Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3ed2b808-ee93-3f4d-a148-e1f643f57577.roa
File:                     3ed2b808-ee93-3f4d-a148-e1f643f57577.roa (raw, json)
Hash identifier:          lDf7IoNayZgmKy68H8PzCv/vaHmacFQfAkT6aI2LraI=
Subject key identifier:   BD:64:46:29:F6:3A:90:86:4F:D4:72:13:E4:C6:18:76:CA:1D:4F:99
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584EBDDC583C07ADDB4F36A619E0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3ed2b808-ee93-3f4d-a148-e1f643f57577.roa
Signing time:             Thu 06 Aug 2026 01:00:12 +0000
ROA not before:           Thu 06 Aug 2026 01:00:12 +0000
ROA not after:            Wed 04 Nov 2026 02:00:12 +0000
asID:                     7029
IP address blocks:        2001:19b0:358::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bd:dc:58:3c:07:ad:db:4f:36:a6:19:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Aug  6 01:00:12 2026 GMT
            Not After : Nov  4 02:00:12 2026 GMT
        Subject: CN=e3245ccf-1766-41ce-8f33-353cdfd7c4b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a6:9f:5d:a3:a7:a0:66:22:d2:e4:81:46:78:
                    55:0d:c5:7a:33:86:90:9f:5e:b8:d1:94:13:55:0f:
                    bf:80:fd:b6:f7:1d:27:f3:7e:fc:ed:54:fc:7e:29:
                    50:34:91:99:67:3b:64:90:49:ab:d9:4c:50:8a:e1:
                    ca:68:41:b7:56:82:d9:5c:57:42:1f:fc:17:34:74:
                    ad:ec:31:60:14:24:01:f4:28:f5:50:6a:0a:0f:e8:
                    a9:1b:c4:5a:16:d4:c7:df:5a:75:03:e8:09:b9:d3:
                    3f:21:cd:ed:0e:aa:26:ab:2a:96:bd:53:1b:db:e3:
                    05:a5:9e:02:26:f1:72:7b:ee:25:59:c7:d6:a2:79:
                    a4:f3:49:ea:3d:e2:43:db:11:fa:a8:3c:2d:18:0c:
                    f8:d0:66:04:4c:98:b0:26:74:78:f1:fb:85:ba:68:
                    64:c1:f2:c5:03:de:69:d2:48:e6:d3:a1:aa:35:27:
                    22:ca:13:07:0c:9f:a3:68:20:6d:4e:78:5d:f3:02:
                    52:88:62:0f:7b:f5:18:14:aa:1e:3f:a0:7e:fb:2d:
                    15:6d:72:c1:f6:b8:78:33:f6:4f:71:1d:2c:89:c3:
                    59:15:85:66:dc:83:47:e0:cb:b0:7e:8e:f0:e1:2c:
                    34:3d:14:01:5f:50:01:65:8f:a7:59:a9:9b:74:22:
                    67:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:64:46:29:F6:3A:90:86:4F:D4:72:13:E4:C6:18:76:CA:1D:4F:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3ed2b808-ee93-3f4d-a148-e1f643f57577.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:19b0:358::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:2c:bd:0f:74:51:89:cd:77:43:3d:9d:a8:bb:c0:dc:f2:d0:
         6f:6a:99:41:57:40:ae:d6:dc:14:b7:49:43:32:09:49:e7:bd:
         2a:3e:12:0a:1f:14:e4:70:3d:21:f9:0c:8d:e0:57:54:95:50:
         c6:73:d7:ff:0d:3c:0e:cd:ed:25:0a:94:2a:6e:8b:99:c7:cc:
         a7:e8:15:31:8f:66:85:fd:f9:e7:a8:1f:0d:2b:ac:b0:28:91:
         95:b4:a7:c4:f1:78:a4:ac:a1:e9:c0:38:f1:80:b6:54:1f:11:
         f8:96:48:d1:79:40:77:e3:a2:41:a2:b2:71:ab:4c:09:aa:81:
         19:f3:49:a8:62:b2:9d:55:15:e1:ac:10:ae:10:f0:86:01:d5:
         39:51:9d:f2:c6:5e:37:7d:72:e9:ce:d9:4f:76:62:47:a9:c2:
         ec:8b:5e:ae:7e:e8:e0:3f:1e:16:56:3a:3c:0e:a7:b9:94:66:
         5e:59:ad:1a:34:e0:3f:bc:14:40:6a:39:28:b8:bb:f1:9f:42:
         c3:f6:80:c8:9b:1d:fd:48:7a:2a:0d:fb:07:0c:7c:c9:ce:87:
         18:27:48:68:94:98:00:a0:3b:a9:cd:65:5c:b9:2a:d7:3d:2a:
         8b:e4:e0:71:95:fe:59:41:f4:6c:3a:90:e1:a1:a0:2a:04:06:
         eb:c7:10:f0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE693Fg8B63bTzamGeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDgwNjAxMDAxMloXDTI2MTEwNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZTMyNDVjY2YtMTc2Ni00MWNlLThmMzMtMzUzY2RmZDdjNGIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKafXaOnoGYi0uSBRnhVDcV6M4aQn1640ZQT
VQ+/gP229x0n83787VT8filQNJGZZztkkEmr2UxQiuHKaEG3VoLZXFdCH/wXNHSt
7DFgFCQB9Cj1UGoKD+ipG8RaFtTH31p1A+gJudM/Ic3tDqomqyqWvVMb2+MFpZ4C
JvFye+4lWcfWonmk80nqPeJD2xH6qDwtGAz40GYETJiwJnR48fuFumhkwfLFA95p
0kjm06GqNSciyhMHDJ+jaCBtTnhd8wJSiGIPe/UYFKoeP6B++y0VbXLB9rh4M/ZP
cR0sicNZFYVm3INH4Muwfo7w4Sw0PRQBX1ABZY+nWambdCJniQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFL1kRin2OpCGT9RyE+TGGHbKHU+ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2VkMmI4MDgtZWU5My0z
ZjRkLWExNDgtZTFmNjQzZjU3NTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEZsANY
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH0svQ90UYnNd0M9nai7wNzy0G9qmUFXQK7W3BS3SUMyCUnnvSo+
EgofFORwPSH5DI3gV1SVUMZz1/8NPA7N7SUKlCpui5nHzKfoFTGPZoX9+eeoHw0r
rLAokZW0p8TxeKSsoenAOPGAtlQfEfiWSNF5QHfjokGisnGrTAmqgRnzSahisp1V
FeGsEK4Q8IYB1TlRnfLGXjd9cunO2U92YkepwuyLXq5+6OA/HhZWOjwOp7mUZl5Z
rRo04D+8FEBqOSi4u/GfQsP2gMibHf1IeioN+wcMfMnOhxgnSGiUmACgO6nNZVy5
Ktc9Kovk4HGV/llB9Gw6kOGhoCoEBuvHEPA=
-----END CERTIFICATE-----
Generated at Thu Aug 27 11:30:41 2026 by rpki-client