Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ab83235-de48-3b4c-86e4-b9ebe0d3c9cf.roa
File:                     1ab83235-de48-3b4c-86e4-b9ebe0d3c9cf.roa (raw, json)
Hash identifier:          pn7EmY66bCGkVSV2JZw0tLpfAHDW0rjB09ufH7KgLYY=
Subject key identifier:   8F:6F:2B:E6:AC:2E:29:DD:FC:B4:A3:32:4F:53:D1:8E:33:95:CF:10
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584D300A75CA385837F2CC512EC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ab83235-de48-3b4c-86e4-b9ebe0d3c9cf.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     7029
IP address blocks:        2604:cb00:4000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:75:ca:38:58:37:f2:cc:51:2e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=927e49d7-5106-4cde-a211-d5548950cce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:68:ff:f9:dd:e2:69:a4:9a:e5:77:64:11:a4:
                    6d:2f:d8:9b:3e:52:e1:f9:f6:40:19:6b:18:cd:9b:
                    c1:c8:82:d3:07:5a:d9:a7:33:be:35:25:26:87:8a:
                    25:b7:39:d7:b6:4c:d5:6f:74:74:21:84:f9:98:3a:
                    ab:c2:87:b1:dc:76:e6:d4:fc:9a:9f:95:f7:69:63:
                    15:9b:f0:34:a5:0b:64:0a:d5:08:41:a9:f1:3d:09:
                    5b:16:68:bc:35:b8:3f:db:66:8d:bf:9e:f0:bd:c0:
                    d2:06:b3:27:68:f3:e7:26:2a:e1:f1:c4:da:7c:c8:
                    4d:27:40:a6:f1:3d:30:ac:9b:75:82:3f:7e:23:83:
                    7b:97:07:74:5b:1c:8d:07:ac:a8:fe:db:61:7b:96:
                    31:1f:3a:10:0c:92:02:06:36:1e:9f:8a:23:f6:69:
                    31:39:48:f7:37:ab:1e:09:b7:e2:a8:47:9c:10:8a:
                    19:11:ef:d5:76:1e:8f:ca:e9:af:94:70:1a:76:63:
                    a9:88:f7:f1:fb:5a:0c:1a:60:13:5b:15:c4:d8:2c:
                    38:dc:c3:62:5e:0a:e9:fe:23:bd:4f:3d:13:cc:92:
                    11:80:16:2f:b6:56:e6:20:9f:1d:17:ac:fa:15:a7:
                    b9:97:ef:3a:f5:22:3a:16:1a:e3:37:86:4d:51:23:
                    59:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:6F:2B:E6:AC:2E:29:DD:FC:B4:A3:32:4F:53:D1:8E:33:95:CF:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ab83235-de48-3b4c-86e4-b9ebe0d3c9cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cb00:4000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:22:45:c2:b0:ad:43:76:0c:38:7e:96:62:fb:3b:7b:91:17:
         50:70:0d:81:39:6b:80:8c:79:69:d6:24:28:df:55:98:41:8d:
         74:9b:5f:cc:5e:9e:ff:eb:08:99:1d:3b:f4:c9:b6:7a:25:05:
         76:9b:28:2c:4c:df:95:d1:35:ca:96:7a:de:b7:1e:0b:ee:07:
         d2:da:18:52:6e:40:59:22:36:de:6b:0f:2c:51:07:e1:7e:7e:
         2d:fb:fa:0b:7f:aa:ad:0f:d1:1e:83:73:d4:a1:28:7d:2b:65:
         b2:2b:03:2c:c4:50:9c:b0:21:dd:cd:a7:53:88:a4:23:56:7c:
         81:a1:4d:6a:01:3c:15:84:62:48:25:d4:f1:b1:9f:88:20:da:
         3d:29:ba:26:5f:dc:74:27:e1:5d:7f:6b:0b:ff:b6:dc:8a:2b:
         49:38:52:c5:19:ff:b6:99:11:37:b5:0c:6d:7d:a9:b7:1d:4d:
         1e:ab:74:af:0a:b7:f5:c6:8b:98:be:c7:ce:4c:11:1a:0e:e0:
         61:a0:08:b8:6e:72:19:e9:10:8b:fe:3e:15:cc:1b:67:1b:e2:
         60:24:8c:94:c0:ee:54:ec:53:86:4e:09:be:91:00:b1:c7:b5:
         38:dd:99:71:52:be:ed:b1:01:f9:09:bc:58:ab:a6:90:eb:eb:
         83:ba:7e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:23:18 2026 by rpki-client