Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff7484bb-db47-3264-84de-e7acb9b639c7.roa
File:                     ff7484bb-db47-3264-84de-e7acb9b639c7.roa (raw, json)
Hash identifier:          nUpx0n0RNg1i0uMYT45P3lWliueLmqtJ7tEaS2KaTRE=
Subject key identifier:   01:BE:13:86:74:36:1B:B6:7A:11:AF:64:46:9B:8E:40:A7:6B:0D:5A
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584F3CE2B4C5C272DF975D774D00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff7484bb-db47-3264-84de-e7acb9b639c7.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     7029
IP address blocks:        71.31.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:b4:c5:c2:72:df:97:5d:77:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=e6badd68-3205-46d3-a0a9-aff07254943b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d9:b3:a7:7c:de:f7:4c:25:69:bd:ab:34:4a:
                    49:e6:fb:11:f0:06:6a:47:22:49:5f:ad:63:38:cf:
                    6f:6c:d7:a0:78:34:24:5d:90:d4:54:d3:4a:92:d5:
                    25:71:96:98:23:36:14:80:fa:46:f7:b6:5e:6d:5f:
                    80:ea:4e:d3:74:76:be:e4:87:ed:63:aa:c1:6d:6e:
                    b0:0a:24:80:57:c3:af:68:8e:3b:59:35:ac:03:8c:
                    ae:81:b1:9a:1d:0f:8a:36:70:2d:e4:23:f3:7f:43:
                    a4:e9:36:66:cc:60:d8:a5:35:6d:75:cf:91:15:6c:
                    65:80:83:b6:01:db:25:62:65:8b:42:86:43:27:0d:
                    1d:1e:47:28:ef:28:06:13:38:36:21:bf:51:ec:fb:
                    e9:8f:43:8a:28:79:0f:b7:30:4a:e4:96:5e:65:f1:
                    63:b9:f3:6f:c5:4b:30:ae:e7:02:ad:14:0b:39:dc:
                    5c:b3:03:11:43:02:7a:96:f8:13:d7:93:57:7b:61:
                    9a:be:73:ac:15:88:c7:e4:27:37:23:c8:4a:1c:a7:
                    b6:03:d1:b0:1a:c6:bc:ad:b2:80:8e:1c:e5:8f:e3:
                    8c:e1:2a:00:98:11:db:d1:dc:9b:7e:a7:a9:d6:c9:
                    24:ef:ba:d1:6d:b2:c9:10:60:7a:fd:c5:c6:0a:a4:
                    eb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:BE:13:86:74:36:1B:B6:7A:11:AF:64:46:9B:8E:40:A7:6B:0D:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff7484bb-db47-3264-84de-e7acb9b639c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.31.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:4b:f8:dc:8e:a4:ca:2f:f6:bf:29:2e:17:8b:5e:a9:46:df:
         ee:b8:cc:e7:5d:7a:04:79:cd:82:4f:a1:93:8d:d6:e0:78:4c:
         e7:57:03:a5:87:1f:69:ed:ff:32:88:a0:f3:2c:70:73:e1:52:
         1a:7a:e4:b8:75:37:83:db:40:9d:22:b0:83:87:31:c6:97:99:
         e1:41:ab:c2:b6:9e:d9:d0:3d:80:19:aa:1a:2e:e5:34:04:b4:
         9e:b3:f2:1e:f3:58:1a:b8:48:33:1d:32:02:f3:d9:67:30:12:
         6c:85:b9:09:e3:56:8c:8e:43:a7:c5:5c:2c:07:8e:c1:9e:99:
         a5:72:28:2d:c9:60:4f:44:91:17:ae:29:41:97:a2:ec:bf:7c:
         69:b6:46:1a:00:88:41:03:c8:05:11:67:de:fc:22:be:57:dd:
         27:e6:8e:99:d2:39:6b:b8:04:69:ac:37:57:5f:79:93:00:35:
         9a:37:d9:00:e2:69:94:f2:4e:e1:81:1c:90:db:fe:e4:a7:5e:
         ed:98:78:6d:50:71:da:0f:03:6d:cc:87:f1:b9:05:28:e1:34:
         7b:af:62:22:4b:b7:19:3c:5a:6a:8b:19:33:f3:ff:28:08:09:
         83:80:d6:57:97:22:28:36:38:30:d6:dd:68:44:cd:47:70:87:
         31:41:d2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:03:10 2026 by rpki-client