Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9848bede-e9d9-333a-8504-5a4419eeac53.roa
File:                     9848bede-e9d9-333a-8504-5a4419eeac53.roa (raw, json)
Hash identifier:          J0L/WI5M3nSlTjOWp7Cm7lmbU4D9vnu1LGWJFYNNbnU=
Subject key identifier:   4E:6B:B1:A2:D0:EE:A0:B6:01:C1:9F:EF:31:FE:48:2C:7B:21:B1:70
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584E3FC479334F86D8E620DA27E0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9848bede-e9d9-333a-8504-5a4419eeac53.roa
Signing time:             Sun 21 Jun 2026 21:00:12 +0000
ROA not before:           Sun 21 Jun 2026 21:00:12 +0000
ROA not after:            Sat 19 Sep 2026 21:00:12 +0000
asID:                     7029
IP address blocks:        2001:19b0:4a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3f:c4:79:33:4f:86:d8:e6:20:da:27:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jun 21 21:00:12 2026 GMT
            Not After : Sep 19 21:00:12 2026 GMT
        Subject: CN=54500535-a73f-4bd5-acb7-45a776e9af5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d6:ab:20:5a:62:f8:b7:8f:a7:7a:90:77:26:
                    5d:f1:bf:ba:d6:23:6c:06:70:6e:a4:b2:69:c8:3f:
                    39:af:9e:a5:7f:7f:63:82:d8:4c:d1:bf:9b:bd:56:
                    91:a8:cc:c4:b9:13:27:9a:8d:b4:5b:bc:83:69:c3:
                    7f:ad:c7:2f:69:e8:54:c5:5f:33:da:bf:d9:6e:06:
                    89:9d:07:0a:b6:ed:33:bc:06:66:54:bc:68:ba:a3:
                    c7:18:01:e2:c4:c0:ea:bd:e3:cf:2b:91:bf:ec:b0:
                    fd:27:18:6e:d5:3c:e7:7b:c2:9a:d4:16:ea:a2:c8:
                    15:05:94:3f:c1:85:fc:0f:7d:bf:74:86:86:16:4c:
                    af:ba:4e:b6:78:bd:4d:44:d1:c9:3c:b0:ce:b5:f0:
                    38:51:04:c8:c4:4f:60:a4:7d:ca:27:48:d0:6c:32:
                    bc:68:1c:a7:58:f1:0a:5c:16:97:a0:fd:7b:e6:c9:
                    21:61:98:a1:00:e2:d0:d6:b2:b2:73:36:d5:50:c6:
                    ba:83:3c:be:9c:26:2f:3e:26:14:8d:3c:4f:54:ad:
                    f4:39:02:03:91:31:8d:8e:85:16:65:a6:86:75:16:
                    4c:c9:e1:bf:aa:53:7a:42:6a:bf:96:09:ee:99:7d:
                    e7:60:da:e8:b1:2a:46:c6:80:9c:50:26:44:cc:71:
                    89:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:6B:B1:A2:D0:EE:A0:B6:01:C1:9F:EF:31:FE:48:2C:7B:21:B1:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9848bede-e9d9-333a-8504-5a4419eeac53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:19b0:4a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:c4:f6:11:11:99:4c:0a:0b:71:4d:9c:78:2e:a3:73:1d:d7:
         6c:37:5e:4a:42:58:05:c8:f5:66:11:7d:bf:4b:df:c6:b6:b8:
         3f:46:04:61:d3:a1:39:31:3f:9e:e3:e5:7b:ed:b1:7d:5d:42:
         e5:48:c5:e1:1d:47:ab:f1:dc:aa:0b:b9:75:c2:36:af:e0:cb:
         71:26:fd:b5:16:9b:0b:90:6c:2c:76:88:b8:84:7b:d7:26:67:
         ba:ca:12:c3:08:da:2f:e3:97:5a:7c:11:1b:27:50:1f:fb:41:
         7f:ce:98:52:f8:49:b8:51:43:e3:34:9e:c4:ec:84:f1:eb:2d:
         1a:59:27:13:c1:21:f3:3a:34:48:76:dc:42:50:9b:4c:f8:f5:
         c4:40:c1:a0:85:e1:1e:87:69:3a:63:b3:99:8a:f4:5a:78:bc:
         46:23:b2:a9:c4:39:40:66:ff:25:15:55:e0:da:e7:86:ab:cb:
         e0:88:fb:06:cd:11:25:18:cd:38:ab:c2:b9:5c:e7:08:5a:14:
         ad:ec:7a:ed:0d:55:0c:16:5b:c3:79:c3:02:03:e0:cf:9d:17:
         a7:12:e7:71:ec:02:fb:5d:40:ad:eb:42:d9:f3:16:82:7b:57:
         a7:0d:62:a3:ce:6c:52:1e:8d:dd:b4:d5:bd:d2:27:76:da:33:
         0f:04:55:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 05:53:22 2026 by rpki-client