Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/49e57c20-6e2c-3ab6-94b1-58496d466405.roa
File:                     49e57c20-6e2c-3ab6-94b1-58496d466405.roa (raw, json)
Hash identifier:          0AGea/JBFfMEdioA2L3rN42fWQl8NOgXmeCyv0KCe4Q=
Subject key identifier:   87:87:22:11:3B:E3:0F:FF:CF:50:B1:35:D5:32:EB:5A:17:AB:B6:3C
Certificate issuer:       /CN=d498318a-7059-42be-9b60-234aedba5e34
Certificate serial:       010D0C9F4328584D8AC557D0A9C30D5A9B12E880
Authority key identifier: 1B:58:B3:AC:48:09:D4:84:9D:3A:66:E0:5F:08:9C:D2:10:C1:11:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/49e57c20-6e2c-3ab6-94b1-58496d466405.roa
Signing time:             Sat 18 Apr 2026 01:00:24 +0000
ROA not before:           Sat 18 Apr 2026 01:00:24 +0000
ROA not after:            Fri 17 Jul 2026 01:00:24 +0000
asID:                     0
IP address blocks:        2605:1c00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:c5:57:d0:a9:c3:0d:5a:9b:12:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d498318a-7059-42be-9b60-234aedba5e34
        Validity
            Not Before: Apr 18 01:00:24 2026 GMT
            Not After : Jul 17 01:00:24 2026 GMT
        Subject: CN=4deaa219-7bef-4c8a-9ef5-c488d4d7bedb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b5:3a:2d:fa:96:2b:80:64:90:5b:f5:08:e3:
                    ae:3c:d1:06:45:b9:b0:28:1e:dd:b8:a4:e0:b6:cf:
                    0a:70:34:ed:27:db:57:67:62:ed:8e:b2:78:dd:d1:
                    74:cf:0c:85:96:32:09:06:3f:3f:c9:96:95:8b:ac:
                    19:6d:76:6d:8e:82:54:90:54:88:dc:8c:ed:58:0f:
                    e7:83:2f:75:7c:31:e7:ff:3a:a0:08:d4:02:0e:ce:
                    e7:57:f7:85:7b:30:c6:34:74:a0:5b:24:c8:86:bf:
                    46:38:37:e5:07:ed:f4:38:a2:3b:dc:4f:d2:e3:f9:
                    19:98:09:3b:8c:ca:90:6a:1a:18:7e:c7:88:78:2e:
                    99:c6:67:e4:1f:15:d1:07:aa:99:b4:0d:7d:1f:a1:
                    f5:71:0d:42:c4:83:fb:c4:05:0c:ab:36:54:f8:0d:
                    b6:69:c6:3d:65:a9:b0:d9:76:ce:c4:6f:a5:eb:09:
                    6b:e7:dd:37:b6:aa:e9:a1:ff:81:57:20:25:7f:a0:
                    4b:5e:9f:02:17:a6:bf:c9:de:02:af:a9:4e:0b:29:
                    fb:66:26:f8:76:08:74:5d:d3:91:06:56:07:6d:ab:
                    3c:c9:b5:aa:d6:72:e7:31:4a:85:66:3c:26:d6:75:
                    c8:a0:81:7e:6d:5f:24:bc:f6:9a:1b:50:07:f3:96:
                    14:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:87:22:11:3B:E3:0F:FF:CF:50:B1:35:D5:32:EB:5A:17:AB:B6:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/49e57c20-6e2c-3ab6-94b1-58496d466405.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.crl

            X509v3 Authority Key Identifier:
                keyid:1B:58:B3:AC:48:09:D4:84:9D:3A:66:E0:5F:08:9C:D2:10:C1:11:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:1c00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:67:5d:4f:8b:94:e1:8f:bd:86:ff:35:1c:c3:40:77:e4:29:
         b3:8d:11:63:10:51:1e:c3:04:3b:b2:16:c1:fd:68:c1:40:ac:
         2f:b1:87:72:db:70:84:b9:bf:78:ca:69:99:d4:4f:26:38:c7:
         e1:3f:5f:14:3c:f9:89:78:ca:90:35:0e:5a:23:fb:e3:72:fe:
         ac:78:8f:56:c3:18:a5:25:81:4d:7a:a0:87:78:ac:d2:c7:cf:
         27:a4:f8:a2:89:76:c9:51:ff:f4:de:a0:d1:89:25:44:ce:88:
         b8:84:3b:57:f7:ee:05:44:2a:8c:28:05:85:1a:56:21:b9:6d:
         18:8a:2a:fe:c4:54:61:4a:6e:35:f5:b0:e4:4c:7c:2f:09:3c:
         c3:75:ee:0c:ec:30:c7:73:b4:8b:ee:ae:e0:ec:53:3c:41:d9:
         40:36:1b:a5:16:8e:e6:86:a7:89:68:6d:57:2c:b3:cc:08:f5:
         7f:4b:8b:33:c8:38:7a:8c:20:89:cd:61:58:49:e6:26:8f:f1:
         cc:52:8c:db:2f:9d:89:8a:62:c5:c7:92:c6:96:38:fa:42:92:
         93:5e:11:a8:a5:7e:d7:55:14:0a:9a:28:2b:15:20:6d:0c:cb:
         fe:0c:f2:af:ba:d8:de:6e:05:1c:a4:f1:6a:e8:73:e9:7f:89:
         e4:82:4d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 20:56:29 2026 by rpki-client