Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8379a836-0017-3489-a434-2d4413874467.roa
File:                     8379a836-0017-3489-a434-2d4413874467.roa (raw, json)
Hash identifier:          RDBUvn4Fji7S1Qt/mL+9TrYoAPI0nXPrOx3/5Th/OgU=
Subject key identifier:   94:3F:B9:3B:83:DF:7A:15:8A:F8:35:2C:C3:E0:3F:90:D6:0F:1C:AD
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584B715D00B7FFE63D762F1C80C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8379a836-0017-3489-a434-2d4413874467.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     7029
IP address blocks:        2604:cb00:2b00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5d:00:b7:ff:e6:3d:76:2f:1c:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=b21c6091-715d-4323-a9a4-fed54a011c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:df:41:ef:64:e7:54:81:7b:c2:09:43:67:e2:
                    4f:aa:22:1a:16:ce:57:b6:3a:14:aa:c0:21:aa:67:
                    1e:3b:fd:8e:23:1b:76:76:df:d6:f0:6f:0e:24:76:
                    30:86:53:b7:ee:50:39:65:c1:ec:79:7c:7d:51:fc:
                    7e:bd:bb:8c:10:0e:cb:76:1e:ac:48:3f:72:9e:f3:
                    77:d4:f1:c2:29:59:c0:e7:37:a1:bc:56:92:a6:50:
                    ce:90:93:5f:6b:f1:c5:37:46:b4:b0:d6:cb:2c:3d:
                    e9:0b:2d:70:e2:0f:90:99:be:3c:a2:a3:05:ff:d7:
                    f7:28:4a:fb:c5:a8:48:6e:f0:48:e6:fe:85:5d:d2:
                    4a:dc:e3:00:16:1b:97:77:53:fd:35:7f:eb:ab:63:
                    30:70:bb:f4:f8:d2:5c:7a:b8:df:b5:20:68:c8:11:
                    01:1d:44:4e:65:ef:ce:5a:02:da:26:e2:3d:92:6a:
                    d9:c4:7d:0e:87:6a:84:93:08:1d:f8:de:5a:8a:d9:
                    ce:c6:76:9e:58:de:74:13:eb:80:8f:79:8f:64:1a:
                    03:07:bc:00:a9:9e:c8:6f:8e:52:be:ae:41:9e:1f:
                    77:f7:58:5c:02:36:72:7f:79:8d:4d:d3:55:bd:70:
                    66:d7:fd:57:ef:47:f7:82:09:68:b2:55:e4:9c:0a:
                    78:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:3F:B9:3B:83:DF:7A:15:8A:F8:35:2C:C3:E0:3F:90:D6:0F:1C:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8379a836-0017-3489-a434-2d4413874467.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cb00:2b00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:10:93:04:9a:bd:23:b4:e8:74:26:ae:77:15:66:21:5b:50:
         00:6c:52:9d:42:bd:e9:9e:91:00:03:fe:4c:bb:d0:ab:13:10:
         e9:18:f5:42:69:e3:86:e0:b5:e1:ab:21:df:27:03:1e:c7:d7:
         e4:14:70:97:7e:58:a7:40:66:bc:f6:c0:33:b7:fd:d6:b7:21:
         51:25:13:22:bd:db:2c:62:c6:c6:08:b8:65:d7:66:63:9e:ec:
         75:b4:f4:e1:14:1e:12:f5:43:81:b4:21:20:ad:1c:e1:48:4d:
         fe:00:e2:1f:38:fb:a0:da:4a:ad:65:79:8e:65:31:59:48:75:
         40:ad:9e:76:41:87:04:6f:fb:7a:02:75:66:c2:49:41:d8:83:
         7a:67:dd:d7:91:24:6a:fa:20:de:69:8a:a9:0c:6d:83:73:53:
         90:40:96:2e:8b:df:d5:2e:5f:26:e5:24:40:0a:4d:cf:3f:e1:
         aa:84:54:7d:2f:15:34:d2:3a:85:03:11:a4:48:d4:de:a6:86:
         82:76:1d:58:04:db:4d:e6:0b:53:85:be:7b:87:dd:e1:87:c6:
         3b:87:98:6b:e9:64:09:41:34:51:03:8d:d7:13:b6:86:64:6f:
         52:d9:3f:95:46:39:b0:64:76:ef:26:d1:b6:b8:13:61:0b:e5:
         9d:fc:da:6d
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtxXQC3/+Y9di8cgMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk
YjIxYzYwOTEtNzE1ZC00MzIzLWE5YTQtZmVkNTRhMDExYzM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1d9B72TnVIF7wglDZ+JPqiIaFs5XtjoUqsAh
qmceO/2OIxt2dt/W8G8OJHYwhlO37lA5ZcHseXx9Ufx+vbuMEA7Ldh6sSD9ynvN3
1PHCKVnA5zehvFaSplDOkJNfa/HFN0a0sNbLLD3pCy1w4g+Qmb48oqMF/9f3KEr7
xahIbvBI5v6FXdJK3OMAFhuXd1P9NX/rq2MwcLv0+NJcerjftSBoyBEBHUROZe/O
WgLaJuI9kmrZxH0Oh2qEkwgd+N5aitnOxnaeWN50E+uAj3mPZBoDB7wAqZ7Ib45S
vq5Bnh9391hcAjZyf3mNTdNVvXBm1/1X70f3ggloslXknAp4WwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJQ/uTuD33oVivg1LMPgP5DWDxytMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODM3OWE4MzYtMDAxNy0z
NDg5LWE0MzQtMmQ0NDEzODc0NDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLACsw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAURCTBJq9I7TodCaudxVmIVtQAGxSnUK96Z6RAAP+TLvQqxMQ6Rj1
QmnjhuC14ash3ycDHsfX5BRwl35Yp0BmvPbAM7f91rchUSUTIr3bLGLGxgi4Zddm
Y57sdbT04RQeEvVDgbQhIK0c4UhN/gDiHzj7oNpKrWV5jmUxWUh1QK2edkGHBG/7
egJ1ZsJJQdiDemfd15Ekavog3mmKqQxtg3NTkECWLovf1S5fJuUkQApNzz/hqoRU
fS8VNNI6hQMRpEjU3qaGgnYdWATbTeYLU4W+e4fd4YfGO4eYa+lkCUE0UQON1xO2
hmRvUtk/lUY5sGR27ybRtrgTYQvlnfzabQ==
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:09:46 2025 by rpki-client