Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/15e07226-ed19-3f28-a615-29fe2ec3f589.roa
File:                     15e07226-ed19-3f28-a615-29fe2ec3f589.roa (raw, json)
Hash identifier:          8oAxywyBkAwUu0hmQ4j9I2Wf8KekkHGWTlM3eSGlaq4=
Subject key identifier:   E4:60:12:91:C2:A5:D0:FC:09:F2:8D:EF:1B:D6:2B:C9:23:8B:94:E0
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584EE4F1F03CE1B500206FF56A00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/15e07226-ed19-3f28-a615-29fe2ec3f589.roa
Signing time:             Thu 20 Aug 2026 01:00:12 +0000
ROA not before:           Thu 20 Aug 2026 01:00:12 +0000
ROA not after:            Wed 18 Nov 2026 02:00:12 +0000
asID:                     7029
IP address blocks:        2001:19b0:300::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:f1:f0:3c:e1:b5:00:20:6f:f5:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Aug 20 01:00:12 2026 GMT
            Not After : Nov 18 02:00:12 2026 GMT
        Subject: CN=74a89ea7-a6f4-42a4-a8e3-06ebc70782a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f4:9d:70:81:dc:a4:54:50:4e:bc:0a:9e:5e:
                    0c:5d:1e:a0:70:89:3f:7d:6b:5b:bc:24:ae:96:43:
                    a3:1a:5b:8b:1b:ab:a1:32:e1:97:54:56:d1:35:c1:
                    44:55:bb:7d:ac:b6:97:54:f2:f3:89:59:b2:a7:5c:
                    4d:8a:44:4b:55:6b:01:7c:93:57:95:ef:02:ad:35:
                    4b:07:61:0d:7b:e9:a7:b1:08:68:27:c8:26:f9:5d:
                    cb:56:0c:29:ba:e9:3a:f7:1c:db:93:73:5a:76:81:
                    24:93:bf:9f:51:0b:59:b7:f9:b4:e6:e2:b6:a1:cb:
                    39:5d:e7:04:1a:3a:20:6e:20:50:89:67:ef:85:cb:
                    95:17:d7:19:2f:8f:82:8b:2e:64:e7:54:b2:c5:75:
                    f8:86:b7:65:b7:39:0e:bb:41:04:ec:f9:ae:20:f0:
                    8c:aa:60:0b:21:ac:fc:89:11:fe:10:98:b9:d0:be:
                    45:2d:f9:7c:1f:f0:8c:bf:44:ad:14:15:5f:6a:5d:
                    96:16:a9:cc:b8:1f:b5:73:46:d1:75:a9:0e:77:77:
                    fa:11:12:da:75:36:1c:a8:c1:3e:3b:d7:05:ee:30:
                    92:36:d9:5b:56:a4:cf:00:eb:4b:2d:9b:4c:15:b5:
                    08:da:45:b7:9d:e9:4e:a9:be:f0:a2:4c:0b:06:d9:
                    5c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:60:12:91:C2:A5:D0:FC:09:F2:8D:EF:1B:D6:2B:C9:23:8B:94:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/15e07226-ed19-3f28-a615-29fe2ec3f589.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:19b0:300::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:d4:8b:ea:8e:81:57:0d:93:1e:eb:49:dd:9c:cc:43:ec:d9:
         60:5c:4b:85:ac:92:6f:25:04:40:30:57:05:d4:25:00:ef:f5:
         9e:05:ea:7c:39:a2:a9:51:41:d0:56:66:f9:31:3b:90:ff:45:
         9b:a9:89:f6:9d:ec:1e:04:9d:f9:ea:c4:84:42:6e:76:33:4f:
         14:9e:42:d2:12:3d:10:69:41:fe:c9:fe:7a:7e:b2:74:87:b8:
         d9:79:b0:60:63:4f:b2:f0:cd:0c:95:93:d8:8d:19:f7:a0:0b:
         50:46:6e:07:3f:55:c9:ab:de:3b:e6:3f:ec:ba:c2:3c:33:d4:
         38:d0:59:5e:07:e8:88:72:23:40:ed:c1:5a:ed:40:ae:7a:9b:
         9f:64:ad:28:43:00:d7:65:7e:18:e2:4a:31:c6:35:f3:3d:50:
         1c:66:42:db:f9:ca:41:83:49:c7:16:ab:fc:b9:55:a8:f0:30:
         5f:da:87:18:be:3d:51:27:fa:dd:c8:fb:3b:bd:73:4a:c4:1c:
         8a:67:83:0a:94:09:80:af:f7:d9:e5:9b:b5:bc:49:f6:36:51:
         be:ba:ab:47:ae:82:2a:5b:d9:29:83:e9:cc:5b:78:fb:60:28:
         30:a7:86:a3:ea:1f:73:32:20:b2:9e:1f:71:2a:9c:b5:d7:b6:
         29:6f:6d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 12:32:40 2026 by rpki-client