Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e49e52a9-7b0c-31e6-8a6b-a042a112989f.roa
File:                     e49e52a9-7b0c-31e6-8a6b-a042a112989f.roa (raw, json)
Hash identifier:          qw7dz57rN85EwXdf5SAzdxS21iK/g8uNaoe705Y9CxI=
Subject key identifier:   2A:0A:50:79:60:67:0F:DD:9F:AD:5A:C1:56:7B:A0:AC:87:85:94:25
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584F15CCF2D8F66566C1B889C300
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e49e52a9-7b0c-31e6-8a6b-a042a112989f.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     1239
IP address blocks:        2001:49f0:d049::/48 maxlen: 48
                          2001:49f0:d04a::/48 maxlen: 48
                          2001:49f0:d077::/48 maxlen: 48
                          2001:49f0:d078::/48 maxlen: 48
                          2001:49f0:d07a::/48 maxlen: 48
                          2001:49f0:d07b::/48 maxlen: 48
                          2001:49f0:d07d::/48 maxlen: 48
                          2001:49f0:d07e::/48 maxlen: 48
                          2001:49f0:d07f::/48 maxlen: 48
                          2001:49f0:d081::/48 maxlen: 48
                          2001:49f0:d082::/48 maxlen: 48
                          2001:49f0:d083::/48 maxlen: 48
                          2001:49f0:d084::/48 maxlen: 48
                          2001:49f0:d087::/48 maxlen: 48
                          2001:49f0:d089::/48 maxlen: 48
                          2001:49f0:d08a::/48 maxlen: 48
                          2001:49f0:d08f::/48 maxlen: 48
                          2001:49f0:d097::/49 maxlen: 49
                          2001:49f0:d0a5::/48 maxlen: 48
                          2001:49f0:d0b2::/48 maxlen: 48
                          2001:49f0:d0b3::/48 maxlen: 48
                          2001:49f0:d0b4::/48 maxlen: 48
                          2001:49f0:d0b5::/48 maxlen: 48
                          2001:49f0:d0b6::/48 maxlen: 48
                          2001:49f0:d0d5::/48 maxlen: 48
                          2001:49f0:d0d6::/48 maxlen: 48
                          2001:49f0:d0d7::/48 maxlen: 48
                          2001:49f0:d0dd::/48 maxlen: 48
                          2001:49f0:d0e1::/48 maxlen: 48
                          2001:49f0:d0e2::/48 maxlen: 48
                          2001:49f0:d0e3::/48 maxlen: 48
                          2001:49f0:d105::/48 maxlen: 48
                          2001:49f0:d106::/48 maxlen: 48
                          2001:49f0:d107::/48 maxlen: 48
                          2001:49f0:d108::/48 maxlen: 48
                          2001:49f0:d109::/48 maxlen: 48
                          2001:49f0:d10a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cc:f2:d8:f6:65:66:c1:b8:89:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=7cf74341-0d1c-46fb-a45b-e8126e260e55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b0:65:01:a0:92:76:19:29:d8:da:5d:30:b3:
                    1b:aa:d9:1b:95:7f:fa:9f:48:19:79:9f:e7:35:9d:
                    6f:bf:1c:52:6d:3d:57:89:de:28:dd:0c:2b:c6:6c:
                    79:45:df:36:cc:7d:cd:6a:50:83:ce:e2:b4:8a:2c:
                    cd:5a:b0:11:60:3e:ff:19:4d:fd:72:dc:db:23:94:
                    45:a2:81:42:f8:12:ff:60:db:6c:a9:a2:4f:a4:6d:
                    c2:ca:4d:8d:eb:07:87:17:a5:0e:e5:1b:a1:3a:aa:
                    3a:17:01:63:68:b1:4e:21:96:85:26:08:b7:8c:0d:
                    ed:c2:31:ce:46:a5:37:f1:3f:02:77:b8:92:c4:c4:
                    3b:db:04:58:f0:01:3c:c7:74:98:b2:09:19:de:90:
                    0c:46:d2:32:60:97:e9:e3:85:f4:cb:6b:aa:88:d0:
                    73:89:a6:d7:3e:5d:85:b8:36:bc:9b:2b:c2:10:c1:
                    51:4c:94:62:f4:23:ed:ec:cb:5e:15:84:f3:eb:e0:
                    57:49:73:9b:89:a4:1c:36:38:2d:fe:39:eb:fd:e1:
                    10:c1:8f:ab:60:7d:0c:d1:90:e9:cb:8c:2c:ad:9c:
                    08:e4:aa:3f:de:58:1b:6c:1c:5e:33:f3:b7:26:c4:
                    47:c8:33:8d:3a:38:ba:cd:26:f5:0f:07:a4:40:1d:
                    39:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:0A:50:79:60:67:0F:DD:9F:AD:5A:C1:56:7B:A0:AC:87:85:94:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e49e52a9-7b0c-31e6-8a6b-a042a112989f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49f0:d049::-2001:49f0:d04a:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d077::-2001:49f0:d078:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d07a::/47
                  2001:49f0:d07d::-2001:49f0:d07f:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d081::-2001:49f0:d084:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d087::/48
                  2001:49f0:d089::-2001:49f0:d08a:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d08f::/48
                  2001:49f0:d097::/49
                  2001:49f0:d0a5::/48
                  2001:49f0:d0b2::-2001:49f0:d0b6:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d0d5::-2001:49f0:d0d7:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d0dd::/48
                  2001:49f0:d0e1::-2001:49f0:d0e3:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d105::-2001:49f0:d10a:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:de:2f:8a:19:32:d3:4c:14:0a:af:20:be:01:c0:08:6c:1f:
         de:8c:43:39:fc:ab:32:ad:9f:2b:2a:fd:08:73:4a:94:5c:a9:
         47:f2:1e:71:de:31:a6:fc:24:18:3d:a2:0a:52:4e:73:b3:ef:
         90:5f:fe:5f:2f:bd:dd:31:26:f4:f1:1a:88:9f:f3:70:33:b4:
         88:0f:ac:ad:e2:d1:e3:10:5d:aa:b1:bb:37:7e:0b:75:d3:ee:
         1e:49:ba:b0:69:70:94:e1:b4:61:b7:1f:72:c3:82:a7:96:4e:
         25:ed:9c:fe:a3:51:c7:c6:6a:67:3e:c6:32:8f:cc:7a:17:9b:
         8d:a1:6d:f4:9b:41:b6:5f:d8:ca:7f:08:41:c9:03:f5:fc:74:
         69:46:20:f2:4f:dd:cc:e0:cd:b4:ce:9a:c0:bc:c9:62:20:d9:
         85:f7:b2:53:69:0e:3f:5e:a7:ca:55:b6:09:b2:03:2a:2b:f9:
         9a:c5:2d:c6:cb:be:ee:d0:03:2b:f5:20:dd:79:11:7f:81:3f:
         77:16:d1:af:ae:75:99:78:a1:1b:34:ee:54:94:a6:ef:11:83:
         6d:50:bb:db:32:ae:ba:74:1a:1d:af:80:d9:7d:74:72:db:db:
         ae:78:c2:af:56:00:45:a7:79:84:65:30:04:e8:a2:e7:b6:20:
         e5:d5:82:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:57:42 2026 by rpki-client