Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ec7665e-58e8-30ad-bc81-c85e2dc3e4db.roa
File:                     4ec7665e-58e8-30ad-bc81-c85e2dc3e4db.roa (raw, json)
Hash identifier:          aEyVevhejAjd4QGsOqL6D878hbWm/ZVuB4w4lAyuI0E=
Subject key identifier:   EE:FA:8E:20:9C:C4:84:6E:CE:5F:1F:B6:B1:0B:0B:F4:03:42:01:3B
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584F612D6AC8295951AB52467B05
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ec7665e-58e8-30ad-bc81-c85e2dc3e4db.roa
Signing time:             Sat 03 Oct 2026 13:00:13 +0000
ROA not before:           Sat 03 Oct 2026 13:00:13 +0000
ROA not after:            Fri 01 Jan 2027 14:00:13 +0000
asID:                     7029
IP address blocks:        2001:19b0:362::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:61:2d:6a:c8:29:59:51:ab:52:46:7b:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Oct  3 13:00:13 2026 GMT
            Not After : Jan  1 14:00:13 2027 GMT
        Subject: CN=14b7db5e-fa10-4f8d-99f2-fdc5b6fa8b63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8e:b8:0b:49:10:95:a8:11:11:e7:b7:bf:77:
                    8c:29:6c:ac:fc:d1:61:54:b5:62:f1:2c:64:07:16:
                    9f:3d:92:8b:9e:d8:57:19:07:39:0a:ea:1e:51:2f:
                    28:36:19:36:f7:a6:4a:72:8e:4c:7f:3e:e1:74:1a:
                    09:17:d2:4f:65:c7:b2:b8:86:cc:d7:8d:05:20:57:
                    b5:d1:33:54:a6:83:a6:f7:35:e9:cb:50:e6:56:2a:
                    72:a4:b8:70:61:59:3b:ee:70:6b:29:ee:89:1a:bc:
                    98:10:f9:36:f7:44:b7:50:19:be:7e:1d:26:ac:7c:
                    27:3b:e2:c2:7f:0a:14:3d:20:23:59:02:f5:eb:48:
                    69:c3:01:eb:ac:35:95:b0:23:7f:8e:50:3a:1e:f6:
                    2c:e0:bc:09:93:20:5a:06:4e:22:40:ac:87:a0:d2:
                    98:f7:62:0f:6f:3c:17:bb:23:37:d2:2e:e2:64:15:
                    32:97:59:29:c2:bd:52:78:db:26:0a:f4:57:0a:9b:
                    c4:a7:f3:ed:77:f0:25:80:d2:95:53:b9:5f:9f:3b:
                    d7:ee:9c:ee:2b:97:80:bf:38:6f:ee:af:d0:af:b9:
                    b5:2e:1c:53:17:90:5b:76:20:2d:35:2e:05:6a:7a:
                    67:86:45:e1:ae:07:2f:e9:c6:43:e0:33:49:1d:e8:
                    37:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:FA:8E:20:9C:C4:84:6E:CE:5F:1F:B6:B1:0B:0B:F4:03:42:01:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ec7665e-58e8-30ad-bc81-c85e2dc3e4db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:19b0:362::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:f4:6f:e8:74:f3:eb:af:32:b2:23:7c:74:b5:c6:f5:2b:62:
         c4:5b:4b:eb:dc:b1:df:aa:19:29:3b:db:62:91:cc:95:32:9a:
         fb:53:81:2b:89:4f:19:cf:58:b3:71:4b:71:5b:90:98:b2:1b:
         bc:a8:a5:5d:22:f6:6d:f2:08:91:e2:cd:b7:9f:98:96:1e:df:
         7d:6b:84:f8:cd:2f:94:6f:a3:ea:15:4b:59:db:ac:4b:a4:29:
         e0:b9:da:6f:37:41:29:f6:f6:b3:fb:a7:f5:fc:57:0e:33:87:
         fa:9b:65:db:06:10:e4:4d:ff:44:d4:23:6e:e5:e3:bc:de:ad:
         24:04:85:81:bb:80:17:5b:1f:80:33:55:62:b0:2f:a8:61:21:
         10:32:a3:2f:5c:3a:2e:fc:97:cf:39:3d:ca:37:3d:a8:6d:da:
         75:1a:cc:d1:4a:dd:31:cd:4d:cb:7d:40:01:6b:15:d5:ad:10:
         cc:b8:ba:4b:fd:11:02:31:d1:e9:97:7e:81:3d:70:a4:c5:f1:
         d0:a3:69:de:56:7c:ff:d4:28:d0:2b:e2:9e:3b:dc:be:f1:98:
         49:a4:27:aa:a3:bb:66:39:02:bb:fd:8b:88:6b:0c:d9:fb:74:
         6b:a6:90:10:b8:93:9e:d7:05:5f:8a:5b:df:66:90:9b:b1:87:
         8c:ba:15:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 07:16:22 2026 by rpki-client