48:77:84:ea:a1:03:40:aa:ef:e1:a5:e1:39:88:52:4d:
         0e:6a:38:37:ad:fc:55:11:bb:8c:5b:1a:2a:52:72:c7:60:61:
         a0:3c:ac:c0:6c:98:94:fd:6a:61:1b:f8:6d:c7:fb:d3:d9:e2:
         de:f2:8f:7a:b8:1a:ff:9b:b8:70:dc:61:e3:9d:13:16:ac:54:
         ed:ec:90:83:af:08:de:e7:68:7d:54:e7:2e:86:0b:d2:23:fc:
         29:58:19:c8:49:e4:ee:cc:75:dc:21:71:32:a1:e4:1e:24:fb:
         9d:b5:9e:15:94:5b:03:05:ba:ab:11:1d:9e:21:1a:e7:09:78:
         e1:01:f2:51:0a:e0:62:e9:ee:94:07:23:00:a8:17:21:2c:81:
         91:1d:2f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:18:42 2026 by rpki-client