Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4859443b-249c-3fba-8db4-46b941af7483.roa
File:                     4859443b-249c-3fba-8db4-46b941af7483.roa (raw, json)
Hash identifier:          udNvzSJvt5gUoDH1MSz7rcEzQ7gIOOsQmu2B/1j6usM=
Subject key identifier:   EC:90:BD:E1:08:EE:CB:04:B1:BC:A1:84:9D:11:B9:B5:96:45:07:06
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584E104F20B8DD7B089D42FCC000
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4859443b-249c-3fba-8db4-46b941af7483.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     36104
IP address blocks:        63.255.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4f:20:b8:dd:7b:08:9d:42:fc:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=66e4835a-4a28-4733-819f-53ef7c9fa92c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:07:06:9e:7c:1f:e0:de:e1:c1:81:b7:da:ec:
                    26:a9:2c:01:3b:b2:cf:51:0d:d4:71:7d:14:35:eb:
                    db:46:ef:af:bb:be:a6:97:39:82:9f:83:c3:17:26:
                    a1:ab:ab:40:a0:b3:7b:dc:c8:d6:15:1d:18:75:40:
                    92:4a:7f:90:85:84:7f:ea:79:6b:e4:89:0e:64:52:
                    75:dc:f5:b5:bd:1a:a4:d1:02:8b:8d:61:a6:a0:92:
                    74:32:b0:68:4e:15:e5:ef:7e:e9:09:d7:3c:e7:22:
                    d4:fe:44:41:00:fe:04:09:34:3d:b4:bc:1f:1a:7d:
                    03:6c:5b:7c:ab:03:ad:0e:e4:6e:33:c9:41:b8:1e:
                    5d:2c:4a:9e:2b:a8:d8:4c:ea:21:30:70:f4:73:87:
                    6a:8c:59:90:83:1a:d6:f8:ab:e8:36:df:f0:83:bf:
                    35:c7:e5:39:dc:f1:db:c7:b8:90:c1:6a:19:e7:fa:
                    f9:4b:2a:91:1d:db:46:6d:a3:48:6f:bc:dd:16:a5:
                    d0:35:86:86:6f:0f:1e:11:16:3d:e9:2f:7d:84:bd:
                    19:cd:1f:16:45:1a:68:11:33:50:e3:24:0f:30:00:
                    72:f5:8f:68:a9:05:11:95:8a:d0:d3:52:72:11:84:
                    59:d6:03:20:87:fd:cb:23:88:13:4f:d9:d7:39:80:
                    b6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:90:BD:E1:08:EE:CB:04:B1:BC:A1:84:9D:11:B9:B5:96:45:07:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4859443b-249c-3fba-8db4-46b941af7483.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.255.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:ac:d8:67:74:e8:bd:49:83:ce:80:d4:8b:ff:fa:08:d3:e7:
         e0:0d:8e:0e:92:ac:6e:7b:8a:6e:20:89:b7:9f:26:78:5d:60:
         5b:e4:48:ab:ab:b3:e9:8d:d7:76:39:e5:f5:58:99:60:06:f9:
         30:04:ef:67:43:51:2d:1a:a6:89:0f:77:51:34:16:6f:62:04:
         fa:97:5e:e3:29:4b:aa:94:1d:5e:34:97:93:61:4e:34:e5:97:
         a3:25:da:33:3c:2a:2f:5a:a9:cb:d4:4f:42:2d:56:0b:64:ed:
         f9:f6:44:0e:b1:54:79:1d:12:d2:4c:4d:fe:f5:c4:c2:c9:fd:
         5c:35:e0:81:a7:3d:e0:1d:bf:c4:dc:cc:1c:53:79:9d:39:d4:
         01:fb:81:d0:a3:3f:94:f9:ca:5b:13:35:46:5d:1a:fd:06:1f:
         3c:f6:9f:c7:6d:6f:a9:3b:90:7c:64:d0:71:46:1b:30:fa:22:
         f7:fb:92:78:d9:06:d8:23:32:f2:72:e7:66:50:e3:a4:db:d3:
         67:a2:48:a2:01:89:b2:6e:11:04:aa:8f:e0:d9:cb:4c:ce:68:
         16:9a:68:05:9e:de:30:f9:10:60:52:5f:f1:cb:73:cd:93:8a:
         f4:82:82:d4:30:26:e6:88:d2:d2:ed:fe:a5:8b:66:47:93:bb:
         30:a5:fa:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:48:05 2026 by rpki-client