Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1b58300d-4af3-3c6f-a264-d6c66a398ac6.roa
File:                     1b58300d-4af3-3c6f-a264-d6c66a398ac6.roa (raw, json)
Hash identifier:          uE7IqeKr4pZa73AykcHPt5595yziFBpdVA5qNUs2y+k=
Subject key identifier:   41:00:F5:84:90:A0:53:BE:B9:B7:61:89:50:44:BD:B3:AE:5E:0A:6E
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584E104F1DA7E5867E0AE32FB180
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1b58300d-4af3-3c6f-a264-d6c66a398ac6.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     7029
IP address blocks:        2604:cb00:2100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4f:1d:a7:e5:86:7e:0a:e3:2f:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=8eaedd71-fc9f-4323-82f0-7432b346e105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1b:c4:c1:6f:e4:07:e8:5c:49:91:5c:b6:5a:
                    85:7a:d2:6b:a2:f7:cf:f5:41:7c:ab:44:1e:60:d6:
                    8d:f3:2f:0b:98:c9:3a:91:70:e8:2d:82:93:a5:fa:
                    33:2b:cd:17:c8:82:b7:45:ba:ab:c3:af:c0:51:67:
                    7a:f6:ca:6a:5c:cd:ad:eb:8c:7d:ce:47:9f:13:6f:
                    c8:8c:1f:b2:36:87:35:bb:93:a5:b7:5d:f2:06:33:
                    46:fc:e5:9a:1f:09:38:90:f4:06:d6:a2:b4:e9:a9:
                    ef:44:3f:c1:49:e9:75:62:ba:a8:d5:35:3b:50:63:
                    69:71:d3:b6:20:79:43:18:c9:8e:8f:07:ca:49:45:
                    f7:f3:f4:61:0a:f2:47:f8:b2:13:29:4e:a4:ad:ba:
                    08:17:69:88:0b:db:98:18:c4:01:68:53:7c:76:af:
                    63:b0:64:10:30:57:75:57:bb:7e:d3:b7:d3:ff:86:
                    52:ac:45:dd:91:62:0d:2f:97:94:fb:75:b4:b4:2a:
                    4b:b3:f0:c1:93:9a:4e:41:ec:14:69:35:a0:d3:6b:
                    21:e4:14:27:45:ab:5e:36:3e:c3:3b:af:12:b0:f7:
                    65:13:83:63:74:46:7a:73:bc:97:48:9b:c5:86:bc:
                    d9:22:38:d0:61:51:c3:80:fa:ec:e6:36:83:85:26:
                    1a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:00:F5:84:90:A0:53:BE:B9:B7:61:89:50:44:BD:B3:AE:5E:0A:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1b58300d-4af3-3c6f-a264-d6c66a398ac6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cb00:2100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:42:c3:61:25:6c:20:86:15:db:34:46:e4:37:1e:6b:77:e9:
         69:7b:de:92:e2:f1:00:18:6b:96:16:51:dd:88:09:72:33:f9:
         69:cb:5c:7a:1b:8a:bd:62:de:e2:16:5d:ce:5a:e8:3d:56:e6:
         fd:e9:2d:fc:f6:5b:d7:55:bb:82:36:7c:dc:b8:fc:05:45:f9:
         c6:b7:8a:d8:57:c9:84:50:a9:34:15:59:7b:0a:8b:c5:ca:c4:
         a3:06:92:4e:89:83:4f:e4:89:09:28:d6:13:47:76:28:03:9d:
         46:1f:be:5c:5c:0b:be:b8:6c:09:87:41:f3:85:9d:25:95:62:
         f9:ad:fb:e9:94:c3:d2:b3:c0:fe:6c:bc:84:f5:fb:21:9f:1d:
         e3:c2:61:c0:15:cf:62:43:cf:cf:a9:af:f2:57:dc:48:78:f1:
         37:7a:5a:3f:0e:ee:9b:25:5d:cb:80:68:04:a8:da:11:18:1b:
         4b:78:36:04:e3:47:6a:f1:1e:91:73:67:cb:92:f8:8e:8d:70:
         f0:c4:68:92:05:01:62:fd:23:96:61:89:6c:ae:35:fc:46:b2:
         05:11:eb:79:d2:b9:31:23:5c:de:38:81:ed:55:d5:4a:ef:39:
         7b:1c:40:6b:5c:1a:36:d2:77:5a:12:5e:35:47:80:48:d3:75:
         38:f3:c9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:06:12 2026 by rpki-client