Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/219bc4aa-8142-3f5e-a469-4a615b68d218.roa
File:                     219bc4aa-8142-3f5e-a469-4a615b68d218.roa (raw, json)
Hash identifier:          cdBONXXgT0JdthysHt3fxlSabeYvynHgZ9xyeHOWvCA=
Subject key identifier:   06:D7:85:01:F8:51:FA:5E:40:7A:71:F6:6D:FD:A7:86:AE:1D:FA:16
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584E104EFE61131A0603C4096600
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/219bc4aa-8142-3f5e-a469-4a615b68d218.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     7029
IP address blocks:        2604:cb00:2300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4e:fe:61:13:1a:06:03:c4:09:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=98701fba-f178-42ae-b54f-502976ada83e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e2:a3:bc:3d:ba:eb:73:a7:30:99:49:e2:14:
                    5d:a2:c2:54:80:14:ee:53:b4:5e:66:ce:05:a9:89:
                    d2:b1:be:e6:db:40:28:33:6c:32:83:6a:a8:78:a3:
                    29:33:68:66:b2:25:c4:78:54:39:1a:90:5d:b4:8a:
                    03:bd:98:d0:fd:7e:eb:02:32:52:01:47:22:d0:e5:
                    dc:60:73:ac:8d:a4:12:39:81:6e:7f:f3:ec:44:36:
                    a6:7a:03:28:68:df:05:81:63:fb:66:2d:83:73:47:
                    e0:12:f8:33:88:93:89:48:f9:a0:87:4c:e2:a4:6c:
                    10:ab:e7:dc:57:df:82:f7:bc:8f:c9:1e:ba:f9:6a:
                    51:2b:d6:b1:da:1a:f4:90:a7:22:35:3b:61:16:68:
                    bf:9d:0e:ed:da:f5:d4:ef:48:7c:9f:e0:c5:09:84:
                    77:ef:42:ff:37:b1:5a:01:ba:05:4a:30:eb:9b:81:
                    0e:bb:99:b1:f5:68:3e:a9:58:bc:2a:13:a2:95:03:
                    23:30:84:58:36:f8:2c:5a:6d:e0:99:84:32:27:66:
                    ef:76:78:36:ea:a6:8c:3c:74:11:5e:25:c3:bd:2e:
                    95:78:53:78:74:57:51:be:7d:a0:a7:95:20:1d:66:
                    ef:89:fd:79:3f:81:0b:3c:92:60:51:fb:61:c3:b4:
                    f8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D7:85:01:F8:51:FA:5E:40:7A:71:F6:6D:FD:A7:86:AE:1D:FA:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/219bc4aa-8142-3f5e-a469-4a615b68d218.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cb00:2300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:e2:e3:60:5c:fa:6a:fe:7d:24:59:a3:54:54:e2:dd:6f:f5:
         d7:6a:22:0f:ad:ad:ab:2b:2f:dd:f8:9c:e3:27:80:79:d6:78:
         76:7e:0c:00:4a:c8:99:49:18:92:97:2b:f4:e4:c4:6a:45:fb:
         bc:b0:8e:13:47:e3:64:88:40:4c:97:6d:72:c1:97:d0:c8:df:
         86:e8:fc:6f:69:ea:a7:20:1a:0a:61:bb:e9:e8:7b:37:6e:6c:
         46:0c:05:c6:ef:27:2b:71:85:04:ee:c9:f7:22:08:87:88:cf:
         23:6c:37:f6:5c:9f:a0:a8:62:24:1f:2a:95:bf:25:e5:48:24:
         bc:2b:da:53:c3:01:fc:a6:a7:20:b0:a5:12:e1:8e:f4:ef:be:
         da:d8:12:c6:2f:7b:84:2e:00:b8:27:21:43:c4:fb:36:63:0d:
         0c:c6:07:9e:f0:9a:83:32:a1:dd:3d:65:8c:fa:b0:31:21:a2:
         3f:d4:bd:0b:b2:72:71:38:ad:1d:cb:e6:2d:c1:a2:99:9d:3f:
         dd:63:01:7f:e9:14:9d:3c:a3:90:eb:12:37:61:a1:1f:0c:5e:
         04:56:d9:b3:ca:34:45:c3:ba:72:2b:df:23:68:9d:fe:b6:fe:
         3e:b4:c5:68:f4:42:df:e1:b0:67:19:1c:1e:06:ff:c4:a3:b7:
         5f:5c:e4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:42:03 2026 by rpki-client