Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8749adee-27f3-32d3-983e-47ac820658d3.roa
File:                     8749adee-27f3-32d3-983e-47ac820658d3.roa (raw, json)
Hash identifier:          i2rKhfSrRPtYLfFvRP3BRomnZiA7bun/ss9OTZR3kU8=
Subject key identifier:   C3:25:29:6B:72:EE:43:8F:F5:39:23:08:87:91:D0:AE:71:27:6A:47
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584E104EFD623E44479DABACEE50
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8749adee-27f3-32d3-983e-47ac820658d3.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     7029
IP address blocks:        2604:cb00:36::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4e:fd:62:3e:44:47:9d:ab:ac:ee:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=a132d15e-037f-498c-91a2-51774576463a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:16:3a:a5:79:c8:16:1d:31:63:28:f3:b4:e0:
                    20:15:f5:fa:76:68:61:23:65:a2:62:d5:3b:fe:8a:
                    de:5a:f2:25:15:cb:5e:77:19:f6:b0:51:a4:f4:cb:
                    7e:8a:65:6e:8d:50:6e:b0:b1:5a:73:1b:da:d2:97:
                    61:c5:79:fe:2a:f6:dd:90:cf:9f:f6:5a:3b:17:ce:
                    7e:3d:1b:67:24:ed:7c:b8:e2:47:3d:b3:8a:6e:25:
                    3a:11:05:6c:6d:c8:e7:61:c5:96:96:6e:88:c3:7a:
                    82:55:59:e4:d0:e9:4b:48:73:07:6d:b9:7d:88:2e:
                    d4:00:af:32:46:05:2e:dd:ae:12:68:8d:09:fb:53:
                    75:89:20:7a:44:d2:ce:b8:a3:c4:f6:14:fc:da:00:
                    f4:8d:0f:2b:67:5a:71:d9:30:48:21:65:fb:26:a7:
                    99:a8:88:26:34:88:b0:c1:c1:7d:00:45:81:a9:7b:
                    ad:08:7b:d7:6a:ed:3b:d6:32:fb:02:4d:48:61:3e:
                    51:cc:54:76:3f:96:58:30:d1:c4:37:fb:0f:66:29:
                    d3:6e:6e:54:8f:be:1a:21:14:c0:86:9e:44:93:51:
                    27:60:9f:1c:de:9a:a1:28:1f:11:19:1e:71:43:42:
                    46:f9:6a:3a:b3:4d:ea:bc:3b:36:37:b7:8e:83:5d:
                    13:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:25:29:6B:72:EE:43:8F:F5:39:23:08:87:91:D0:AE:71:27:6A:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8749adee-27f3-32d3-983e-47ac820658d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cb00:36::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:79:13:6f:07:2b:ab:51:ce:4f:db:10:dd:e1:37:e9:39:ef:
         f9:b6:67:4a:40:a5:53:b9:4a:26:8e:90:17:47:4e:3e:e5:c3:
         72:1a:dd:4a:9e:86:f9:e7:1c:b1:22:55:0b:9e:ad:f3:1c:8f:
         fd:8d:bd:6a:7b:e2:5e:40:8f:56:a2:d3:19:6a:79:7f:68:ca:
         f0:9c:31:d5:f6:af:05:3e:b4:dd:e6:b6:63:a8:7f:73:73:68:
         f0:ad:d1:e4:88:b6:3f:0d:94:06:15:4e:29:54:f7:40:eb:09:
         5c:66:f2:9f:75:ad:96:d2:75:ec:bc:dd:eb:86:c9:53:f5:84:
         b2:82:44:18:f5:d7:ff:17:c8:4f:fd:09:d1:08:81:5c:66:6b:
         f1:17:8d:63:f6:77:4d:f0:c6:3e:59:01:2f:1c:a2:51:bc:bf:
         c5:16:2c:fe:71:ae:35:27:ed:f3:14:e5:90:15:1e:c9:0f:5e:
         9c:6a:bb:9a:dd:cf:e7:4f:2b:1d:0f:c3:4b:6f:ed:86:13:04:
         5f:42:56:21:7c:4e:34:a5:0a:9e:15:1d:c8:60:c4:d8:d6:64:
         20:17:cb:11:7c:cc:6a:91:a5:32:7b:34:26:4c:1a:94:9e:9a:
         5e:ca:ea:32:c0:1c:f4:05:d0:3d:a6:0a:cd:35:b4:d1:96:94:
         18:d6:ee:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:27:18 2026 by rpki-client