Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/15e07226-ed19-3f28-a615-29fe2ec3f589.roa
File:                     15e07226-ed19-3f28-a615-29fe2ec3f589.roa (raw, json)
Hash identifier:          o9unZzNdVl3lMrX17vYYcFpiKE60MNp9eGtj4bz0wYY=
Subject key identifier:   0D:1B:A9:1B:36:92:33:E4:EC:6F:20:B3:9A:99:FB:4E:D3:E8:D5:2D
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584D624A590D2EB2C2148A4BA600
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/15e07226-ed19-3f28-a615-29fe2ec3f589.roa
Signing time:             Fri 03 Apr 2026 13:00:30 +0000
ROA not before:           Fri 03 Apr 2026 13:00:30 +0000
ROA not after:            Thu 02 Jul 2026 13:00:30 +0000
asID:                     7029
IP address blocks:        2001:19b0:300::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:62:4a:59:0d:2e:b2:c2:14:8a:4b:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Apr  3 13:00:30 2026 GMT
            Not After : Jul  2 13:00:30 2026 GMT
        Subject: CN=0ea6beb2-7c28-4e74-9eb2-74a3d10ca033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c9:1a:e3:88:f8:15:f7:97:b7:99:86:c9:7b:
                    48:50:b3:1a:b5:69:ee:bf:60:c2:c2:54:b7:4e:7e:
                    3f:0f:71:9b:d1:86:11:1e:90:2e:80:a7:12:7a:f7:
                    19:68:14:13:9d:79:79:f4:6d:06:28:e0:30:58:33:
                    31:96:cc:b7:20:d9:c0:0c:f3:a1:80:ff:f1:30:8d:
                    93:44:1f:30:3c:ad:c2:53:7c:8a:cc:d3:bb:c7:bc:
                    69:3a:41:ba:22:86:2a:85:1c:b0:d2:9c:7b:3a:fa:
                    60:8c:76:92:ee:ee:58:59:85:31:90:20:2a:8b:eb:
                    fb:0d:53:39:a8:32:a0:ec:c8:4e:53:2b:f6:77:61:
                    50:47:30:3d:8c:a0:27:74:40:06:ff:70:9c:4e:ef:
                    d9:4e:50:89:ea:64:e5:83:ea:b6:14:ce:30:12:8d:
                    bd:76:dc:74:02:f3:cf:fa:44:a7:21:f5:bf:15:c1:
                    9b:70:15:fb:c9:0c:d3:67:db:f4:b4:8b:05:b1:fa:
                    02:a9:b1:b9:a5:22:a3:5c:b4:44:1f:cd:72:ad:b4:
                    b2:bf:0f:54:73:ad:ab:83:e2:2c:b1:48:cc:01:36:
                    d9:84:fb:de:ff:54:d9:e6:53:1b:8b:f5:22:9d:f0:
                    34:c6:e5:9e:02:94:07:32:4e:06:b5:3c:3b:58:f3:
                    54:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1B:A9:1B:36:92:33:E4:EC:6F:20:B3:9A:99:FB:4E:D3:E8:D5:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/15e07226-ed19-3f28-a615-29fe2ec3f589.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:19b0:300::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:cb:bb:7c:c1:bf:dc:5e:41:f7:53:42:75:2c:2e:87:7a:f0:
         69:7a:1a:87:4c:c4:93:0d:7c:07:bf:a7:29:4b:27:2d:6f:ac:
         5f:1a:32:04:90:d9:08:f1:de:18:af:11:06:3f:ae:f7:45:c5:
         2e:d2:4d:94:ce:63:9e:9d:24:54:7d:d7:c4:5f:53:3c:a5:18:
         74:ac:ad:7d:ee:7f:10:8a:75:1c:7c:df:17:05:73:8c:b6:3d:
         4a:46:20:37:18:cb:f0:90:fa:c3:02:85:c3:70:c0:68:56:23:
         70:de:07:ec:b9:e2:22:a4:c7:8e:85:c4:54:f1:df:55:04:4e:
         64:d8:6c:41:11:5d:92:da:d7:cf:23:40:a8:1a:f9:2f:1d:3e:
         78:49:2f:2d:d9:e2:b7:e9:80:8a:fe:9a:43:45:df:03:3d:cb:
         53:87:f7:63:cf:ca:39:fb:3e:6e:51:11:22:97:37:49:9d:57:
         e6:65:07:85:8e:c4:4c:52:8e:84:83:96:1a:38:0d:19:a0:99:
         05:6a:77:e6:65:e8:df:93:68:90:79:4e:14:76:92:62:42:c8:
         8a:0d:f6:95:a0:f7:e0:66:53:46:70:3e:31:0f:11:c0:e5:79:
         80:51:6b:69:f4:df:c5:8a:8c:84:ba:55:d6:b0:49:d7:d7:98:
         2c:5b:1a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 11:43:30 2026 by rpki-client