Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a5d3ed3d-b9c6-3810-81b8-99778e6a1fb0.roa
File:                     a5d3ed3d-b9c6-3810-81b8-99778e6a1fb0.roa (raw, json)
Hash identifier:          dRt2rX5mTpl+au8ydiu8vhPHvU+FiRf02HmzEU2xZ2E=
Subject key identifier:   E7:9F:39:21:EB:86:51:A9:E3:60:FB:4A:FC:D1:63:10:A8:3F:39:4B
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584E104F1594DBE3D4B0F5447980
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a5d3ed3d-b9c6-3810-81b8-99778e6a1fb0.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     7029
IP address blocks:        69.46.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4f:15:94:db:e3:d4:b0:f5:44:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=3cbb2777-cdd6-423d-9922-cf7bf860b09d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:df:94:af:40:ef:63:b1:49:24:c5:17:f6:43:
                    e5:48:49:40:09:56:cf:3a:ba:d6:6b:90:23:ec:c6:
                    db:08:bb:69:4e:39:5a:f4:bf:b7:4b:8c:ff:3b:74:
                    9d:38:17:31:52:9a:2d:32:79:59:cf:88:82:74:5c:
                    a6:6d:32:c0:62:d4:b4:ec:13:6b:4e:4e:e3:b0:d9:
                    b9:9a:15:49:b2:aa:2a:a4:fd:ba:10:70:92:73:d1:
                    a6:01:c8:cf:f0:98:c7:0e:15:b1:17:02:de:7e:c2:
                    2e:58:76:32:9b:65:a6:3e:85:de:eb:94:e3:34:7e:
                    d9:f4:92:62:c1:e8:3f:79:a0:e1:b8:74:0a:d3:48:
                    c3:e3:6a:91:27:4a:fd:33:66:ee:6c:93:41:3c:e9:
                    15:8d:30:c8:ce:6f:f7:49:e5:cd:9e:25:4e:ad:48:
                    b6:94:0a:86:5e:40:5e:f4:23:64:e0:74:d9:2f:fa:
                    be:47:3d:36:30:95:f7:0f:e3:24:33:43:5a:89:23:
                    3b:0b:05:78:9c:71:c2:f5:45:5f:c4:94:41:68:28:
                    65:4a:8f:7e:4f:38:59:82:7c:6d:37:f0:9d:b0:84:
                    7c:37:b6:03:05:4c:8a:4a:ad:e9:a0:32:5e:5c:c6:
                    af:d3:06:fb:e6:e5:cb:b6:d5:49:94:73:d0:fe:d4:
                    7a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:9F:39:21:EB:86:51:A9:E3:60:FB:4A:FC:D1:63:10:A8:3F:39:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a5d3ed3d-b9c6-3810-81b8-99778e6a1fb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.46.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:56:46:bc:5e:12:36:89:e0:9a:d4:ab:a0:5d:3c:4a:9e:08:
         30:15:ef:96:d0:a7:7d:cd:24:dd:8a:6f:e6:f3:8c:c1:f3:21:
         ba:1e:bd:45:dd:aa:3e:84:e0:86:3f:4c:79:f6:cc:fe:c8:cc:
         59:1e:3f:cf:ec:d0:02:0f:78:5c:94:a6:a9:61:16:3b:53:ce:
         f9:4a:26:6e:d6:58:8a:42:6e:4b:68:f9:e2:21:a5:c8:1e:74:
         a5:9d:c4:c0:c8:51:27:e1:7c:c0:f9:df:61:99:aa:ff:a8:22:
         5d:46:af:f7:16:45:f4:82:72:88:9f:88:7d:f7:51:4c:58:9e:
         e5:01:3e:b9:f2:05:f4:67:3d:a9:fb:2b:73:e0:ee:34:e0:76:
         f7:ff:31:32:2b:99:9c:54:85:0b:d5:4f:7a:14:53:96:b4:46:
         d2:a2:3b:5b:32:09:e7:7c:16:61:9b:1e:c9:cd:ef:9d:99:3d:
         32:6e:c9:12:82:8f:c1:8e:9e:d0:7a:3d:42:45:8e:e4:f1:a5:
         5a:b6:b1:c1:6e:11:d1:e9:46:6d:3f:b9:95:88:fc:20:49:f4:
         1b:d7:f5:1d:7d:79:cf:0f:8b:ec:4c:32:c4:30:ad:7c:d0:b1:
         ae:b2:39:fe:c6:23:84:2e:bb:44:ab:66:df:49:a0:ea:11:9f:
         df:a4:76:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:25:28 2026 by rpki-client