Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d062054b-b4d4-32a5-a493-68c3df8a306f.roa
File:                     d062054b-b4d4-32a5-a493-68c3df8a306f.roa (raw, json)
Hash identifier:          TxFt2goDvhkxi5ZSapCBT1kEk5dsCU7V8E0ZiNRkc7E=
Subject key identifier:   4B:4A:3A:CC:00:4B:90:D3:7F:E4:1A:37:FC:43:22:B9:3F:E5:DF:3E
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584E1B7996BFC8822D29B2B7A7F0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d062054b-b4d4-32a5-a493-68c3df8a306f.roa
Signing time:             Mon 08 Jun 2026 21:00:12 +0000
ROA not before:           Mon 08 Jun 2026 21:00:12 +0000
ROA not after:            Sun 06 Sep 2026 21:00:12 +0000
asID:                     7029
IP address blocks:        2001:19b0:64::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1b:79:96:bf:c8:82:2d:29:b2:b7:a7:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jun  8 21:00:12 2026 GMT
            Not After : Sep  6 21:00:12 2026 GMT
        Subject: CN=fcb64db1-339c-440f-902a-8c0069b67d4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ce:f3:7e:a1:89:8b:bb:03:33:de:d0:57:36:
                    27:32:b9:80:fd:21:13:04:bf:44:5a:18:6e:56:94:
                    3b:b5:48:bd:59:6c:0c:b0:e9:a4:ba:93:81:19:bf:
                    48:a0:2f:da:7c:2d:fc:34:81:b9:5c:4d:c2:c6:81:
                    ed:60:c9:96:dd:49:79:79:f2:6c:26:b0:59:ab:bd:
                    45:75:dd:90:8d:95:3c:39:6a:f4:aa:08:c0:b9:47:
                    5a:b1:ac:30:8f:dd:1e:09:b3:d0:3a:6a:ed:69:a4:
                    ec:a2:d4:5f:a6:38:e1:df:de:f6:53:21:96:3f:3d:
                    3f:68:4b:e0:9b:bc:6f:e4:fd:b8:0c:7c:4b:e5:63:
                    7b:2d:e3:b4:a8:43:a9:c6:3c:93:76:a6:77:12:d5:
                    88:59:34:99:a4:5e:ed:4e:6d:88:7c:75:3d:9a:13:
                    e6:66:47:aa:07:b3:68:e4:e1:0b:35:01:f1:64:cd:
                    fd:00:28:e4:02:a2:ba:5e:fd:24:ee:c4:fa:14:d3:
                    23:fe:64:64:af:96:00:2b:01:32:8e:4b:21:c3:12:
                    5b:f3:22:e3:8f:4c:20:7b:88:c3:46:c4:a7:87:68:
                    2c:2e:75:8a:3a:e2:0e:fe:14:de:0e:a2:83:0c:34:
                    05:ef:cd:68:7d:db:22:ee:44:e8:f1:6c:5a:d3:ee:
                    a4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:4A:3A:CC:00:4B:90:D3:7F:E4:1A:37:FC:43:22:B9:3F:E5:DF:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d062054b-b4d4-32a5-a493-68c3df8a306f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:19b0:64::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:a4:3e:c4:3c:db:7e:96:41:fe:f3:fb:fa:0d:56:d9:9b:6c:
         f3:36:b4:ad:dc:b3:1f:a3:34:1d:82:3b:e7:3f:a4:a2:e1:c7:
         48:69:e2:60:ee:cb:89:fe:32:a2:8a:e6:5e:26:f6:cf:8a:4f:
         f6:1e:56:d1:95:a0:26:1e:0d:be:25:4c:30:26:8c:e2:1c:51:
         63:2c:b8:6e:5c:62:0d:3a:0a:dc:0c:46:91:91:b5:df:72:d6:
         cf:e8:16:23:cc:79:8f:dd:7f:56:12:ef:7a:08:ae:da:00:00:
         cb:86:c4:0b:c6:6a:b5:98:d6:4c:35:51:10:cf:6d:50:0f:9f:
         21:5c:33:35:4b:2f:39:34:c9:55:96:ad:78:95:39:8b:c4:cf:
         f5:bb:cf:2d:48:09:28:2b:b1:8d:05:69:aa:71:ff:14:19:b7:
         c3:ea:93:8b:da:99:99:0b:ae:55:02:0c:b3:70:84:18:24:6a:
         0b:98:e5:69:53:74:7f:4e:b3:53:02:fd:3b:2a:f1:75:f3:8c:
         4b:56:23:c9:73:d7:65:19:2c:e1:39:e4:2a:65:5c:90:40:01:
         01:ff:5a:3f:45:77:ca:36:e8:91:13:ec:e0:06:e3:f7:7b:c3:
         ac:95:c7:92:4a:e3:9e:b4:c7:78:81:2e:d1:79:f0:0f:ec:cb:
         4f:91:36:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:19:25 2026 by rpki-client