Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c4a6fb9-04ee-386f-abdb-31989f155249.roa
File:                     4c4a6fb9-04ee-386f-abdb-31989f155249.roa (raw, json)
Hash identifier:          pSutw5e1VCtAHVzHZ512ZhYWKoRvjSZPsrgtNYrAhFI=
Subject key identifier:   51:45:28:D9:E2:1E:4E:0C:2B:74:D0:F7:20:BF:BD:50:10:A8:DC:F7
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584A90A103DEDA9ECF093DE52840
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c4a6fb9-04ee-386f-abdb-31989f155249.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     7029
IP address blocks:        2604:cb00:b00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a1:03:de:da:9e:cf:09:3d:e5:28:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=2d6897dd-0760-4ab6-b1d5-56afd303e5a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:aa:8e:cb:1f:49:a9:e7:d7:aa:2a:6f:ff:0e:
                    b8:d8:dc:eb:d5:68:0f:61:87:3f:74:c4:5e:ea:67:
                    5c:2d:53:1e:8d:3c:3b:7f:9c:9e:6a:70:ab:bc:d9:
                    a7:f7:da:27:f8:cc:73:c6:d5:50:66:38:3c:f7:23:
                    88:ea:f5:dd:c2:bf:01:0f:85:91:6e:02:fa:5c:c2:
                    7b:bd:ee:6e:fc:e9:5d:85:34:d8:23:c6:4e:98:06:
                    f1:f1:be:e3:80:b0:9c:c7:f7:a8:1b:57:30:1b:8f:
                    f8:37:d9:ab:53:f1:41:8f:73:7f:d8:6f:ae:1d:c5:
                    87:40:19:1d:d7:1a:d9:3d:a8:6d:92:ea:1e:00:9f:
                    81:6b:f4:c8:6a:25:89:83:d1:1f:54:56:3a:bc:ab:
                    88:c7:75:7b:b9:d3:0e:fa:d0:1f:b6:80:0e:87:49:
                    06:2e:bc:87:30:3b:55:9a:fd:8f:2a:b1:4d:90:7b:
                    f6:92:0c:bd:f1:29:54:16:97:c1:3c:98:9d:8f:7e:
                    57:95:45:b0:c6:29:55:f5:45:8c:7f:e0:af:2a:53:
                    84:e0:55:75:51:6b:d8:95:c1:72:a5:06:69:f5:10:
                    83:a3:9b:6d:bd:d3:c6:13:27:88:cd:27:c9:87:93:
                    56:36:45:76:ec:bc:b1:38:77:08:02:3d:aa:99:2c:
                    00:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:45:28:D9:E2:1E:4E:0C:2B:74:D0:F7:20:BF:BD:50:10:A8:DC:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c4a6fb9-04ee-386f-abdb-31989f155249.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cb00:b00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:45:fb:b7:56:8b:55:40:d2:f4:40:ec:f4:d9:59:40:ab:b2:
         88:0f:ea:90:a6:bd:f9:f1:1e:90:95:98:1d:97:95:55:85:20:
         0f:2c:ae:c1:22:be:45:a5:48:ac:dc:2a:ef:63:9c:79:7a:9e:
         98:fe:34:e5:3d:77:86:1f:da:bd:dc:e9:76:7b:3a:e4:62:86:
         ad:3a:a4:2a:08:33:a0:a5:70:e8:ff:d7:eb:5f:d1:1b:25:6f:
         63:6e:9c:ff:ad:60:e1:8f:33:47:6b:c9:87:70:5b:8a:a0:31:
         53:35:7e:23:7b:39:ed:8d:62:20:bb:2a:a0:66:49:00:ce:61:
         1a:e8:1a:b6:6f:79:50:7b:a9:0f:e0:57:37:1f:94:fd:33:15:
         ce:a0:cc:88:37:ea:0b:c0:0c:4b:19:27:a4:1e:b3:fb:c5:f7:
         43:e7:a6:33:a4:16:42:f5:77:63:9d:03:12:d7:d3:ec:ae:d9:
         39:45:39:1d:97:3b:20:ce:ed:c7:b8:c9:21:df:40:2e:d3:4e:
         13:21:ef:a1:8c:7a:f9:f7:c6:cf:47:f5:c0:da:93:24:81:30:
         10:3e:2a:f0:f6:22:3b:82:21:85:fa:1a:38:c9:d7:1b:c1:44:
         51:43:03:d6:8d:7e:73:f1:6b:f0:6a:61:37:9e:87:04:02:c2:
         8b:6c:eb:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:07:54 2025 by rpki-client