Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/49e57c20-6e2c-3ab6-94b1-58496d466405.roa
File:                     49e57c20-6e2c-3ab6-94b1-58496d466405.roa (raw, json)
Hash identifier:          +wYeFhPZHTLiVptB6bn+JTFVSVPOSWCyNe67F1K3OLw=
Subject key identifier:   43:03:7F:0F:2A:B3:A7:82:B4:C2:F8:E6:00:FF:1B:B5:E6:38:35:3B
Certificate issuer:       /CN=d498318a-7059-42be-9b60-234aedba5e34
Certificate serial:       010D0C9F4328584E6B0A318534622D518B44B400
Authority key identifier: 1B:58:B3:AC:48:09:D4:84:9D:3A:66:E0:5F:08:9C:D2:10:C1:11:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/49e57c20-6e2c-3ab6-94b1-58496d466405.roa
Signing time:             Tue 07 Jul 2026 09:00:12 +0000
ROA not before:           Tue 07 Jul 2026 09:00:12 +0000
ROA not after:            Mon 05 Oct 2026 09:00:12 +0000
asID:                     0
IP address blocks:        2605:1c00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:0a:31:85:34:62:2d:51:8b:44:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d498318a-7059-42be-9b60-234aedba5e34
        Validity
            Not Before: Jul  7 09:00:12 2026 GMT
            Not After : Oct  5 09:00:12 2026 GMT
        Subject: CN=29ac5a96-4336-4426-82c4-dca34d0d3fc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a3:77:40:69:44:e6:c7:ef:3b:08:b5:da:ca:
                    3c:2f:21:dd:57:13:54:bf:ec:4f:a7:5f:0a:ad:de:
                    b7:d9:91:03:75:c0:89:0e:89:1c:c3:20:b8:92:6e:
                    a2:20:31:3d:24:f5:fd:ba:80:8e:4e:f9:55:ed:5a:
                    d7:94:c1:c6:60:b7:e5:1d:97:63:4a:f4:50:36:db:
                    a7:6d:83:bf:3b:83:a8:44:28:f8:55:ec:8d:7f:f7:
                    c3:9a:99:b1:9a:cd:d9:8d:26:cd:65:02:78:12:75:
                    ee:7b:6b:ee:fd:f8:46:5b:5c:4f:84:60:34:5b:b5:
                    34:d1:b3:20:3a:99:58:0e:7d:e7:85:38:a8:90:b7:
                    38:bc:8b:1e:80:f7:e9:b4:63:bc:d0:19:e7:02:c1:
                    57:8c:c2:50:8a:ee:75:42:d0:02:40:55:2c:ca:96:
                    05:85:57:9f:27:3d:02:83:d9:a2:26:b3:10:87:fd:
                    17:80:41:ea:63:67:77:38:18:60:c4:7c:0a:35:ec:
                    af:9c:e7:be:6d:d4:66:f8:f2:bd:8b:d7:cd:4a:a6:
                    9e:25:de:d0:41:f3:12:fb:61:26:e1:65:ac:f7:1f:
                    6f:25:05:9c:26:4b:c5:84:84:1e:c2:22:13:f9:1f:
                    42:c8:97:f8:36:8f:7a:71:4a:f1:74:d7:13:7c:bb:
                    a9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:03:7F:0F:2A:B3:A7:82:B4:C2:F8:E6:00:FF:1B:B5:E6:38:35:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/49e57c20-6e2c-3ab6-94b1-58496d466405.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.crl

            X509v3 Authority Key Identifier:
                keyid:1B:58:B3:AC:48:09:D4:84:9D:3A:66:E0:5F:08:9C:D2:10:C1:11:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:1c00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:53:be:f2:a2:75:01:05:86:54:ce:69:aa:ef:13:92:71:94:
         14:43:c3:e6:70:0d:f8:a4:be:2a:18:bc:d1:31:e1:c9:24:3f:
         cc:57:ae:2c:bb:a6:79:5a:34:06:8f:51:c0:fd:eb:66:94:36:
         2b:b3:48:28:b0:73:eb:9c:9d:c3:17:2b:c7:00:b8:19:c5:a8:
         21:06:26:bf:9f:cb:e2:3b:bd:fa:19:20:65:b2:66:3c:cc:1d:
         9a:e4:fb:0d:3f:1d:4f:31:a7:c4:f6:ea:83:73:ae:82:60:69:
         bb:cd:5b:d9:7a:ba:3e:8a:51:49:64:c1:d0:c3:1a:e1:f5:84:
         53:e9:49:8b:00:e5:01:2d:98:23:4a:ed:20:17:50:3b:0a:93:
         0b:2a:18:5d:43:ae:46:0e:e8:dd:8d:43:90:8d:2d:db:0b:f6:
         3b:75:58:ce:6c:50:0f:5b:51:49:10:2e:4a:5f:28:53:13:dc:
         fe:8d:37:3a:3b:ac:73:26:55:a1:8b:e5:85:20:c4:b4:53:1d:
         db:d5:21:bc:69:55:68:b5:2b:80:46:bc:8a:70:7a:a8:02:2e:
         f0:61:1e:f2:8a:0e:ef:3e:c5:a3:90:49:b0:88:13:b7:f2:b3:
         80:4f:2b:e2:24:75:59:4f:d2:f6:60:e7:4b:b7:7b:a6:04:0e:
         56:ba:cd:33
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5rCjGFNGItUYtEtAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQ5ODMxOGEtNzA1OS00MmJlLTliNjAtMjM0YWVkYmE1
ZTM0MB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk
MjlhYzVhOTYtNDMzNi00NDI2LTgyYzQtZGNhMzRkMGQzZmMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqN3QGlE5sfvOwi12so8LyHdVxNUv+xPp18K
rd632ZEDdcCJDokcwyC4km6iIDE9JPX9uoCOTvlV7VrXlMHGYLflHZdjSvRQNtun
bYO/O4OoRCj4VeyNf/fDmpmxms3ZjSbNZQJ4EnXue2vu/fhGW1xPhGA0W7U00bMg
OplYDn3nhTiokLc4vIsegPfptGO80BnnAsFXjMJQiu51QtACQFUsypYFhVefJz0C
g9miJrMQh/0XgEHqY2d3OBhgxHwKNeyvnOe+bdRm+PK9i9fNSqaeJd7QQfMS+2Em
4WWs9x9vJQWcJkvFhIQewiIT+R9CyJf4No96cUrxdNcTfLupRQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEMDfw8qs6eCtML45gD/G7XmODU7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDk4
MzE4YS03MDU5LTQyYmUtOWI2MC0yMzRhZWRiYTVlMzQvNDllNTdjMjAtNmUyYy0z
YWI2LTk0YjEtNTg0OTZkNDY2NDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ5ODMxOGEtNzA1OS00MmJlLTli
NjAtMjM0YWVkYmE1ZTM0L2Q0OTgzMThhLTcwNTktNDJiZS05YjYwLTIzNGFlZGJh
NWUzNC5jcmwwHwYDVR0jBBgwFoAUG1izrEgJ1ISdOmbgXwic0hDBEWswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDk4MzE4YS03MDU5LTQyYmUtOWI2MC0yMzRh
ZWRiYTVlMzQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUcADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCRU77yonUBBYZUzmmq7xOScZQUQ8PmcA34pL4qGLzRMeHJJD/MV64s
u6Z5WjQGj1HA/etmlDYrs0gosHPrnJ3DFyvHALgZxaghBia/n8viO736GSBlsmY8
zB2a5PsNPx1PMafE9uqDc66CYGm7zVvZero+ilFJZMHQwxrh9YRT6UmLAOUBLZgj
Su0gF1A7CpMLKhhdQ65GDujdjUOQjS3bC/Y7dVjObFAPW1FJEC5KXyhTE9z+jTc6
O6xzJlWhi+WFIMS0Ux3b1SG8aVVotSuARryKcHqoAi7wYR7yig7vPsWjkEmwiBO3
8rOATyviJHVZT9L2YOdLt3umBA5Wus0z
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:23:56 2026 by rpki-client