Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b3253730-2bce-3ed6-b8ef-448c69deee6b.roa
File:                     b3253730-2bce-3ed6-b8ef-448c69deee6b.roa (raw, json)
Hash identifier:          jk2u9eoIfOiQHg3F1j0QQaxADZioq8v33yOCdQ7iOwM=
Subject key identifier:   0E:C1:59:66:6D:0C:49:EF:B5:03:5D:C8:8C:51:C6:B9:F5:14:36:AE
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584E104F1C044BC1162FAC9C7280
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b3253730-2bce-3ed6-b8ef-448c69deee6b.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     7029
IP address blocks:        2604:cb00:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4f:1c:04:4b:c1:16:2f:ac:9c:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=ad7769c2-7246-4f92-9a55-408e4b9575ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3f:fe:51:2c:22:d0:c5:f2:52:a5:25:24:1d:
                    e4:f5:ab:86:80:41:9b:d5:ca:01:42:0e:da:f1:56:
                    63:ea:bb:6c:4d:07:2c:ab:f3:37:f4:4d:3c:c3:64:
                    19:18:8a:3b:91:2e:65:4d:a3:d4:20:ae:fa:75:d8:
                    37:1e:57:8c:a0:d1:e3:09:72:58:44:15:09:5d:93:
                    ef:2c:78:4a:4b:5b:e5:11:85:c7:b5:b4:9e:7e:4f:
                    28:67:27:ae:c8:67:06:e8:08:1c:81:ed:17:dc:0c:
                    fd:73:a0:ee:25:31:08:3c:40:94:68:cd:31:2c:8a:
                    51:4d:4d:ff:83:f8:eb:29:23:77:26:b3:5d:fb:2b:
                    ba:4e:ee:23:54:ed:e4:43:6e:6b:43:d2:2b:f1:76:
                    5c:3f:de:30:27:5d:18:81:1a:53:c6:b8:7c:34:62:
                    00:65:e3:ee:c5:a8:b2:d7:6f:9d:aa:97:6c:a0:68:
                    ac:dd:b4:33:2a:27:72:86:ac:01:a6:4b:37:3a:9b:
                    3c:78:98:9b:20:19:1a:38:26:a7:82:c0:d8:b0:1f:
                    59:8a:60:3e:19:0d:64:ce:80:c1:20:31:a1:a3:f4:
                    bb:5e:4f:30:38:a3:2c:32:22:ad:d5:ca:dc:ad:c9:
                    ad:9b:58:42:66:a3:0e:63:89:4c:ec:fb:33:8c:c8:
                    ff:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C1:59:66:6D:0C:49:EF:B5:03:5D:C8:8C:51:C6:B9:F5:14:36:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b3253730-2bce-3ed6-b8ef-448c69deee6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cb00:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:5d:83:26:d7:45:47:38:bf:e7:b2:1e:b0:1b:e7:ae:55:8b:
         6b:97:88:e8:27:79:24:c5:84:b5:0a:0a:d7:51:5b:22:1d:6a:
         8c:c0:30:13:b6:f5:5d:1e:a6:b8:8e:14:01:e0:68:70:5d:94:
         24:da:e3:73:a4:99:c2:f2:e8:8e:23:0c:98:f0:d8:08:60:d8:
         51:22:a0:ad:0d:c2:04:de:b9:ba:f6:e1:ac:b2:9e:af:1b:36:
         5d:97:25:b3:ae:cf:2c:7c:e7:a5:46:1d:0b:ff:12:9b:43:81:
         1a:cf:2f:5e:d3:56:5c:5a:d0:99:30:a0:28:e7:d0:ae:86:07:
         1b:7e:e0:b8:1f:dd:18:6f:f7:22:e5:f4:a3:cf:fe:6c:fb:15:
         95:fa:49:9f:e4:e2:6b:76:57:e8:03:0a:f1:0b:3c:83:8d:39:
         88:a9:2d:23:53:59:82:a3:cb:1e:e3:b7:45:90:49:0c:84:cc:
         1e:44:22:25:68:4f:07:4b:7d:a8:f0:71:c6:75:4c:55:7d:82:
         e0:2d:7c:fc:ae:61:94:02:11:f9:40:53:f5:6c:3a:81:69:d4:
         e3:9d:ca:46:bd:e0:71:9a:c7:4b:d5:a2:41:88:44:53:ac:84:
         7c:02:ff:a0:e9:8e:e6:80:92:56:6d:e3:04:1d:14:5b:95:26:
         f5:58:ae:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:25:13 2026 by rpki-client