Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ab527d3-20cc-3274-89f8-d80b8347802d.roa
File:                     8ab527d3-20cc-3274-89f8-d80b8347802d.roa (raw, json)
Hash identifier:          ggqPP40Z+owak0qBUNH5phG+4jUV/OdCti528i/m4mY=
Subject key identifier:   7B:5D:DE:C0:A1:BD:49:5A:8D:07:C0:1B:EB:34:A3:B9:B2:CA:91:4C
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584E1B79978D404D6E69500135C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ab527d3-20cc-3274-89f8-d80b8347802d.roa
Signing time:             Mon 08 Jun 2026 21:00:12 +0000
ROA not before:           Mon 08 Jun 2026 21:00:12 +0000
ROA not after:            Sun 06 Sep 2026 21:00:12 +0000
asID:                     7029
IP address blocks:        2001:19b0:350::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1b:79:97:8d:40:4d:6e:69:50:01:35:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jun  8 21:00:12 2026 GMT
            Not After : Sep  6 21:00:12 2026 GMT
        Subject: CN=91a2831d-9e7e-43bd-bc60-a8b43f521c2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:19:12:4c:2b:48:5a:87:18:8a:09:49:ba:2d:
                    59:97:b5:bc:1e:fd:3e:71:35:cc:87:4a:63:1b:d4:
                    5d:a4:f6:6d:4e:24:59:79:bf:66:86:c8:5a:82:2c:
                    ee:be:29:8b:9b:9c:6f:9e:23:2c:b6:5b:75:a1:32:
                    b9:5e:7b:d3:4c:62:74:53:b6:76:fe:19:f6:4c:e4:
                    a7:e4:41:fd:8a:0a:ce:8f:1e:61:77:c3:c5:58:5d:
                    c1:22:82:ca:9b:19:d8:dc:dd:dc:e7:91:3d:b2:7b:
                    98:2b:5d:0a:ad:c4:f4:89:30:6c:70:50:e1:60:4f:
                    ac:2e:dc:e8:e6:4d:06:1e:9c:21:b4:e0:e8:f8:9e:
                    4b:0c:58:52:35:52:5d:d9:65:63:30:45:1b:ee:f9:
                    90:8f:03:11:bf:5e:f9:54:7a:89:c5:cd:0e:39:ea:
                    f5:97:40:02:bc:03:a4:47:fa:04:65:b1:ab:31:f3:
                    d9:c3:b4:a1:b2:c4:e7:9a:d0:5b:fb:68:80:9a:76:
                    f8:f3:81:23:68:20:12:2d:90:4d:dd:9c:14:08:01:
                    a7:ac:33:9e:ac:5a:8b:ec:bc:f8:fa:30:d6:f1:79:
                    24:6c:58:ab:3d:6b:39:68:64:a1:f8:81:87:15:f9:
                    16:65:5a:43:76:84:03:6c:af:b5:b5:6f:0d:cb:ce:
                    f5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:5D:DE:C0:A1:BD:49:5A:8D:07:C0:1B:EB:34:A3:B9:B2:CA:91:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ab527d3-20cc-3274-89f8-d80b8347802d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:19b0:350::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:b4:3a:9a:1b:91:5f:27:3e:8e:84:26:5b:f5:e1:22:fb:05:
         fd:49:de:dc:3c:0f:47:2d:f0:b8:f6:cd:2e:ab:19:ea:e0:3c:
         36:1e:c9:d7:bc:10:a0:02:18:d2:41:82:8f:14:29:c3:ff:5e:
         16:ef:61:62:58:be:3f:98:64:cb:23:b9:07:a6:00:50:92:45:
         09:88:fd:2b:93:f1:a4:93:a4:3e:67:6b:92:2e:6a:41:17:dd:
         e1:cb:f0:44:04:81:b9:f3:46:ce:c3:bf:0c:f8:6f:5c:bc:2d:
         62:e1:39:a5:2f:15:c5:43:21:66:d1:6e:8e:3d:40:4a:86:59:
         6b:5f:23:70:16:f3:f3:c4:ca:32:59:a5:8a:60:5f:cd:f3:c7:
         4b:17:67:d7:4d:85:f3:5c:ac:24:a0:d5:28:4a:f1:62:46:b0:
         dc:72:b9:e4:b3:9c:98:b7:db:e0:75:e3:b5:cc:bc:92:16:cb:
         17:33:3f:e9:07:fa:b2:39:a6:a1:c0:f1:99:be:e0:fd:59:2d:
         fa:8c:6e:39:d7:cd:da:34:2c:af:a1:7c:21:be:56:3d:08:ad:
         61:66:28:10:0c:96:37:df:27:a0:48:55:35:36:c2:5a:62:3f:
         49:7b:51:17:b1:53:db:63:81:77:ff:b1:d7:17:d9:97:a7:d7:
         ca:68:09:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:04:15 2026 by rpki-client