Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fd9a9f1c-54b6-3381-bbc1-0f5127683a0b.roa
File:                     fd9a9f1c-54b6-3381-bbc1-0f5127683a0b.roa (raw, json)
Hash identifier:          7+3luqdf57T4TT1R42dnGmv+YskT0RJuOwD2X8L6ugw=
Subject key identifier:   E6:7A:DC:71:90:E2:F6:4C:E4:D0:83:B4:87:69:0F:F7:81:CC:1B:EF
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584E0D8430FBAE12D105D979B060
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fd9a9f1c-54b6-3381-bbc1-0f5127683a0b.roa
Signing time:             Wed 03 Jun 2026 21:00:12 +0000
ROA not before:           Wed 03 Jun 2026 21:00:12 +0000
ROA not after:            Tue 01 Sep 2026 21:00:12 +0000
asID:                     7029
IP address blocks:        151.213.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0d:84:30:fb:ae:12:d1:05:d9:79:b0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jun  3 21:00:12 2026 GMT
            Not After : Sep  1 21:00:12 2026 GMT
        Subject: CN=fec61008-bd4f-4562-887d-ad15c230271b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6a:a9:3c:25:8c:ca:91:b3:32:38:cd:49:1c:
                    37:83:6c:a5:51:13:53:6b:ee:e7:7d:5f:be:39:f7:
                    68:bd:d5:0e:0b:17:ee:b2:09:01:a9:c8:71:3e:72:
                    ad:05:a6:db:e4:a2:f7:8d:c4:41:d7:c9:90:74:ea:
                    e5:59:12:0f:c4:3f:fe:b1:cd:86:8a:b5:a0:e4:aa:
                    0f:95:8f:3b:56:4b:57:a9:88:a6:22:3c:55:7d:5f:
                    32:5a:1a:d7:6b:e8:80:de:e1:9a:1f:96:21:27:54:
                    76:58:d1:83:11:31:27:87:7d:d2:ff:21:7f:94:bf:
                    50:79:d1:60:cc:bf:ba:a7:02:46:82:85:60:dd:82:
                    15:bd:bf:de:da:89:3b:68:94:37:41:05:00:d1:14:
                    01:3a:8e:2a:b3:fd:ea:d8:48:c6:81:ff:bc:45:c6:
                    30:c5:01:62:7b:99:de:b6:85:42:74:c2:15:a4:8c:
                    8b:43:2f:45:6c:91:32:3d:47:a4:e5:2c:cf:ec:a0:
                    03:9d:07:5e:17:a0:b1:ab:ba:5d:0d:af:71:9d:5b:
                    e3:02:92:e0:42:b0:cd:b4:16:89:d9:40:7c:74:ea:
                    5e:98:d3:66:31:b1:80:94:28:82:7c:95:1b:27:fe:
                    b0:b7:39:70:b4:a4:26:1d:94:a8:a3:8d:db:2d:d5:
                    9f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:7A:DC:71:90:E2:F6:4C:E4:D0:83:B4:87:69:0F:F7:81:CC:1B:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fd9a9f1c-54b6-3381-bbc1-0f5127683a0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.213.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:36:5d:b9:91:38:51:c0:69:eb:4d:92:61:28:21:8b:34:9b:
         06:93:1a:cc:ab:67:5a:bf:7a:af:0b:97:d3:ad:a7:89:11:2c:
         be:78:d6:61:d7:ff:ce:62:18:4b:45:db:75:69:45:0e:27:c2:
         53:cf:e7:bb:7e:47:14:81:f6:a4:04:76:a0:5c:e1:a3:a0:cd:
         02:ec:7c:db:b8:39:3f:26:75:cb:1e:c5:76:d8:9f:cc:a8:03:
         71:ab:bf:b9:9f:a3:ee:5a:a6:84:8b:2f:90:2b:6c:06:3a:06:
         86:12:de:70:76:20:03:a4:5d:cb:cf:f7:ce:31:39:96:de:f1:
         b6:a5:be:cf:e9:c7:b7:40:d1:74:30:87:9b:6c:40:86:fb:5e:
         70:c9:db:0e:5a:c7:83:6d:1f:93:8d:fc:6b:5b:76:25:97:e8:
         07:db:08:e2:ae:38:4b:94:39:47:3c:8e:c0:e9:f4:f8:13:32:
         88:0f:bb:17:61:93:6c:5f:6c:37:6f:01:62:de:9d:18:53:7e:
         ca:7f:f9:78:59:f5:33:12:f5:14:0b:46:37:f4:b3:cf:6b:7e:
         5d:ae:d9:f4:37:8e:4c:48:57:f7:d6:cd:69:b2:ed:ea:b4:98:
         f4:92:09:6f:e0:59:80:42:3a:ee:3c:d4:e0:3d:e1:27:ea:47:
         2d:c3:c0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:28:01 2026 by rpki-client