Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f147ab9a-71fc-3b03-8cd7-c8d573629a53.roa
File:                     f147ab9a-71fc-3b03-8cd7-c8d573629a53.roa (raw, json)
Hash identifier:          wI/AjFxOZiR5xqtubt0LpH/6AlLBJKXv1DyRdWnUpIQ=
Subject key identifier:   1D:E9:D9:6C:13:D6:F4:B8:05:0B:32:EE:E6:FE:38:0F:E9:41:62:AD
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584E104EFCE6AE01F41CBF3BC880
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f147ab9a-71fc-3b03-8cd7-c8d573629a53.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     7029
IP address blocks:        2604:cb00:27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4e:fc:e6:ae:01:f4:1c:bf:3b:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=140a16c4-c529-4460-bc50-cfeee05f32fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e7:c4:8d:4c:f6:b3:fc:4a:42:89:4e:41:68:
                    99:64:7c:64:8d:6d:61:37:bb:f2:cf:91:be:74:06:
                    bb:c8:e2:a5:77:1e:f8:3f:52:be:b5:67:8f:b9:8b:
                    09:3f:73:eb:e8:97:de:43:dc:3a:30:18:85:d1:23:
                    c7:0f:9e:3c:b6:7a:2b:9c:db:69:56:46:4e:51:da:
                    17:08:12:1c:72:95:00:ef:a9:b4:98:46:d4:78:9c:
                    4f:b9:6e:47:74:b8:2f:51:84:c2:d6:ca:ce:0b:5b:
                    f0:aa:17:e5:e5:41:c4:ad:1d:25:bd:88:b6:78:42:
                    5f:df:b8:e8:21:96:ae:ef:89:20:34:4d:47:06:f7:
                    9a:3a:29:e4:68:df:3b:7b:5b:34:84:3c:69:a2:1e:
                    65:e0:fc:d4:df:26:57:ba:9a:22:26:e5:20:cc:fc:
                    45:79:2a:03:85:7a:b3:91:01:8d:60:71:dc:fb:dd:
                    ed:02:a2:c6:4e:c8:75:a0:2e:9e:98:69:54:d0:ce:
                    2c:bf:12:4b:c0:6b:58:7b:90:2f:d2:4b:cf:13:27:
                    ff:db:5c:8e:a9:16:50:c8:9e:f3:64:cd:b8:6b:6c:
                    d0:7f:4f:96:e8:13:26:7b:72:1e:7b:94:7d:ed:0e:
                    9f:ce:a7:88:2b:26:9e:c4:13:66:c1:d4:0e:76:4a:
                    c3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E9:D9:6C:13:D6:F4:B8:05:0B:32:EE:E6:FE:38:0F:E9:41:62:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f147ab9a-71fc-3b03-8cd7-c8d573629a53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cb00:27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:ec:c3:cf:64:ee:80:27:99:0d:9f:9d:f6:91:42:c1:d3:5f:
         7d:99:5f:57:5e:fa:ba:a2:af:d8:18:e6:d2:b7:ee:de:b0:f0:
         c2:8b:a1:e1:0d:72:03:f8:8c:88:b8:dc:bc:1d:06:05:3e:99:
         71:96:e4:7a:09:d9:2d:99:ef:a5:8d:35:01:25:94:34:7a:a6:
         51:71:de:f2:60:ea:0f:3d:af:a4:81:6a:db:09:6b:bc:d1:e2:
         79:0c:1a:73:da:86:d9:32:85:48:a8:5a:26:e3:7c:f4:9b:86:
         90:bb:b8:ae:b1:07:cf:75:32:29:a0:7e:9a:c0:44:fa:58:14:
         a1:32:38:25:43:4f:82:5d:08:da:9f:b8:54:e1:2d:e4:07:28:
         76:ba:49:99:a3:92:e7:dd:4e:19:db:5f:2a:3f:6d:f1:ec:21:
         1f:2c:79:a8:6d:f7:1e:ee:bd:a5:51:b3:6b:02:41:49:ab:4a:
         8c:46:16:0a:fb:13:bb:aa:c6:88:07:43:6b:11:8e:d2:00:f0:
         cb:fc:62:3e:30:bb:fe:51:07:00:7f:fb:af:01:f3:49:72:e3:
         10:f0:fc:01:7e:55:d7:5d:0e:48:2d:e1:e3:b0:63:44:4b:2d:
         a0:b7:2e:89:cd:59:cf:d5:de:92:76:29:74:a0:7c:5d:04:5d:
         c5:63:0f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:18:34 2026 by rpki-client