Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a0b54d44-dc65-392e-8fe1-dd46f0b42fc2.roa
File:                     a0b54d44-dc65-392e-8fe1-dd46f0b42fc2.roa (raw, json)
Hash identifier:          U038V1fas6akjPtrE6sv0TP2V7aUAyMLUjhlZLrFNBo=
Subject key identifier:   D2:43:80:4C:15:DF:C1:BE:CB:DC:63:98:C8:44:BB:DA:08:49:03:4E
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584EE2274C1A57D3129E95348F00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a0b54d44-dc65-392e-8fe1-dd46f0b42fc2.roa
Signing time:             Wed 19 Aug 2026 01:00:12 +0000
ROA not before:           Wed 19 Aug 2026 01:00:12 +0000
ROA not after:            Tue 17 Nov 2026 02:00:12 +0000
asID:                     7029
IP address blocks:        2001:19b0:42::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e2:27:4c:1a:57:d3:12:9e:95:34:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Aug 19 01:00:12 2026 GMT
            Not After : Nov 17 02:00:12 2026 GMT
        Subject: CN=c811a466-542b-4b6c-9dea-be1660c19b2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4d:af:f9:ce:32:2e:53:e0:2e:65:41:a9:ae:
                    88:f7:0f:4f:2d:c7:19:30:4c:ba:69:dd:ee:37:55:
                    e9:e4:c1:bc:d3:75:8f:df:37:7e:0b:80:24:f3:cf:
                    94:2b:09:d0:59:6f:9e:ec:1e:f3:9c:8d:14:4a:fb:
                    a7:3c:79:b0:10:e9:40:ca:57:44:bd:30:c0:45:d6:
                    79:2c:f0:98:9e:50:b9:3d:f9:16:d1:98:58:0f:fb:
                    9c:00:79:16:b5:9e:1d:06:42:f8:fb:20:20:4c:5f:
                    5e:6a:ad:a3:2c:c4:b0:09:78:9a:3d:55:12:b8:a0:
                    61:1e:96:fe:83:96:65:32:3d:4d:e5:81:4f:06:f2:
                    d5:59:22:f2:13:a8:77:d8:15:a8:79:b8:3f:6a:7a:
                    fe:6d:10:fc:ba:39:c6:1e:82:ce:03:04:2d:5f:2c:
                    aa:82:96:13:33:fa:62:d2:a9:71:98:a5:02:c9:22:
                    7f:f8:42:45:02:2a:fb:14:ea:55:70:89:dd:29:48:
                    a9:4e:7a:b7:a5:f2:91:eb:b4:57:e4:b2:b1:b9:97:
                    39:86:54:11:56:56:58:c5:bf:dc:5e:b4:5c:29:09:
                    a4:74:12:dd:3a:08:6a:ad:6e:d0:0b:8a:b3:07:75:
                    69:58:44:f5:1b:cb:8b:74:8d:7a:57:9c:d1:6d:98:
                    87:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:43:80:4C:15:DF:C1:BE:CB:DC:63:98:C8:44:BB:DA:08:49:03:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a0b54d44-dc65-392e-8fe1-dd46f0b42fc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:19b0:42::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:0f:3c:c7:25:9c:d1:95:80:ea:ff:5f:c5:31:4e:87:17:c9:
         43:6b:a2:90:f0:cc:5b:41:f1:1e:93:e7:a2:e9:33:c0:6b:63:
         1e:4b:04:29:92:cf:12:45:4f:3e:f6:f9:b9:10:4f:bd:55:82:
         b0:87:1d:1e:70:0b:3f:05:55:f0:eb:23:a8:88:71:9c:70:a7:
         43:5f:92:38:4e:45:e0:91:15:db:ea:60:19:58:27:cc:7b:09:
         ac:57:bb:87:2e:e2:8c:d9:33:5d:38:a0:cc:5c:98:63:c9:2b:
         55:cf:d5:fd:b5:7f:91:ff:c4:0e:76:74:88:02:a7:f7:84:0c:
         3c:2b:d2:a4:38:61:a3:73:e3:38:ff:af:15:e5:59:db:d1:b7:
         d8:76:c1:7e:38:bc:fb:4b:ca:56:0a:cb:b6:bb:63:7b:f6:4a:
         2d:68:16:c3:7e:27:ac:9d:6c:2b:b3:58:ad:09:3a:e2:1e:00:
         1e:70:85:d3:c2:23:f8:3e:40:4e:5e:fa:87:d6:32:e6:f2:a7:
         7a:c8:80:38:08:71:ff:20:21:38:07:0a:3b:f0:3b:54:79:ad:
         69:1d:87:bb:c7:0a:0a:1a:f4:f7:a8:29:3d:9e:e6:5a:87:c7:
         7e:30:3c:84:97:75:f1:7f:a8:0b:4b:11:e0:53:5d:d9:a3:4e:
         95:fb:61:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 09:47:00 2026 by rpki-client