Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0bb6e58e-1e5a-3f21-ad2e-576139bf6594.roa
File:                     0bb6e58e-1e5a-3f21-ad2e-576139bf6594.roa (raw, json)
Hash identifier:          EDK+bHB032zwfeni5W0eFqwySGNATZH+ky/RcY1YYR4=
Subject key identifier:   C6:A4:70:19:0E:E6:E8:CF:67:3A:4B:B5:53:DD:45:71:E1:62:95:F8
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584F612D5F8C5DBE092AEAD3A500
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0bb6e58e-1e5a-3f21-ad2e-576139bf6594.roa
Signing time:             Sat 03 Oct 2026 13:00:13 +0000
ROA not before:           Sat 03 Oct 2026 13:00:13 +0000
ROA not after:            Fri 01 Jan 2027 14:00:13 +0000
asID:                     7029
IP address blocks:        2001:19b0:35c::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:61:2d:5f:8c:5d:be:09:2a:ea:d3:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Oct  3 13:00:13 2026 GMT
            Not After : Jan  1 14:00:13 2027 GMT
        Subject: CN=b88fe318-54ee-4f8d-b008-682a634f921b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1e:00:31:be:12:6e:0b:ab:6b:55:28:0e:58:
                    9c:47:99:a4:f1:97:42:89:b4:07:5f:95:bc:78:3f:
                    0b:89:7a:c9:aa:f7:8a:8c:b5:17:67:bc:40:a5:d7:
                    d1:87:ae:ab:f8:c8:e0:67:b9:c9:3a:53:6c:4a:ff:
                    ce:14:e0:53:d7:2e:ea:5d:e0:6e:1b:ad:9d:2f:7f:
                    78:56:4b:ad:91:e8:39:2c:d0:ae:39:10:61:6a:00:
                    94:53:07:2f:30:af:9a:8c:97:eb:25:7a:0e:80:a5:
                    bb:a1:49:4e:26:c4:60:75:1a:fa:30:e6:b2:38:61:
                    74:49:24:57:da:8f:96:f0:ef:21:a7:88:e9:34:52:
                    aa:5e:20:98:41:48:d5:fb:c5:dd:cc:5e:5e:e2:70:
                    e9:18:91:7e:3b:43:13:21:a1:e7:72:d2:e5:f6:a9:
                    e7:77:4d:d6:cc:3d:f0:6d:83:de:57:3a:37:2b:01:
                    ab:75:29:36:42:23:94:e5:7f:06:f3:d9:0c:f0:ac:
                    e2:fb:54:70:fa:db:23:3b:a2:0e:d0:52:9b:68:b4:
                    16:29:c8:be:39:3b:57:57:8b:5c:5c:1f:c6:66:c1:
                    23:c5:c8:6f:71:52:3b:48:e4:62:e3:6c:58:e1:0f:
                    16:e1:41:12:45:64:90:b1:f9:c9:a3:03:b9:bb:89:
                    51:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A4:70:19:0E:E6:E8:CF:67:3A:4B:B5:53:DD:45:71:E1:62:95:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0bb6e58e-1e5a-3f21-ad2e-576139bf6594.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:19b0:35c::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:27:78:d2:6c:a0:d1:92:08:c0:70:af:f9:e5:84:6c:c7:2a:
         45:a7:af:26:c3:56:88:9e:f5:bf:74:bb:8e:6c:f8:0b:39:4e:
         5c:a1:b7:9b:34:98:35:10:04:a7:9a:3a:3f:1d:d1:36:7b:db:
         fa:2d:1b:64:09:43:43:b4:6e:08:c8:9b:d6:d7:08:e3:3d:ea:
         6b:0b:57:3a:cd:40:78:23:34:0e:e7:3a:90:b4:ad:67:ce:38:
         b7:c7:fa:bd:4a:ed:d0:0e:75:aa:54:90:b2:53:9b:b6:bc:fc:
         08:68:f9:a1:cb:25:76:6f:37:38:cf:57:98:a5:be:e3:ee:dc:
         a9:eb:eb:32:79:5b:6e:a3:a8:31:68:6c:b8:f2:aa:62:7e:14:
         ff:34:2b:12:85:70:8f:9a:fe:bd:99:e8:d5:45:77:98:94:2b:
         14:26:c0:bf:7a:98:3a:3d:06:6b:8b:d5:41:2d:28:51:f9:9c:
         33:a9:23:9a:75:50:71:1b:03:14:06:2d:1c:0c:ef:f4:eb:cb:
         9e:3d:36:fb:df:24:c0:e7:38:64:d1:fa:73:73:f5:76:49:e5:
         38:67:c5:8e:eb:da:98:57:22:17:6f:97:e4:46:bd:64:79:85:
         97:dc:ea:88:69:12:16:6d:cf:60:51:6b:0c:1c:9c:dd:3f:3b:
         3d:63:2b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 06:22:05 2026 by rpki-client