Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/26855c6b-a192-3c0c-ad66-9649dc21ff43.roa
File:                     26855c6b-a192-3c0c-ad66-9649dc21ff43.roa (raw, json)
Hash identifier:          dS4DN+uY/E5/65h6Is8pZj/Gdszse5t20MgJFWmLfrY=
Subject key identifier:   0B:8C:2E:22:84:9B:F8:E0:41:E1:61:F1:57:EF:0C:37:CC:BA:93:2C
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584E104EFD1F92B0AED7E57BCFE0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/26855c6b-a192-3c0c-ad66-9649dc21ff43.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     7029
IP address blocks:        2604:cb00:2d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4e:fd:1f:92:b0:ae:d7:e5:7b:cf:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=ab1fa16f-2ea1-462f-a1f9-c83ce0f16d2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:97:fe:f2:2e:5a:e4:65:83:f7:91:67:d0:a7:
                    e2:2d:66:8a:22:ce:22:c3:5b:d9:84:9e:3f:4e:00:
                    aa:be:1a:ff:f5:62:ac:7d:39:1b:88:6c:d6:b2:d1:
                    89:d9:54:46:ca:a0:0b:cc:b9:20:31:a0:6e:b6:cc:
                    26:97:2a:5d:11:cc:27:5c:50:5f:fc:36:d6:5f:57:
                    68:d8:99:ba:f0:3b:ab:ed:f8:b1:6e:a0:e6:74:1f:
                    c6:3d:6a:b1:47:e6:08:c1:f3:da:c6:a7:e4:6c:f9:
                    65:fd:a8:ff:9a:c1:3c:c3:50:ef:06:a2:62:d8:23:
                    8a:fa:f3:bf:b8:c6:03:30:ee:76:30:2b:08:3d:e5:
                    e2:85:75:f2:f3:d3:cf:27:c9:96:58:74:ad:df:64:
                    2c:91:1e:cb:89:f8:fe:be:2d:e7:36:87:14:31:67:
                    9f:36:6b:77:9c:81:5a:a2:fa:0b:e4:5e:c1:ed:d4:
                    5a:b5:ee:8f:60:2f:71:e1:fa:aa:28:b9:41:8e:ae:
                    13:11:ba:5a:bc:e9:41:fe:d9:f5:f8:25:ca:c2:f0:
                    9b:82:2e:9d:40:14:16:0e:dd:bd:6b:30:17:ae:39:
                    04:ea:85:43:bd:75:c1:87:ef:30:dc:64:f6:46:9a:
                    0a:b5:fc:a8:93:f0:d5:bd:f6:a6:8c:d7:08:c0:9a:
                    b2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8C:2E:22:84:9B:F8:E0:41:E1:61:F1:57:EF:0C:37:CC:BA:93:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/26855c6b-a192-3c0c-ad66-9649dc21ff43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cb00:2d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:e0:c9:88:46:be:59:17:81:fc:d8:fd:30:b7:23:aa:a2:18:
         b6:75:c4:b3:ba:ce:98:5d:c4:9a:e2:ad:0c:4a:76:8c:18:94:
         15:01:91:b8:99:8e:5f:c7:ce:42:59:2f:87:9a:c3:fb:96:a6:
         01:36:4b:a4:12:c6:7d:fc:46:b6:c5:eb:37:bf:be:12:79:4d:
         0b:a5:c7:03:06:fe:66:ff:55:69:c4:62:29:53:e0:74:f2:81:
         21:a4:18:25:4e:8e:0d:5e:b1:25:55:2e:29:57:6d:7b:dc:20:
         aa:b5:70:15:02:d9:04:66:dc:15:75:00:46:c5:e9:ef:42:61:
         0e:3f:ed:4c:b3:ac:24:21:2e:a8:fe:da:9e:b9:b1:e4:66:6f:
         8a:ac:ff:8e:89:08:a4:fb:cf:0b:9b:58:ab:c8:c7:93:62:8d:
         97:ff:db:a6:0c:c7:ce:f8:75:17:67:71:50:09:e1:6d:bb:e8:
         b0:a1:63:7e:c2:dd:75:0d:65:07:4e:01:d1:9f:98:66:38:64:
         3c:02:2c:c4:2e:a1:a9:ec:e0:ca:e1:af:b5:c3:09:30:08:b0:
         8d:89:42:b8:a7:e1:b2:f5:a2:fe:ae:e9:00:d6:2a:a0:f7:9e:
         a2:7b:8b:46:32:cb:03:11:e4:e3:e6:0e:f3:52:35:94:9f:b9:
         e9:fe:62:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:52:04 2026 by rpki-client