Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/617c83b8-58bd-3ea5-8ad0-826ea1176966.roa
File:                     617c83b8-58bd-3ea5-8ad0-826ea1176966.roa (raw, json)
Hash identifier:          J9aJXaPLG60By+k5DPiI+lFh+1hnAtVGvSaOyoiQCLg=
Subject key identifier:   2B:4D:43:08:EB:22:05:33:3E:9A:72:9F:00:B0:5E:3E:BE:54:35:E8
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584EBDDC5750C99F7B5067A13080
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/617c83b8-58bd-3ea5-8ad0-826ea1176966.roa
Signing time:             Thu 06 Aug 2026 01:00:12 +0000
ROA not before:           Thu 06 Aug 2026 01:00:12 +0000
ROA not after:            Wed 04 Nov 2026 02:00:12 +0000
asID:                     7029
IP address blocks:        2001:19b0:7c::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bd:dc:57:50:c9:9f:7b:50:67:a1:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Aug  6 01:00:12 2026 GMT
            Not After : Nov  4 02:00:12 2026 GMT
        Subject: CN=c92851e3-94f7-4070-832f-bf2b37dc06c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ab:08:f6:e4:78:5d:cd:36:8a:f6:93:e7:58:
                    5e:d3:19:08:5e:10:41:c0:20:a0:77:95:92:71:95:
                    41:83:08:e6:e7:01:77:98:5b:0b:48:08:f6:63:b9:
                    8e:20:dd:9d:3e:e9:60:24:32:3e:dd:65:91:e4:26:
                    61:07:1b:ea:ec:69:1e:30:03:9c:f1:ef:5d:a3:20:
                    50:d1:31:45:12:92:53:91:4e:c7:f2:84:37:7e:bc:
                    3e:df:24:f6:eb:0c:6d:5b:21:47:87:1d:8e:02:28:
                    25:a0:2b:e0:8d:00:5e:ce:25:d9:b4:33:a3:e3:d2:
                    52:73:5d:58:73:2e:3f:f9:ee:d0:a9:ec:1a:f4:59:
                    06:ab:c4:a9:86:2e:7b:f5:57:64:08:33:80:64:db:
                    fc:74:fe:a7:e6:56:1c:9c:e1:56:89:2c:e1:3a:d9:
                    43:b6:10:26:7b:75:6e:14:77:ae:46:23:f7:d0:50:
                    fb:78:8c:8b:2a:6c:fa:78:bb:96:26:e9:28:b6:1b:
                    1a:f8:bc:d8:96:b3:71:7b:47:9f:54:45:79:57:76:
                    bc:24:1a:42:b9:7d:71:3c:00:3c:27:5f:9e:bb:e5:
                    9f:96:28:a3:41:05:2b:5b:2c:bc:14:cf:bb:74:00:
                    e8:69:cb:bc:ba:90:6b:6f:cf:f9:70:b3:42:ae:41:
                    3f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:4D:43:08:EB:22:05:33:3E:9A:72:9F:00:B0:5E:3E:BE:54:35:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/617c83b8-58bd-3ea5-8ad0-826ea1176966.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:19b0:7c::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:20:af:77:25:1b:15:85:d4:18:1d:f3:8c:53:85:b1:78:f9:
         56:81:a2:79:e3:d0:d1:55:16:d0:44:b6:c9:25:4f:f2:2e:5d:
         a7:91:21:7b:2f:e6:7a:bd:0c:c1:02:0c:40:ea:09:99:80:c4:
         15:dd:d8:fd:3f:79:75:f6:a2:f7:fd:c3:b1:66:90:51:4e:c2:
         52:26:f8:c1:a7:03:a3:38:a2:c8:bd:df:fe:95:1f:b2:70:24:
         c6:11:d9:b3:83:46:ec:65:43:6a:91:cd:3f:ca:86:58:e1:0a:
         84:f2:b0:e8:17:6d:de:e5:ab:16:70:39:59:b4:09:f8:6c:e1:
         6b:f7:7b:52:01:86:5b:28:d0:8b:e6:c7:3c:44:51:8a:6d:68:
         0f:52:6d:04:b6:a8:25:cb:76:68:dd:34:df:1d:b4:7d:b3:ab:
         1b:8b:62:97:0d:2d:28:31:e9:1c:4b:3b:60:ac:41:81:56:66:
         4d:13:0f:f4:2d:e1:b4:d2:a0:36:7d:58:72:c1:8b:b4:59:12:
         6a:d7:b5:56:2d:c8:d6:d6:4a:74:f3:a7:fe:fd:03:64:56:15:
         81:6d:65:97:57:a5:b0:e9:a3:75:5a:78:00:01:f2:48:cd:29:
         5a:bf:52:2d:94:7b:1d:74:62:6a:67:fe:42:cf:81:f2:e8:4b:
         7b:5e:5c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 11:38:55 2026 by rpki-client