Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/512c6507-4c08-3909-ae82-7bc747f827fc.roa
File:                     512c6507-4c08-3909-ae82-7bc747f827fc.roa (raw, json)
Hash identifier:          sUTEFtyl5r3vDpxmr4pkOUjphpqC2Md/LAzPZKfVAaw=
Subject key identifier:   81:B6:1B:B5:54:8A:73:1A:75:26:A3:14:17:8E:0E:78:3E:8C:15:58
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584D57CF2AB472F719723F3BE780
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/512c6507-4c08-3909-ae82-7bc747f827fc.roa
Signing time:             Mon 30 Mar 2026 18:54:19 +0000
ROA not before:           Mon 30 Mar 2026 18:54:19 +0000
ROA not after:            Sun 28 Jun 2026 18:54:19 +0000
asID:                     7029
IP address blocks:        2001:19b0:a00::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:cf:2a:b4:72:f7:19:72:3f:3b:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 30 18:54:19 2026 GMT
            Not After : Jun 28 18:54:19 2026 GMT
        Subject: CN=c2f6984a-31f9-4403-8ab0-f7028c7ec2a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4f:cf:5b:31:05:ab:0c:ba:d5:28:e5:0a:69:
                    15:fe:d0:d5:73:1d:a9:a2:fb:06:01:b7:51:39:5f:
                    8f:d2:f5:66:38:d0:d1:d7:12:1f:65:3d:81:35:84:
                    80:a6:08:b1:8e:8b:ec:80:78:26:bf:ec:1d:67:d1:
                    d4:17:bd:31:b1:f7:6e:1c:ea:29:7e:40:7e:c0:68:
                    3e:26:fc:3d:08:54:a6:70:30:9e:2a:b2:4c:17:47:
                    6c:da:de:62:f0:56:55:8c:c3:a9:c7:81:6f:65:4a:
                    b8:56:6a:7e:2f:30:ab:07:75:bc:44:bb:d6:da:1e:
                    15:3c:8c:9f:00:09:9d:5f:78:e6:97:60:5e:56:8a:
                    cd:48:d0:84:e5:6e:eb:6d:ad:57:e3:c8:8d:5a:1c:
                    50:73:e7:97:10:d9:e6:49:b0:d3:af:62:f8:b6:ad:
                    ae:c0:5d:81:3e:ea:a1:56:cc:42:c0:5a:6c:21:e6:
                    87:80:41:14:a9:bc:d3:16:02:5d:0d:3f:e7:3b:d1:
                    bc:00:be:0a:ea:ba:b2:56:fa:0a:2c:49:2e:8d:c8:
                    af:16:34:18:aa:59:55:96:ba:be:40:59:a4:53:96:
                    89:21:63:0c:46:19:87:19:d9:e3:68:11:34:b0:35:
                    f1:dc:84:ec:4e:9e:ac:d3:4c:cd:15:f2:e5:2c:aa:
                    f1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B6:1B:B5:54:8A:73:1A:75:26:A3:14:17:8E:0E:78:3E:8C:15:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/512c6507-4c08-3909-ae82-7bc747f827fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:19b0:a00::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:fb:6f:fd:6d:de:3d:d0:09:34:b8:04:ac:a2:8b:9e:a7:d2:
         42:68:bf:63:70:ee:01:26:14:92:38:39:78:08:58:b7:01:86:
         63:03:eb:35:79:b3:1c:e7:8c:45:46:6e:fb:fd:6c:61:00:ee:
         0a:8d:97:aa:aa:83:cb:8f:e2:f1:e0:8b:16:5e:69:dc:dd:16:
         f9:3a:20:dd:aa:a9:94:1b:5a:e0:ca:e9:a9:24:06:c3:4d:44:
         5c:9c:f4:f0:f2:d1:e3:9e:1e:b0:77:d0:f2:86:d9:eb:de:af:
         fc:7f:26:92:ae:5c:4c:0f:47:e5:d2:46:54:db:2b:93:fe:a2:
         7b:02:b3:ae:e5:a2:f2:63:fb:6e:63:b0:c4:ca:b2:d9:0f:2c:
         40:bf:e3:58:2f:ce:92:6f:67:47:f0:6d:b7:76:fc:fc:1f:e1:
         b2:f5:c0:54:02:dd:24:0f:19:c7:4e:1b:13:be:b4:d4:ac:32:
         92:01:30:77:e7:d5:c1:69:e1:64:a2:f9:06:df:8f:45:a0:1b:
         0f:ed:a4:3a:ab:a7:8b:d5:0b:60:aa:c4:ac:64:c5:0a:c1:87:
         b1:ca:57:cf:a9:46:57:a9:5a:80:6c:c8:55:5d:32:07:ed:bc:
         81:77:99:90:78:a3:b4:9a:4b:34:ea:22:eb:83:0b:bf:4c:f7:
         6e:e1:ef:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 11:43:38 2026 by rpki-client