Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4f1a4496-1068-3479-8ff5-e4d8cdc81709.roa
File:                     4f1a4496-1068-3479-8ff5-e4d8cdc81709.roa (raw, json)
Hash identifier:          r49bS87otU2qhot25WSpFGemLURutleeHSXK6WueqOs=
Subject key identifier:   8F:1C:C3:72:D9:00:AD:EC:D9:98:62:C9:84:C6:B7:86:69:BD:B8:76
Certificate issuer:       /CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
Certificate serial:       010D0C9F4328584D7CCFC561FEE145203CA93980
Authority key identifier: 19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4f1a4496-1068-3479-8ff5-e4d8cdc81709.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     49
IP address blocks:        2610:20:6fcd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:c5:61:fe:e1:45:20:3c:a9:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=bbea326a-d8d0-4c8b-b73b-447abc0ce80c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b8:3a:41:38:e2:74:14:19:97:e1:ce:e9:04:
                    a6:1b:80:46:45:e4:b4:d5:28:c8:a2:5c:7c:32:16:
                    13:38:75:cd:e0:09:2a:5d:c6:80:c4:70:cc:72:b5:
                    dd:fb:3c:6a:b0:3e:c0:06:5c:c5:11:fb:40:95:51:
                    37:4f:d0:f1:d4:17:ed:c1:51:16:ba:bb:fc:ad:b9:
                    72:c4:fd:49:c1:79:b4:46:84:ef:d3:5b:31:2c:04:
                    56:74:f2:ad:0e:ae:3f:be:b1:8a:75:2f:ed:77:23:
                    4b:1e:e4:99:e4:bb:30:9b:8e:b2:6e:ef:42:a4:cd:
                    59:f4:ea:5a:1e:60:29:37:ad:96:9f:f0:d0:bc:cc:
                    af:1c:8c:46:1b:2f:be:c4:30:04:d0:d0:6d:0c:76:
                    23:e8:79:3a:12:36:cb:12:5c:c4:5c:aa:28:a0:b2:
                    ab:c5:17:c1:7e:08:bf:bb:a1:36:59:dc:73:23:0f:
                    65:60:62:bc:7c:59:13:36:ef:8a:21:9b:88:3d:ae:
                    d9:e4:87:6b:12:6b:74:5c:1d:9a:2c:0c:ff:b6:21:
                    b7:e3:28:88:5c:76:58:66:f8:90:1b:33:0e:2b:ae:
                    32:76:26:96:13:82:de:ed:cf:ae:ce:3c:58:f7:53:
                    98:48:08:18:ae:ff:d9:cf:24:42:9d:3a:fd:fe:7e:
                    d5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1C:C3:72:D9:00:AD:EC:D9:98:62:C9:84:C6:B7:86:69:BD:B8:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4f1a4496-1068-3479-8ff5-e4d8cdc81709.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl

            X509v3 Authority Key Identifier:
                keyid:19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:6fcd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:e9:27:60:95:0c:d9:7f:b1:b9:a0:c6:5a:22:91:e9:f2:8d:
         58:c1:b6:5e:14:2c:6d:e7:a9:68:bf:d6:e8:1d:3e:34:cb:f2:
         76:62:fc:ae:e4:95:3a:50:cc:81:ce:94:df:f0:10:e6:13:c8:
         da:d4:b2:82:d5:ed:f7:46:b2:47:ad:7b:98:fa:99:aa:4f:5a:
         be:f9:25:6a:91:d9:44:b2:56:85:81:2c:fb:2f:bb:66:78:bb:
         57:20:a3:10:df:e3:38:c5:d9:b6:10:44:13:bf:26:a8:1a:cf:
         c9:27:20:bd:69:bb:c2:fa:b6:e0:79:d8:5e:18:f0:3c:bd:2f:
         29:02:77:46:9b:c8:74:d0:91:4d:00:6b:48:07:9a:32:b6:fd:
         79:cd:34:19:70:c9:fb:a9:99:7c:ea:c2:d2:2f:78:cb:0d:54:
         81:c9:a1:a4:98:b1:8e:d8:6c:64:df:6d:fb:27:87:2e:a1:28:
         01:46:a2:b7:5b:1e:a7:8a:e0:7a:a9:ff:da:5b:33:43:3e:6f:
         4a:d0:09:24:7f:f3:29:ed:45:dc:99:2e:e8:21:25:7f:cf:95:
         7b:4b:44:cd:c8:1a:a0:ba:1a:cc:e0:a9:bb:b2:71:65:f4:b6:
         37:91:b2:f2:dd:ef:26:22:1c:fc:9c:89:8b:d6:28:cc:71:22:
         0d:f4:2b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:38:04 2026 by rpki-client