Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c8d7519d-0e68-32a8-b9a1-6389060b0225.roa
File:                     c8d7519d-0e68-32a8-b9a1-6389060b0225.roa (raw, json)
Hash identifier:          tApjBGk3zDinNTRqTnSVldfmeXopo2EiO913rEFJFqg=
Subject key identifier:   CD:91:56:FA:83:9B:AC:08:D5:50:86:5E:00:C2:B4:28:35:92:77:AE
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584E1B7997CFF1086E67F8121040
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c8d7519d-0e68-32a8-b9a1-6389060b0225.roa
Signing time:             Mon 08 Jun 2026 21:00:12 +0000
ROA not before:           Mon 08 Jun 2026 21:00:12 +0000
ROA not after:            Sun 06 Sep 2026 21:00:12 +0000
asID:                     7029
IP address blocks:        2001:19b0:34f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1b:79:97:cf:f1:08:6e:67:f8:12:10:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jun  8 21:00:12 2026 GMT
            Not After : Sep  6 21:00:12 2026 GMT
        Subject: CN=9850a0f1-df41-4707-a7ea-29117699015a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9e:a5:53:2a:6c:13:fb:a0:9a:f1:fb:0f:4b:
                    c8:40:4b:36:c9:74:f3:c2:1e:4f:1b:4a:87:01:a4:
                    91:3d:23:f0:5e:1c:6d:49:10:77:63:6c:d5:83:7b:
                    b2:da:f6:05:58:10:b2:13:08:7c:0a:16:7d:3c:8f:
                    0a:28:2f:6b:5c:84:e0:aa:22:bd:a4:ac:97:e9:48:
                    73:04:8c:db:50:a2:27:75:e2:ff:9d:aa:54:9b:19:
                    bc:c6:39:1a:d3:88:d9:b4:e5:d9:79:d6:1b:a2:26:
                    02:e4:35:a7:72:62:70:2b:b3:79:0d:27:00:6e:4f:
                    e0:a3:7d:d3:19:9c:9e:3f:7a:ee:de:19:cd:89:47:
                    d7:6c:5c:2d:20:3d:fb:f3:38:29:58:28:9f:7a:a3:
                    59:5f:e7:08:9d:45:15:e7:e2:81:e9:40:f7:d5:e2:
                    1a:95:81:1c:91:bb:ee:22:4e:7c:08:2c:02:0d:c6:
                    b8:4a:41:14:b9:c4:b3:e2:6d:1f:bd:90:31:0d:5a:
                    11:38:a5:c6:cd:44:f6:5c:00:9d:3e:86:d4:5f:df:
                    6d:fe:47:e5:fb:7b:02:ba:07:85:c6:4c:09:c2:da:
                    e1:5a:9c:da:fa:3e:97:14:d0:63:47:cd:c4:65:49:
                    c7:0d:ae:16:6f:4e:da:39:f8:a5:11:d2:6a:47:ba:
                    ab:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:91:56:FA:83:9B:AC:08:D5:50:86:5E:00:C2:B4:28:35:92:77:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c8d7519d-0e68-32a8-b9a1-6389060b0225.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:19b0:34f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:84:4d:52:52:55:b1:4b:d4:c8:66:0d:93:de:a2:0f:09:0c:
         64:5a:8b:74:26:98:3b:61:39:8c:10:ea:d0:e5:eb:c0:08:0d:
         a6:5e:17:cb:22:c1:02:ce:aa:99:fe:22:64:9d:47:a3:5a:f6:
         3f:77:32:7d:13:4a:06:a5:c5:75:24:c8:2d:5b:59:3e:1f:7c:
         27:f5:2c:31:29:85:f1:83:68:07:29:5b:26:0a:c3:80:80:69:
         fb:71:a5:17:1a:d0:57:73:06:ce:c7:6f:94:3f:3a:f9:f9:23:
         93:1b:bd:82:47:29:be:26:e7:6c:48:3d:c4:a6:fa:61:ba:9b:
         31:93:3c:f8:10:27:b2:d8:0a:cd:22:bd:26:6b:74:67:c7:94:
         1b:9f:62:0d:f5:d2:ec:9d:fe:08:e2:40:bb:4b:bc:fd:80:b3:
         f1:6c:8f:f1:86:5a:ea:65:00:4b:3b:b4:39:ee:b7:b3:aa:c9:
         b9:5f:26:52:69:0c:1a:41:cc:9e:9c:a3:64:a8:f3:28:0f:97:
         ea:33:84:38:d3:26:37:6c:b3:9c:80:c2:ba:72:69:7b:86:2e:
         39:66:3a:57:3b:c0:cd:78:5d:3b:0a:3a:d9:14:d2:ad:a5:c4:
         a8:83:fd:23:cf:29:74:8c:17:61:29:fe:ba:07:70:18:66:b7:
         b7:91:e3:39
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4beZfP8QhuZ/gSEEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDYwODIxMDAxMloXDTI2MDkwNjIxMDAxMlowLzEtMCsGA1UEAxMk
OTg1MGEwZjEtZGY0MS00NzA3LWE3ZWEtMjkxMTc2OTkwMTVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0J6lUypsE/ugmvH7D0vIQEs2yXTzwh5PG0qH
AaSRPSPwXhxtSRB3Y2zVg3uy2vYFWBCyEwh8ChZ9PI8KKC9rXITgqiK9pKyX6Uhz
BIzbUKIndeL/napUmxm8xjka04jZtOXZedYboiYC5DWncmJwK7N5DScAbk/go33T
GZyeP3ru3hnNiUfXbFwtID378zgpWCifeqNZX+cInUUV5+KB6UD31eIalYEckbvu
Ik58CCwCDca4SkEUucSz4m0fvZAxDVoROKXGzUT2XACdPobUX99t/kfl+3sCugeF
xkwJwtrhWpza+j6XFNBjR83EZUnHDa4Wb07aOfilEdJqR7qrXwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFM2RVvqDm6wI1VCGXgDCtCg1kneuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzhkNzUxOWQtMGU2OC0z
MmE4LWI5YTEtNjM4OTA2MGIwMjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEZsANP
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGqETVJSVbFL1MhmDZPeog8JDGRai3QmmDthOYwQ6tDl68AIDaZe
F8siwQLOqpn+ImSdR6Na9j93Mn0TSgalxXUkyC1bWT4ffCf1LDEphfGDaAcpWyYK
w4CAaftxpRca0FdzBs7Hb5Q/Ovn5I5MbvYJHKb4m52xIPcSm+mG6mzGTPPgQJ7LY
Cs0ivSZrdGfHlBufYg310uyd/gjiQLtLvP2As/Fsj/GGWuplAEs7tDnut7Oqyblf
JlJpDBpBzJ6co2So8ygPl+ozhDjTJjdss5yAwrpyaXuGLjlmOlc7wM14XTsKOtkU
0q2lxKiD/SPPKXSMF2Ep/roHcBhmt7eR4zk=
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:00:56 2026 by rpki-client