Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84cae104-76d8-3ed0-9ea3-5f19d13adf42.roa
File:                     84cae104-76d8-3ed0-9ea3-5f19d13adf42.roa (raw, json)
Hash identifier:          hN4eq9Qo6WlO5XFQfyrbnk5Ztkk25pKXMZgqudsUPdY=
Subject key identifier:   E2:CF:B0:E5:F1:9E:9B:E6:DA:5B:84:45:22:59:8D:66:03:7C:40:C3
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584EB2B1E9D1669CBB6CB4AF2640
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84cae104-76d8-3ed0-9ea3-5f19d13adf42.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     7029
IP address blocks:        2607:fbc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:e9:d1:66:9c:bb:6c:b4:af:26:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=44ca300d-f40c-4592-827c-fccf0b35875b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:23:5f:50:ff:84:76:9a:21:08:b3:69:53:a1:
                    b9:62:8a:33:13:a0:49:93:52:63:d6:78:6d:db:ed:
                    60:a8:80:f3:80:6f:f3:14:8a:c8:9d:2c:93:ab:8b:
                    a5:8d:1e:03:97:18:7a:24:c2:25:7b:e2:75:6a:dd:
                    2c:e6:9e:90:67:89:d5:f7:0c:6d:8f:07:e8:2a:58:
                    d2:a0:06:ab:4c:1d:30:e1:8c:3e:9b:54:b6:d0:46:
                    28:10:bf:de:6a:3b:08:b6:0b:e0:ad:cb:18:20:44:
                    1e:3c:fe:b3:63:b2:10:e0:f9:3f:aa:a3:df:6b:45:
                    d5:e4:9e:8a:e5:7a:c2:7f:7f:2e:b2:1d:45:30:59:
                    8d:c9:51:a2:1f:d9:65:64:80:18:74:ab:31:8c:84:
                    06:49:d2:14:43:de:a1:aa:d6:ce:34:ef:9e:ef:d4:
                    5d:36:c6:46:c0:8c:d1:87:de:8f:cc:a9:e6:4d:20:
                    46:fe:c4:f7:51:71:1b:10:40:2d:36:7a:3f:84:ae:
                    ed:b5:cd:d1:a8:08:f8:05:21:2c:e8:f1:18:4d:37:
                    60:e8:03:55:06:f5:19:a5:c1:db:23:96:56:24:45:
                    f5:69:20:31:40:3a:5b:ea:9e:3b:cb:65:69:19:08:
                    3e:50:29:ba:71:a0:33:62:53:97:d5:a4:6e:df:0a:
                    7b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:CF:B0:E5:F1:9E:9B:E6:DA:5B:84:45:22:59:8D:66:03:7C:40:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84cae104-76d8-3ed0-9ea3-5f19d13adf42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fbc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:82:8b:f0:10:e9:4b:be:43:3e:cc:29:c4:81:39:cb:a1:ad:
         11:58:c5:f6:92:7c:91:90:e3:85:bf:1b:0c:03:91:70:21:ed:
         a7:dd:20:50:1b:8f:70:bb:3d:14:fa:a2:35:51:97:07:32:bf:
         30:ac:92:09:ce:bf:e0:38:18:7e:2e:35:cf:eb:39:1d:f9:7c:
         b8:99:35:c2:e2:4b:e6:db:1f:37:d5:e1:cf:24:42:4a:b4:a4:
         5e:5e:ea:30:fd:4a:e8:2e:33:e5:dd:85:8a:b3:45:2d:1c:c5:
         eb:eb:6a:d2:2c:6c:55:f8:30:67:6a:14:32:03:bf:4b:9b:3c:
         c8:8a:8c:b5:9e:a8:ba:53:e8:68:1a:b5:cf:5e:d1:06:68:c3:
         1c:55:f7:66:00:d7:2e:10:ea:72:8d:4e:e8:69:63:a0:53:d0:
         4c:f4:41:08:b5:de:89:ef:33:46:a1:e4:87:fd:e6:4e:08:1c:
         94:e2:15:49:ce:1e:b4:d8:09:a9:03:91:3b:c2:02:98:2c:16:
         70:37:ef:e1:e0:d6:1e:b8:2f:19:cf:3d:6a:4e:72:13:91:bf:
         ac:40:a3:ab:6c:4a:3e:ab:c6:2a:a1:26:2d:f0:85:9c:71:86:
         bc:7c:d3:c4:8a:b8:62:4f:7f:22:66:3c:95:2c:81:cf:12:23:
         bf:3d:10:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 16:08:24 2026 by rpki-client