Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db1f8ff7-5e08-3727-83f3-f7fd47f5ce3d.roa
File:                     db1f8ff7-5e08-3727-83f3-f7fd47f5ce3d.roa (raw, json)
Hash identifier:          QT6norJ20vF8YUwYI2tWWS0b4Rec3IYLT5vv9Zm9Xb8=
Subject key identifier:   C1:68:08:73:0E:19:69:5B:B4:15:44:A2:E3:B1:28:7E:8F:59:3C:4B
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584E104F139B0FC4949DB006B2C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db1f8ff7-5e08-3727-83f3-f7fd47f5ce3d.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     7029
IP address blocks:        63.255.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4f:13:9b:0f:c4:94:9d:b0:06:b2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=e79ab584-4f73-429b-8c82-21cc9383167e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fb:a8:c0:80:62:85:f9:11:0c:99:a4:7c:a3:
                    a6:e3:26:03:6a:0f:c3:99:60:03:2a:41:27:f2:a6:
                    66:b6:b6:82:3c:da:5b:38:3e:03:f9:82:95:98:89:
                    18:2c:3b:b8:3b:9b:42:9d:81:40:f5:c4:1a:14:ff:
                    aa:cf:7a:e7:75:f8:8b:8b:a0:76:a0:b1:36:40:b7:
                    48:8c:5d:41:f0:77:cd:31:f2:7e:ee:80:ca:f3:2c:
                    d1:f4:0e:f1:bf:b8:c5:d6:4e:bf:c8:ba:b4:ec:b6:
                    a2:ee:c2:65:e2:e6:3f:54:e5:6a:a8:7b:46:5f:e9:
                    da:3b:8e:15:a1:f8:79:8b:73:c7:53:53:d9:c5:53:
                    b8:96:31:45:64:73:80:0a:c5:d3:d7:75:1f:82:9e:
                    fd:58:c5:f7:e3:9b:95:df:ed:96:8d:67:d0:e1:2b:
                    ff:22:a0:c6:77:8f:ae:85:0f:36:2d:d1:7b:b6:21:
                    74:c2:a9:bf:f2:4b:e1:06:e6:af:e1:28:87:71:5d:
                    b9:93:1c:91:70:69:ee:d7:6e:4e:8a:54:d8:b1:32:
                    52:5e:06:1a:7f:ac:63:a4:35:18:21:f5:fc:9c:37:
                    7a:aa:26:46:91:2b:4b:93:b2:29:fe:d6:ee:d5:2f:
                    86:6d:a2:4c:dd:a7:c5:7b:62:61:b5:be:e8:54:24:
                    e1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:68:08:73:0E:19:69:5B:B4:15:44:A2:E3:B1:28:7E:8F:59:3C:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db1f8ff7-5e08-3727-83f3-f7fd47f5ce3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.255.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:be:c7:98:09:d3:97:4a:d5:7a:65:c3:0d:9b:9c:17:b8:79:
         a0:88:86:a4:f8:c8:e9:3d:11:a0:4d:fe:4c:c5:25:61:f2:4b:
         86:5c:00:aa:2f:d8:d4:9b:04:af:68:fc:24:14:2d:95:d8:a2:
         03:c9:12:fa:cb:66:a1:68:5b:f3:7c:4f:c8:2e:7f:5a:9f:49:
         ee:7a:ae:7d:84:59:bf:fe:b3:1d:c1:0e:e5:8c:78:ff:b0:50:
         41:68:54:82:da:86:b6:b2:a9:f0:5d:92:89:d1:79:2e:db:5e:
         14:49:e3:cc:c8:0c:71:34:16:8c:c5:32:cc:12:a8:c6:57:40:
         29:69:6f:b5:c6:f3:79:d8:32:38:88:1c:2b:97:cf:a6:dc:ab:
         70:18:bc:a1:e4:8e:0d:d9:62:73:a8:0b:b5:53:89:07:a7:46:
         1b:e1:89:4b:23:38:56:ea:6e:a6:0d:10:64:f2:66:c7:46:e0:
         09:aa:1f:92:94:e5:2e:ac:76:3a:65:95:45:93:c1:01:30:27:
         cb:bb:dc:6f:a1:39:b0:35:d0:e7:4d:c9:a8:0a:cd:13:d9:2b:
         f1:d3:ba:42:59:13:72:d6:79:7c:0d:f0:5c:ea:82:2d:2a:cb:
         3c:26:58:d4:aa:83:e3:cb:38:d7:50:ad:9c:0b:ed:2f:28:dc:
         c2:3b:de:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:12:25 2026 by rpki-client