Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96efd8b1-0aa5-3c29-bad6-2d4a34c970e8.roa
File:                     96efd8b1-0aa5-3c29-bad6-2d4a34c970e8.roa (raw, json)
Hash identifier:          FCw+c9cJpR94V9PbTrow5I+tPLJZ4baUfFKUUL9uppE=
Subject key identifier:   E1:D9:A5:AC:6D:0F:20:A9:E2:A8:8E:D7:E2:46:D6:29:EE:6F:A4:34
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584EBDDC593FBD7005F69CF98580
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96efd8b1-0aa5-3c29-bad6-2d4a34c970e8.roa
Signing time:             Thu 06 Aug 2026 01:00:12 +0000
ROA not before:           Thu 06 Aug 2026 01:00:12 +0000
ROA not after:            Wed 04 Nov 2026 02:00:12 +0000
asID:                     7029
IP address blocks:        2001:19b0:600::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bd:dc:59:3f:bd:70:05:f6:9c:f9:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Aug  6 01:00:12 2026 GMT
            Not After : Nov  4 02:00:12 2026 GMT
        Subject: CN=f0a9009b-f34e-43d3-8027-720914141ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:93:4a:0f:d1:92:5b:e2:e6:d5:af:c5:16:06:
                    ec:7f:e4:1e:1e:74:ed:a3:d5:de:9e:eb:ec:19:63:
                    91:56:8b:77:96:76:63:56:10:06:c9:67:bf:9f:80:
                    6b:aa:2f:0b:34:f6:29:47:8d:7f:13:5b:29:41:74:
                    5d:8b:f9:ec:29:0e:a4:23:10:4e:88:74:4c:32:f6:
                    e8:da:b4:62:02:99:03:6e:4c:8b:d9:38:1c:e8:49:
                    7d:2c:e5:51:50:31:1c:92:d2:4a:1f:da:c8:da:8e:
                    4f:a6:9b:c1:cb:fd:c0:75:c6:5b:29:68:f1:f0:8a:
                    f1:89:ce:4e:7c:21:af:11:b7:5e:25:0d:0a:e0:14:
                    a4:7f:2f:30:4a:3b:64:41:a1:44:fd:60:73:ae:d4:
                    c9:1b:5c:c5:f2:4d:6a:7d:60:62:6d:0c:10:50:40:
                    fc:c4:a6:cf:19:4e:c0:c3:77:a8:57:8f:6e:45:0d:
                    ba:b0:28:3e:8f:7a:ee:a2:15:a8:12:4d:b0:2c:a9:
                    91:de:11:13:e9:e5:f1:6f:87:64:57:f2:3f:7e:0b:
                    80:dd:74:97:83:0e:73:91:1a:40:48:8a:d1:dc:26:
                    0d:0a:44:7c:09:ff:fe:a4:06:5a:59:0b:87:1f:f2:
                    09:55:f5:a8:0e:b7:dd:21:3d:13:49:1b:1a:c1:d6:
                    ba:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D9:A5:AC:6D:0F:20:A9:E2:A8:8E:D7:E2:46:D6:29:EE:6F:A4:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96efd8b1-0aa5-3c29-bad6-2d4a34c970e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:19b0:600::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:a4:cc:91:e4:89:b2:11:65:eb:9a:2f:4b:f1:35:64:d7:3c:
         9d:3c:d9:f5:92:33:b1:7d:f5:20:bb:26:c7:58:c1:35:26:59:
         53:28:7b:3a:7d:b1:6c:c7:ee:4c:48:b6:b5:47:b9:93:d5:f2:
         ab:84:0f:a8:55:6a:9a:2b:d8:d8:9e:61:50:48:3f:5d:8d:a9:
         bd:ae:74:33:d9:2b:fb:be:a7:d9:55:4a:73:87:9b:d0:52:36:
         7d:ee:26:de:f4:fa:e8:c4:6a:0c:25:a4:c7:8e:c2:cc:d7:65:
         49:04:51:d7:91:f8:bc:08:6f:a1:2f:51:36:42:93:72:d9:40:
         7e:a0:28:ba:cf:6d:f3:f6:1b:ac:1f:64:89:98:2f:61:0b:fd:
         d7:11:fd:90:5e:02:ae:54:31:42:ad:d9:52:b8:bb:16:f0:47:
         c2:f7:79:38:35:9c:71:24:ac:f5:a6:0c:c8:0c:31:c2:77:29:
         1d:a6:a4:7b:cc:8f:2b:fe:17:a7:c7:11:5a:59:64:08:4b:e6:
         0f:8e:98:d4:08:70:64:f9:64:5d:cc:79:d1:7a:a6:4c:b4:7b:
         66:24:c5:9e:52:43:b2:d6:48:c0:e6:0a:36:f8:fd:7a:d2:50:
         56:29:5c:81:eb:bf:32:7c:bf:81:9f:4c:a0:01:53:79:cb:2e:
         61:48:e9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 09:47:06 2026 by rpki-client