Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1def610-6bdb-3266-9d82-dc9da0ae8803.roa
File:                     f1def610-6bdb-3266-9d82-dc9da0ae8803.roa (raw, json)
Hash identifier:          kYSQC1HbBTq5HhVqAFKEeUCT2mAGT9AbzZwP9sBYd74=
Subject key identifier:   57:D8:26:DE:3C:79:13:10:1B:65:C9:3A:14:77:22:74:8C:BB:F5:8E
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584D300AA1B92FC666DD45FB8B40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1def610-6bdb-3266-9d82-dc9da0ae8803.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     7029
IP address blocks:        2604:cb00:e00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:a1:b9:2f:c6:66:dd:45:fb:8b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=06e4a774-d262-4ca9-a68f-71b7a709643c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b0:b3:ec:69:58:e9:78:55:ce:a6:30:0f:5c:
                    58:e3:24:00:a1:51:5a:59:fd:fb:50:ab:ae:16:b0:
                    38:89:a3:ac:5d:85:16:6e:ea:b0:d7:fb:3c:cd:d8:
                    79:bf:d5:51:ef:e7:52:45:f1:c2:c5:31:91:ba:33:
                    07:a7:c0:a8:23:38:4c:c2:02:5a:46:b5:53:df:36:
                    40:3d:26:c0:94:49:cc:86:86:dd:fc:e6:d8:87:42:
                    8b:a4:7a:de:a1:48:ed:70:84:66:88:3b:ec:28:6d:
                    94:db:b8:e9:03:64:80:cb:36:4f:d5:05:d0:d2:f1:
                    03:7e:a6:92:7a:74:0b:cd:9b:f5:26:81:62:55:30:
                    d9:81:ed:a5:55:de:38:7f:08:2b:e6:0f:a9:f5:84:
                    7e:37:74:27:a0:a8:b3:bc:68:8d:43:5c:f7:17:25:
                    5a:84:b9:46:a6:56:89:fb:89:6a:68:5f:1d:1e:c1:
                    0f:0a:e2:da:d9:2e:56:d1:be:53:97:e4:45:41:ff:
                    4f:c4:e7:97:21:8f:fb:0a:83:53:27:84:a6:59:85:
                    43:56:ce:02:6f:a3:3a:5b:ac:a7:c1:d4:ad:1c:32:
                    32:cb:97:9e:ee:17:00:72:df:18:b3:ae:17:92:ab:
                    df:bb:d2:23:b8:54:b6:80:b7:7c:57:98:40:2a:2f:
                    61:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D8:26:DE:3C:79:13:10:1B:65:C9:3A:14:77:22:74:8C:BB:F5:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1def610-6bdb-3266-9d82-dc9da0ae8803.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cb00:e00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:1e:95:0a:0c:a3:a3:18:2d:d4:33:0f:0e:8e:a1:30:c3:a3:
         a8:a3:69:6b:41:4e:6b:e9:6e:c0:5f:8d:a1:6a:2b:13:24:0c:
         b8:e5:86:02:b2:16:1b:71:45:97:c1:f7:13:66:b7:dc:76:5b:
         23:be:89:a2:89:95:d5:af:59:68:c4:91:7b:44:df:c0:12:e8:
         eb:24:47:5f:d0:72:34:95:e2:af:8f:6a:8a:21:eb:6c:d1:3d:
         1b:39:d3:f5:bd:ae:bd:da:48:16:18:63:aa:a2:e4:ae:98:31:
         36:e8:b8:f3:2e:d5:e3:1f:a5:bd:fa:a6:cb:76:3f:da:6e:7f:
         4a:68:48:62:33:3b:ed:ae:c6:ef:b5:3c:b0:df:4f:7f:b0:f2:
         b6:15:2d:76:05:76:8c:dd:65:b9:7c:b5:e7:f7:e4:a0:1a:96:
         30:dd:7b:66:de:45:3b:a9:32:9b:63:9a:c3:88:9c:ff:70:42:
         cf:66:6c:32:4f:7d:e7:0b:b3:bd:23:ee:3e:55:1a:e9:5d:fb:
         00:c4:f2:58:ba:68:d3:e2:64:3a:1f:44:3e:05:f6:7b:ee:93:
         19:d7:d9:af:08:1f:61:b4:a4:44:33:aa:ac:f6:ed:e1:aa:1a:
         d8:c3:92:2b:24:08:67:ef:ed:f5:46:ba:d8:ac:9e:71:ea:da:
         6c:05:a7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:55:24 2026 by rpki-client