Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/00787f8c-cdc9-3cb3-a4be-2f478bc1d337.roa
File:                     00787f8c-cdc9-3cb3-a4be-2f478bc1d337.roa (raw, json)
Hash identifier:          5aHItnXHJYO6yX2ruGH52LglGGwhtxJyaVd/aF0qbuc=
Subject key identifier:   6B:00:7B:40:4D:24:73:80:54:56:85:FD:98:4D:04:AC:12:A5:11:DA
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A8410BCE8D981E50FC27DD280
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/00787f8c-cdc9-3cb3-a4be-2f478bc1d337.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     12041
IP address blocks:        2001:500:d5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:bc:e8:d9:81:e5:0f:c2:7d:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=7150c54c-d002-4932-ad88-e0c12d355476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0c:83:12:aa:bf:7d:fa:93:30:ff:42:1c:cb:
                    3d:8b:78:04:00:ba:3c:70:10:9c:f1:a2:20:eb:23:
                    00:0d:de:ea:39:e7:4d:90:4a:74:2f:67:67:6a:25:
                    20:88:79:c3:e1:54:d0:f6:63:88:b8:e0:df:af:5b:
                    59:0f:ec:0a:80:f1:af:cd:99:d7:c2:52:d7:b0:ca:
                    7c:61:d3:d1:7d:60:37:2e:c8:4c:5d:64:e6:26:8a:
                    c8:93:fd:e8:28:9d:c6:c5:18:bc:70:2a:fe:58:d7:
                    9e:e0:99:54:79:a6:2a:bf:71:2f:6c:4a:72:be:28:
                    14:9a:7a:06:c6:19:88:fd:81:a2:12:12:c1:32:12:
                    0c:47:24:68:4a:c2:69:65:6e:ae:4f:1f:89:b7:48:
                    e4:17:42:0a:8d:2b:b9:50:4d:fc:fb:32:b8:d8:79:
                    3b:8f:f2:ea:2b:c6:54:ac:05:ad:d1:86:7f:3e:42:
                    48:7d:63:81:93:c6:a1:6b:25:0e:c5:cd:0a:5c:ac:
                    2b:2c:a9:1e:2a:8e:30:a7:3f:1b:72:ce:f4:15:03:
                    9f:41:84:b5:2e:c3:e0:9e:3b:16:f0:b2:ab:2b:8c:
                    88:a0:20:32:53:76:78:50:77:e9:01:37:96:08:2f:
                    be:e8:8e:53:07:62:21:ac:93:06:75:ba:d4:68:77:
                    a7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:00:7B:40:4D:24:73:80:54:56:85:FD:98:4D:04:AC:12:A5:11:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/00787f8c-cdc9-3cb3-a4be-2f478bc1d337.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:d5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:1c:0b:96:ce:2c:64:2a:32:85:76:85:2e:14:f8:34:f3:c1:
         85:7f:c9:9d:dd:bc:ec:1d:af:0c:b3:6f:b9:d7:ea:1a:e9:53:
         56:56:99:ff:c5:df:8b:94:7d:7e:3a:6c:4c:50:5e:12:34:6d:
         90:17:51:42:b1:a8:bc:74:ce:b6:51:63:cc:f2:02:08:ee:99:
         89:15:4a:a4:cd:54:80:cd:95:65:e5:cf:8f:8f:ea:cc:18:06:
         38:f6:fb:63:5f:b2:a0:d6:6b:b8:d8:fe:1e:48:dc:c2:3b:2f:
         e8:7f:c4:27:b9:8c:5b:7f:f1:48:db:a5:b2:17:e4:70:7b:90:
         6d:8d:86:16:7b:6b:42:c7:bd:7f:fd:5d:4f:cd:7b:73:26:5b:
         14:90:72:cd:17:ac:93:54:e3:fb:4a:be:07:ae:f5:6c:0f:22:
         ee:af:4c:a5:dd:93:ce:e4:1b:ef:0e:a9:e2:54:6e:6c:7a:e6:
         5a:ae:10:6f:4e:88:51:2a:ee:fd:48:26:0a:46:cb:95:21:5c:
         02:0a:36:8d:5b:18:f5:77:81:68:6d:0d:9d:4a:a9:e2:3d:d5:
         4f:68:13:40:52:7e:76:94:20:37:4c:73:45:7e:6f:0c:19:3c:
         c9:d8:c9:d9:5f:4f:77:6c:f9:88:b2:61:bc:0a:6e:c0:5f:76:
         33:c8:d5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:30:22 2025 by rpki-client