Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/91c0bd89-b519-3156-b9bf-a6d837d38e70.roa
File:                     91c0bd89-b519-3156-b9bf-a6d837d38e70.roa (raw, json)
Hash identifier:          jOm+xVi8fdTrxJ2A+hXc5EbeK77vdKJrNo63UPDJzm0=
Subject key identifier:   72:FC:88:10:66:20:82:0F:1C:F0:9A:00:6A:EA:D7:D2:3F:E3:D7:5B
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584E3FC47091BC09D6D357A3DE00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/91c0bd89-b519-3156-b9bf-a6d837d38e70.roa
Signing time:             Sun 21 Jun 2026 21:00:12 +0000
ROA not before:           Sun 21 Jun 2026 21:00:12 +0000
ROA not after:            Sat 19 Sep 2026 21:00:12 +0000
asID:                     7029
IP address blocks:        2001:19b0:48::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3f:c4:70:91:bc:09:d6:d3:57:a3:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jun 21 21:00:12 2026 GMT
            Not After : Sep 19 21:00:12 2026 GMT
        Subject: CN=4f0f182d-a05a-4b89-8526-f53614b89b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:eb:0f:82:97:5b:57:f6:54:23:a5:9a:b0:ff:
                    e9:1a:f6:3d:10:8d:66:b9:cc:59:9d:fe:85:e2:a6:
                    2f:8a:11:2a:3f:a0:be:f0:45:b8:f6:df:bb:ae:99:
                    2a:36:15:20:3f:6c:e3:05:88:7d:5e:83:90:56:f4:
                    80:bb:55:98:12:c7:99:5c:98:7d:1a:8c:3b:0b:89:
                    7a:5e:f0:23:3f:8f:76:f3:54:8d:0f:ab:7b:06:31:
                    0a:71:75:c1:c3:e6:f3:32:92:86:56:92:78:70:44:
                    fa:1b:19:86:aa:02:80:29:80:ee:b2:c7:62:e8:56:
                    09:5e:9d:3c:16:a3:aa:72:9b:ec:fd:bb:aa:5e:01:
                    74:10:82:ef:34:4c:5d:f3:ca:0e:59:f6:51:3f:41:
                    65:b6:51:36:cf:dd:df:a9:e8:9f:00:07:68:bc:49:
                    bb:13:86:dc:67:d7:8f:b4:8e:85:ce:1f:c6:eb:e4:
                    59:78:7f:7b:20:42:95:d5:0d:4d:af:bc:f1:ee:5e:
                    f1:e6:8d:9a:b0:14:5a:a2:0b:c5:24:90:f9:81:7a:
                    46:cb:2f:f7:78:56:8e:87:35:02:79:a9:da:da:6b:
                    a0:8c:7f:90:a3:c5:b8:03:e4:2f:e2:29:f6:51:a5:
                    16:bb:12:ec:61:fc:c1:eb:8d:e1:68:49:be:fc:22:
                    a5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:FC:88:10:66:20:82:0F:1C:F0:9A:00:6A:EA:D7:D2:3F:E3:D7:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/91c0bd89-b519-3156-b9bf-a6d837d38e70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:19b0:48::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:87:36:71:9d:15:54:73:8d:74:d2:64:b8:3d:b3:a7:72:a2:
         a2:fa:10:56:57:6e:d4:ff:34:c4:5e:87:2b:05:ec:0a:90:88:
         dc:fb:6f:e5:fd:89:97:62:9d:58:3d:d5:8b:db:6b:a9:fe:bd:
         a4:b0:84:ee:99:3d:03:52:2c:dd:58:f6:d5:58:48:72:8e:1c:
         89:7a:ce:d1:2e:5c:e9:b9:e3:12:0e:91:92:ef:04:db:0b:cd:
         c6:3f:e0:34:72:73:f7:80:21:60:55:d3:d0:dc:38:c6:1e:bf:
         4a:61:ee:b5:80:31:9f:7c:6d:a0:35:58:4e:b0:ff:68:90:65:
         33:74:6e:54:fd:34:6a:c3:69:76:a2:60:3a:4c:06:a3:3e:c9:
         7e:fa:e4:57:a5:0b:3c:34:67:83:46:7f:c7:83:f1:06:b7:1e:
         e2:b6:6f:f2:3d:a4:0e:be:d2:1f:93:40:3f:2a:99:55:30:a2:
         3f:0d:a1:5b:e0:78:7e:fa:17:12:b3:fc:17:e8:33:13:6b:3c:
         0c:8a:9e:97:ef:20:39:cc:5a:84:c7:20:ad:48:75:3d:1f:66:
         eb:87:46:af:85:d8:81:8b:0c:b1:d1:b8:b1:af:ba:0e:8b:f7:
         8c:6c:df:69:ef:bd:2a:e1:06:35:c9:26:c9:bd:a0:bb:2d:82:
         bb:06:8f:c9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4/xHCRvAnW01ej3gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDYyMTIxMDAxMloXDTI2MDkxOTIxMDAxMlowLzEtMCsGA1UEAxMk
NGYwZjE4MmQtYTA1YS00Yjg5LTg1MjYtZjUzNjE0Yjg5Yjg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtusPgpdbV/ZUI6WasP/pGvY9EI1mucxZnf6F
4qYvihEqP6C+8EW49t+7rpkqNhUgP2zjBYh9XoOQVvSAu1WYEseZXJh9Gow7C4l6
XvAjP49281SND6t7BjEKcXXBw+bzMpKGVpJ4cET6GxmGqgKAKYDussdi6FYJXp08
FqOqcpvs/buqXgF0EILvNExd88oOWfZRP0FltlE2z93fqeifAAdovEm7E4bcZ9eP
tI6Fzh/G6+RZeH97IEKV1Q1Nr7zx7l7x5o2asBRaogvFJJD5gXpGyy/3eFaOhzUC
eana2mugjH+Qo8W4A+Qv4in2UaUWuxLsYfzB643haEm+/CKlGwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHL8iBBmIIIPHPCaAGrq19I/49dbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTFjMGJkODktYjUxOS0z
MTU2LWI5YmYtYTZkODM3ZDM4ZTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEZsABI
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIeHNnGdFVRzjXTSZLg9s6dyoqL6EFZXbtT/NMRehysF7AqQiNz7
b+X9iZdinVg91Yvba6n+vaSwhO6ZPQNSLN1Y9tVYSHKOHIl6ztEuXOm54xIOkZLv
BNsLzcY/4DRyc/eAIWBV09DcOMYev0ph7rWAMZ98baA1WE6w/2iQZTN0blT9NGrD
aXaiYDpMBqM+yX765FelCzw0Z4NGf8eD8Qa3HuK2b/I9pA6+0h+TQD8qmVUwoj8N
oVvgeH76FxKz/BfoMxNrPAyKnpfvIDnMWoTHIK1IdT0fZuuHRq+F2IGLDLHRuLGv
ug6L94xs32nvvSrhBjXJJsm9oLstgrsGj8k=
-----END CERTIFICATE-----
Generated at Mon Jul 13 05:53:34 2026 by rpki-client