Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/107092d7-9026-31fd-802e-0afd0de7f5db.roa
File:                     107092d7-9026-31fd-802e-0afd0de7f5db.roa (raw, json)
Hash identifier:          Gv1H3yV/iPhMo08sg4Zxrp+MacOQ15KL4B99F3LEXng=
Subject key identifier:   A4:CC:EB:73:A4:23:CD:DE:2E:C8:80:AC:A9:90:2C:5F:3F:FA:51:21
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584F549D942813DE111019271D40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/107092d7-9026-31fd-802e-0afd0de7f5db.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     7029
IP address blocks:        2001:19b0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:94:28:13:de:11:10:19:27:1d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=4133388f-7295-49da-8d9d-8b8ca04645b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7f:47:67:a2:ae:f1:0c:1c:fd:4f:3e:5b:78:
                    e2:b8:ee:fc:f1:68:49:4f:a4:a1:4e:4e:ea:5f:b8:
                    36:a7:a6:26:9f:28:ce:cd:fa:ac:a2:49:f6:58:42:
                    8a:32:72:5d:56:97:c3:1a:64:46:55:86:3e:0d:ba:
                    70:d6:00:cd:dc:04:a2:96:45:01:d5:b6:8d:f2:71:
                    c6:f0:e9:4c:da:81:93:4e:ea:ce:99:df:bf:7a:82:
                    af:1a:e4:37:88:f8:19:02:fb:b4:85:47:d8:d6:3e:
                    88:fa:62:b4:25:0c:01:7f:f8:4f:e0:f3:fa:be:87:
                    40:86:0e:16:95:1b:c4:50:f4:ee:82:49:0a:22:e1:
                    35:e9:e2:04:65:fd:5f:a3:21:f8:b8:8d:8d:b2:f9:
                    e3:f1:20:fe:af:4a:01:c4:c9:2f:31:4c:c6:d3:17:
                    fa:39:92:29:01:ec:84:86:1d:24:06:34:c4:1a:c3:
                    ec:7d:ae:97:2d:d2:4b:8c:41:3f:69:eb:01:f7:63:
                    ca:64:74:7e:f7:f5:04:ac:50:0d:83:1d:b7:8f:c5:
                    86:ba:1d:2d:cb:89:35:cd:a4:3f:87:74:21:a1:74:
                    e2:9e:43:36:b3:6f:d5:0b:b6:25:91:f5:15:1a:d9:
                    4e:7e:61:41:d8:97:d0:6b:05:61:af:f4:4a:eb:91:
                    c9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:CC:EB:73:A4:23:CD:DE:2E:C8:80:AC:A9:90:2C:5F:3F:FA:51:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/107092d7-9026-31fd-802e-0afd0de7f5db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:19b0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:f5:04:78:22:8d:e5:ff:3d:e5:ec:af:e6:ac:2d:22:88:c6:
         58:6a:f5:76:2d:e3:cd:a5:ba:3d:01:8f:83:17:d7:87:59:20:
         ae:e5:17:04:b6:9b:51:ac:2c:c2:8a:ba:0d:36:fe:91:7f:28:
         c7:30:99:86:fe:b3:9c:ab:77:75:86:0c:bb:ba:6d:f9:60:bb:
         e7:96:3b:07:e1:63:76:3e:e4:4a:2c:d4:12:b5:f0:d7:0b:f0:
         37:86:f6:04:b6:ce:79:43:80:a7:00:8c:2c:6d:6c:e6:46:cc:
         49:44:50:8b:47:a2:a1:c5:8e:27:24:ad:b5:fa:a8:38:f8:4e:
         84:f5:6b:98:b3:fe:ba:dc:65:cb:32:9e:45:87:0b:86:0e:cd:
         eb:7b:4c:1d:4d:3f:2f:60:3a:b5:06:34:88:e0:c3:94:3c:b8:
         f8:60:09:03:85:ba:3f:d7:1e:7d:f3:bb:93:5d:b9:61:3d:56:
         0f:50:a2:a7:e4:ba:df:92:b9:b0:e0:04:bc:b8:75:29:d7:eb:
         73:d4:3a:e9:b9:78:a6:19:4d:5a:6c:02:72:5a:46:6d:c9:07:
         ed:76:cb:db:85:fe:ca:1f:33:c7:b8:b4:47:8b:39:2c:f8:10:
         a6:bd:a1:9c:ba:af:f0:da:63:d8:f7:a2:dd:bb:b2:0a:b8:15:
         88:78:7b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:12:47 2026 by rpki-client