Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9021175d-e99d-33b6-80bf-1b22ac4d2f91.roa
File:                     9021175d-e99d-33b6-80bf-1b22ac4d2f91.roa (raw, json)
Hash identifier:          hRoytBpfjRj947Hsq/5aNg8d3NYd6+Hf3YrHZ9SXrVU=
Subject key identifier:   5A:CC:F4:B7:22:06:9C:B5:57:AE:D8:FE:E8:50:E9:18:6D:B4:4F:27
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584B715CCD74D4F7EB763CFC5C00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9021175d-e99d-33b6-80bf-1b22ac4d2f91.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     7029
IP address blocks:        2604:cb00:41::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:cd:74:d4:f7:eb:76:3c:fc:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=93b39b02-b8c3-4106-aa6e-bf33379232ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:02:ab:6c:72:3b:e0:b4:99:ae:a9:89:8b:f8:
                    52:e5:cf:4d:34:81:9e:c6:c4:a3:27:7c:54:dd:bb:
                    6f:a5:23:60:02:dc:df:32:e7:c0:cd:ad:a3:b8:84:
                    32:51:c6:73:f8:28:3c:8d:e0:34:a8:92:ff:7a:39:
                    25:f9:54:db:b1:ab:db:10:b5:d6:48:39:4e:c4:16:
                    e2:eb:93:2a:77:5e:cb:96:f2:ef:7c:fe:62:8d:88:
                    0f:ad:97:bd:2e:df:49:68:2f:f4:5a:19:63:22:f4:
                    ad:4a:c8:b1:56:27:3d:65:68:bd:43:5b:a2:89:b7:
                    50:56:d2:95:85:88:ec:64:10:1d:38:6b:37:dd:48:
                    50:03:8f:36:f0:63:14:b7:91:1d:a2:87:e5:4c:13:
                    0b:43:36:76:87:1f:69:6f:dc:52:0f:60:8b:43:07:
                    92:7a:c0:34:01:64:df:44:eb:97:05:a3:67:24:ef:
                    14:ed:45:f6:bb:bb:87:0d:dc:c1:2f:3a:1e:73:b6:
                    59:1a:0b:63:0b:f9:d1:86:5a:6b:bc:86:e0:41:03:
                    4a:a5:41:c5:70:30:5d:b4:ec:2a:d4:dc:c1:04:bd:
                    2c:62:59:52:01:f7:f7:07:58:34:ff:98:28:16:1e:
                    80:89:15:60:a2:5c:65:8f:46:61:00:89:54:9e:1d:
                    3e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:CC:F4:B7:22:06:9C:B5:57:AE:D8:FE:E8:50:E9:18:6D:B4:4F:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9021175d-e99d-33b6-80bf-1b22ac4d2f91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cb00:41::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:0f:46:9b:2d:b1:8c:40:7b:aa:96:76:cd:66:cb:ce:9f:16:
         21:9f:34:b1:36:3f:ae:51:e1:a7:8f:17:a4:67:20:96:87:83:
         51:75:f9:2c:16:50:cf:fa:ae:f5:37:ec:cf:89:4b:72:c6:89:
         e3:5f:bd:5c:13:91:b8:b3:20:99:1b:02:b0:0a:af:f7:48:b5:
         67:bd:2d:79:8c:8b:66:32:6d:3f:0a:e7:a2:b2:1a:ae:9b:b1:
         ed:60:80:d6:e2:ec:1f:c1:41:19:3a:ac:4f:fd:f3:a8:f1:16:
         20:9b:66:6d:24:ba:56:5c:67:d1:26:3d:db:f2:52:77:12:54:
         1e:25:37:52:8e:c8:6f:96:6b:1b:93:82:28:9d:36:0b:27:4a:
         aa:f0:1d:c6:89:27:ee:0d:ec:ed:e8:e7:ba:e5:7f:55:3d:17:
         98:94:5b:40:de:ac:57:39:60:84:98:c9:a3:e2:e8:dd:dd:b6:
         2c:81:fb:0b:89:d9:9d:a7:e1:62:d6:b3:bf:ae:b5:26:35:a7:
         3e:c7:6b:23:f4:27:5e:00:e4:ea:44:b6:80:c4:36:1f:ed:b1:
         e9:74:9e:67:0a:f4:9c:86:6e:2c:cf:4f:b9:5d:b2:00:76:83:
         c3:82:82:fc:a6:5a:04:c0:69:01:b1:c9:a5:e6:8f:08:e8:90:
         da:48:7a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:00:42 2025 by rpki-client