Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/49d4a850-27cb-308b-a7ec-c5c0c7afa746.roa
File:                     49d4a850-27cb-308b-a7ec-c5c0c7afa746.roa (raw, json)
Hash identifier:          lENYG5sOPDbR75QLSfA3AfYktRO/sGDay3insX8KAKQ=
Subject key identifier:   A8:33:08:8E:87:D9:64:44:0D:93:1F:71:B0:77:39:6D:72:31:71:DE
Certificate issuer:       /CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
Certificate serial:       010D0C9F4328584E0D84200D9BD286AAC3A42300
Authority key identifier: 97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/49d4a850-27cb-308b-a7ec-c5c0c7afa746.roa
Signing time:             Wed 03 Jun 2026 21:00:12 +0000
ROA not before:           Wed 03 Jun 2026 21:00:12 +0000
ROA not after:            Tue 01 Sep 2026 21:00:12 +0000
asID:                     18934
IP address blocks:        2605:9a40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0d:84:20:0d:9b:d2:86:aa:c3:a4:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
        Validity
            Not Before: Jun  3 21:00:12 2026 GMT
            Not After : Sep  1 21:00:12 2026 GMT
        Subject: CN=d304a95c-66ac-4ede-b2a1-e10a327857b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c4:9f:a5:90:f6:bb:95:14:bb:56:47:0c:3a:
                    bf:4e:3b:7c:9f:99:da:15:7d:04:24:17:96:f2:dc:
                    97:f7:a2:5b:a3:a9:83:e7:b8:20:cb:6b:a0:81:56:
                    b1:66:dd:fa:51:ae:9f:57:c2:5d:b1:fc:98:4c:56:
                    37:31:d8:4b:82:db:72:5f:50:52:00:dd:31:7f:86:
                    a5:a2:2b:d5:03:a8:ff:56:af:dc:91:85:a5:f2:03:
                    e4:e3:85:28:a2:73:bb:e3:f9:70:59:78:50:8b:39:
                    ec:1d:04:74:dc:64:e1:f0:fd:fd:b5:f3:ec:91:ad:
                    f6:e0:f6:de:6a:80:6f:06:b5:8d:e4:68:e8:c3:29:
                    ed:33:31:68:b7:77:9a:09:ae:32:9e:08:95:0d:dc:
                    79:05:a7:27:22:7a:36:ad:db:0c:50:c4:d1:31:76:
                    7c:1a:9a:62:e9:28:0c:b4:43:41:b3:11:0e:93:45:
                    d9:78:5e:0e:fe:0b:2a:82:b0:65:62:05:aa:88:07:
                    97:d0:56:20:e9:83:bb:56:93:fc:56:b4:62:29:90:
                    fb:07:ad:18:44:3d:ca:a8:ea:ad:50:ae:52:ab:9c:
                    ac:9b:22:a1:15:9c:b6:4e:e6:70:9a:d9:f6:db:dd:
                    ae:ab:55:a5:fc:b1:76:09:c6:dc:79:df:26:64:e1:
                    fe:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:33:08:8E:87:D9:64:44:0D:93:1F:71:B0:77:39:6D:72:31:71:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/49d4a850-27cb-308b-a7ec-c5c0c7afa746.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl

            X509v3 Authority Key Identifier:
                keyid:97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9a40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:f7:e7:26:79:f4:25:7e:ed:e8:b6:01:8e:c1:5b:a1:f0:55:
         af:00:00:94:c5:80:7c:3e:37:c5:5e:bb:fd:67:ea:bf:87:35:
         bb:3c:40:ed:d9:76:93:2e:0b:ab:e3:d3:c1:9b:9f:e1:c4:ed:
         ae:de:cb:f6:e3:7f:b8:f1:e2:36:c9:38:02:64:96:a3:5e:7f:
         da:36:61:06:1b:7d:60:d3:05:d5:a5:fb:4f:8b:41:ea:2f:4d:
         21:1f:df:83:ec:56:4a:b7:da:ab:4a:ce:2b:ee:ff:b0:66:bc:
         2d:20:6e:e8:4d:98:88:09:79:2d:39:8b:be:49:13:98:6f:c2:
         d0:43:e4:74:d8:e3:54:9c:4a:de:fd:62:eb:97:09:c7:46:2d:
         fb:4c:44:0e:31:74:76:35:1d:88:f4:4b:c7:05:a1:92:db:6b:
         fa:08:0f:3d:f3:f1:8c:38:a5:ba:73:32:cc:ca:0f:e8:b1:72:
         74:38:87:57:1f:7b:86:61:5f:9f:c1:e6:4f:5f:91:86:e9:9d:
         67:6a:17:af:ee:96:51:e6:f3:cb:e2:da:d9:ef:c2:18:0e:eb:
         e8:7a:95:18:87:d3:7b:b5:75:d1:be:77:52:98:4a:f1:a1:40:
         46:b9:92:3a:d1:d1:bf:3c:36:a9:ae:c5:21:a0:ba:24:64:48:
         9a:8b:21:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:50:38 2026 by rpki-client