Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37873b1a-597b-3d8f-8eef-341c14d0e19b.roa
File:                     37873b1a-597b-3d8f-8eef-341c14d0e19b.roa (raw, json)
Hash identifier:          0e7YRYqBnd5Oapg6l42lu/aAh2iBVtBhzWBKytUVPHY=
Subject key identifier:   53:AD:23:04:4C:5F:CF:A2:5F:EF:6A:CB:4D:FC:4A:24:5E:AE:88:B7
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584F7BB310DA86A4189642019380
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37873b1a-597b-3d8f-8eef-341c14d0e19b.roa
Signing time:             Tue 13 Oct 2026 01:00:14 +0000
ROA not before:           Tue 13 Oct 2026 01:00:14 +0000
ROA not after:            Mon 11 Jan 2027 02:00:14 +0000
asID:                     7029
IP address blocks:        2001:19b0:9c5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7b:b3:10:da:86:a4:18:96:42:01:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Oct 13 01:00:14 2026 GMT
            Not After : Jan 11 02:00:14 2027 GMT
        Subject: CN=21522813-2dbc-42b7-bb38-625b3f6facd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e3:ab:79:be:cf:96:6c:f3:21:cf:d3:6d:62:
                    3a:49:3b:e4:d6:a8:35:cd:4f:b9:1b:ae:1d:db:b2:
                    b6:76:49:fc:40:aa:ed:19:8d:26:f9:9e:0b:a5:9b:
                    ef:72:a5:df:05:d2:c0:5c:20:64:94:cd:67:62:74:
                    f3:d0:fa:47:de:1d:a9:56:02:c5:bb:5f:ac:38:6c:
                    8b:8c:15:cd:78:bf:b3:80:40:97:b9:5e:5c:7f:39:
                    72:dd:83:a6:6b:0f:e4:48:04:7b:58:77:4e:b8:06:
                    b7:4a:b6:3a:a9:51:87:e1:e4:63:25:08:f9:fa:af:
                    f7:de:d2:6a:ca:a3:3a:28:52:5a:30:e4:f6:a1:e8:
                    56:19:f3:6a:70:7f:09:b2:15:03:2a:2b:c6:ae:d0:
                    c0:ec:29:99:6c:0f:33:e6:6a:5c:f1:62:e0:c7:cc:
                    c9:8e:84:5a:a8:e7:0e:e4:3d:38:1e:fc:bb:65:65:
                    d2:bf:a6:2c:68:fa:62:85:6c:4b:56:a5:5b:5a:3d:
                    4b:eb:83:2a:95:91:9b:cf:f9:85:45:6e:0a:0d:ba:
                    47:84:ad:db:28:e0:8a:9a:1f:b5:a9:56:a2:c3:11:
                    fb:db:3d:f6:d4:ff:26:dd:15:1b:e2:88:73:75:b6:
                    79:43:79:51:77:b5:fc:4c:2c:9d:cc:16:a3:4a:c8:
                    0a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:AD:23:04:4C:5F:CF:A2:5F:EF:6A:CB:4D:FC:4A:24:5E:AE:88:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37873b1a-597b-3d8f-8eef-341c14d0e19b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:19b0:9c5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:8f:6f:13:f6:ff:51:5a:33:e0:b0:ca:f9:26:5a:81:4f:d8:
         48:a0:e2:20:a1:20:20:28:c7:ed:b0:18:4b:33:08:59:8d:e2:
         f2:7c:00:2d:90:cf:fb:ab:ef:3b:75:0e:be:89:0a:c8:02:28:
         08:5f:55:b7:95:87:0e:c3:64:5b:fe:c3:e7:cc:6a:03:f9:62:
         0c:00:a2:ad:de:06:2b:d4:08:b0:8c:90:46:c4:51:98:a1:2e:
         cf:5a:75:41:4e:bf:0b:a8:b6:fa:86:ae:91:72:96:27:62:a4:
         09:27:c1:58:65:a2:ef:2f:d9:02:1d:97:dd:9e:3c:9f:c0:ac:
         75:d4:45:31:5b:aa:55:4b:ba:96:b2:0a:5e:75:7c:6b:89:cd:
         46:e7:2e:e3:72:b6:52:7a:f8:ca:ee:3a:9c:8f:fe:1f:fb:f3:
         ce:d4:37:48:f1:ba:0d:06:be:64:b3:ad:e6:6d:94:2e:e3:2d:
         7f:f1:0f:bb:2b:f8:89:0f:37:11:46:77:1b:6f:45:5b:72:11:
         de:ea:78:8f:f9:db:c5:00:a4:e3:cf:4d:4d:ec:fb:b4:ed:a7:
         d9:17:bd:5b:c2:fc:eb:e2:f3:13:89:8e:83:20:9f:9e:b9:d5:
         99:46:2b:68:9d:3c:11:20:aa:3b:65:8d:8d:8d:7b:fb:1c:e1:
         f3:f6:cc:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:15:58 2026 by rpki-client