Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e3a4d905-858a-31aa-8009-15dbd8088c6f.roa
File:                     e3a4d905-858a-31aa-8009-15dbd8088c6f.roa (raw, json)
Hash identifier:          eLvbEw6FZ79ZpNP8Ol83HXM9OdysxA3lZX4pUe4Lc/0=
Subject key identifier:   01:65:81:87:BD:68:DE:8F:79:0B:84:A8:E9:A2:C4:31:A4:0D:11:EB
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584E1B79990FC6B45F6B620F6F00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e3a4d905-858a-31aa-8009-15dbd8088c6f.roa
Signing time:             Mon 08 Jun 2026 21:00:12 +0000
ROA not before:           Mon 08 Jun 2026 21:00:12 +0000
ROA not after:            Sun 06 Sep 2026 21:00:12 +0000
asID:                     7029
IP address blocks:        2001:19b0:640::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1b:79:99:0f:c6:b4:5f:6b:62:0f:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jun  8 21:00:12 2026 GMT
            Not After : Sep  6 21:00:12 2026 GMT
        Subject: CN=e6cba800-0ffb-4238-8c40-8fb74efa53c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2f:30:a3:56:98:77:20:a8:80:15:d5:b4:21:
                    5d:01:dd:52:f7:eb:9c:45:7e:75:ea:2d:64:f2:6c:
                    fc:4d:b7:59:ff:69:74:88:43:51:5f:1b:a6:38:40:
                    3c:55:70:de:5a:41:e0:c9:c6:2a:01:79:7d:29:e7:
                    ba:dc:9f:bb:ed:37:42:ce:40:40:96:ea:7a:61:28:
                    18:76:0c:42:b2:08:e2:e3:cb:1b:1f:e1:e0:09:e3:
                    c6:e6:26:8b:c9:5f:d0:85:5d:8a:98:ec:07:db:5c:
                    1e:5b:56:f5:b8:3d:d5:dd:fe:0b:c9:3d:85:a2:51:
                    3a:45:bd:0f:a0:2b:6b:43:72:20:f9:95:e0:6e:f8:
                    2b:22:c1:fe:d6:e3:2f:9a:61:d7:5f:ea:e8:08:88:
                    25:37:9b:a3:e9:e8:6d:de:17:c9:a5:83:18:18:92:
                    13:7c:cb:cd:e8:a7:3f:d2:bd:d3:08:98:de:fd:a8:
                    7b:db:c0:c7:36:30:4d:27:12:c7:66:f6:cb:97:b9:
                    f7:29:e5:20:19:1c:9e:1f:24:99:3a:2b:a3:f3:85:
                    1e:22:aa:84:a9:66:10:26:50:46:be:fb:ae:db:ff:
                    30:f0:e0:e9:a6:96:b3:23:37:3e:8c:d2:3b:f2:9a:
                    8b:68:37:99:87:c0:4c:d5:04:30:a4:c6:f1:3b:b2:
                    44:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:65:81:87:BD:68:DE:8F:79:0B:84:A8:E9:A2:C4:31:A4:0D:11:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e3a4d905-858a-31aa-8009-15dbd8088c6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:19b0:640::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:71:3f:73:07:a6:4b:eb:d0:cc:83:72:38:5e:c2:ff:d5:db:
         a9:62:1d:3d:93:2c:44:6e:80:a9:df:41:2b:8f:9e:81:f8:03:
         f2:8e:84:ed:09:de:53:60:13:24:15:00:86:64:9f:41:0a:bb:
         85:1a:ab:e8:0f:db:37:fe:51:dc:2a:1e:49:3d:d6:ec:3e:13:
         a1:81:24:90:ca:cf:35:81:eb:97:70:b0:c6:cb:6f:d4:c2:66:
         87:33:3f:2e:9f:ec:7f:c3:d0:45:9a:92:62:dc:c3:f6:d1:cc:
         11:d7:da:aa:04:08:0b:e3:b8:4b:45:79:9e:f6:47:f2:b3:b3:
         ad:99:07:22:6e:1d:91:f9:54:60:c2:41:1e:c9:42:3c:48:cb:
         c7:6e:56:b3:e0:2f:19:b1:cf:39:ac:57:ab:03:35:4e:df:b4:
         a0:22:5a:65:d4:e3:f4:78:e5:98:57:47:41:f1:6b:b5:a8:27:
         41:e3:db:7e:19:86:f6:a6:00:39:96:9e:8b:f9:83:b8:be:56:
         be:73:65:f4:10:b5:ec:6b:9c:b5:75:ac:78:9f:40:72:f1:9e:
         72:12:e3:ad:71:ec:fa:36:ba:9f:86:1f:dd:ed:ca:ed:ca:87:
         49:4f:07:6a:fb:34:3d:70:f3:36:31:a1:71:ba:65:e2:44:12:
         9e:11:fa:b1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4beZkPxrRfa2IPbwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDYwODIxMDAxMloXDTI2MDkwNjIxMDAxMlowLzEtMCsGA1UEAxMk
ZTZjYmE4MDAtMGZmYi00MjM4LThjNDAtOGZiNzRlZmE1M2MyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiy8wo1aYdyCogBXVtCFdAd1S9+ucRX516i1k
8mz8TbdZ/2l0iENRXxumOEA8VXDeWkHgycYqAXl9Kee63J+77TdCzkBAlup6YSgY
dgxCsgji48sbH+HgCePG5iaLyV/QhV2KmOwH21weW1b1uD3V3f4LyT2FolE6Rb0P
oCtrQ3Ig+ZXgbvgrIsH+1uMvmmHXX+roCIglN5uj6eht3hfJpYMYGJITfMvN6Kc/
0r3TCJje/ah728DHNjBNJxLHZvbLl7n3KeUgGRyeHySZOiuj84UeIqqEqWYQJlBG
vvuu2/8w8ODpppazIzc+jNI78pqLaDeZh8BM1QQwpMbxO7JESQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAFlgYe9aN6PeQuEqOmixDGkDRHrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTNhNGQ5MDUtODU4YS0z
MWFhLTgwMDktMTVkYmQ4MDg4YzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGIAEZsAZA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAINxP3MHpkvr0MyDcjhewv/V26liHT2TLERugKnfQSuPnoH4A/KO
hO0J3lNgEyQVAIZkn0EKu4Uaq+gP2zf+UdwqHkk91uw+E6GBJJDKzzWB65dwsMbL
b9TCZoczPy6f7H/D0EWakmLcw/bRzBHX2qoECAvjuEtFeZ72R/Kzs62ZByJuHZH5
VGDCQR7JQjxIy8duVrPgLxmxzzmsV6sDNU7ftKAiWmXU4/R45ZhXR0Hxa7WoJ0Hj
234ZhvamADmWnov5g7i+Vr5zZfQQtexrnLV1rHifQHLxnnIS461x7Po2up+GH93t
yu3Kh0lPB2r7ND1w8zYxoXG6ZeJEEp4R+rE=
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:35:38 2026 by rpki-client