Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/031defe2-7837-3206-b868-b95875061cac.roa
File:                     031defe2-7837-3206-b868-b95875061cac.roa (raw, json)
Hash identifier:          Kjsa8TUy9C65xHSAHZ2b4kgIU5P8njTY+6dwAqnACTs=
Subject key identifier:   10:65:B3:14:8D:9C:63:85:D0:EF:A4:58:59:A6:AE:4D:2D:63:12:7A
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584EA79D1A34F283F328C7C82040
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/031defe2-7837-3206-b868-b95875061cac.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     12041
IP address blocks:        2001:500:48::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:1a:34:f2:83:f3:28:c7:c8:20:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=cd992617-3f5e-481b-bc1e-03b1c5df1bec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a3:ee:dc:f2:f1:bd:1c:31:cd:cc:90:9e:06:
                    61:e2:8f:f0:d8:61:8a:2f:d9:06:aa:50:b2:85:97:
                    af:cd:e3:3a:89:ce:d4:fe:32:4d:8d:ca:7a:ef:fc:
                    49:3c:78:fa:01:48:30:aa:92:a5:aa:9c:df:16:0f:
                    fb:54:6a:b7:b3:47:2e:60:aa:73:c0:95:c5:e4:f1:
                    cb:d8:d4:ad:80:d5:b1:a1:44:cd:71:26:d6:aa:fa:
                    38:20:d4:3e:5d:47:d0:7c:72:84:b1:08:e4:c0:07:
                    30:af:5f:e8:d0:0f:36:19:90:61:39:b2:c0:06:8d:
                    59:6c:2d:67:d7:c8:fd:48:e6:01:9a:c7:39:25:ca:
                    c6:c0:4c:10:ee:dc:71:35:ff:87:0b:75:48:73:68:
                    21:e8:58:fa:ce:38:35:95:86:c5:67:6a:50:26:d9:
                    30:f3:07:43:b3:14:9e:17:19:69:23:dd:7e:b2:15:
                    78:ec:f0:6e:6a:48:29:c9:a9:8e:ef:8c:5c:56:08:
                    77:af:e5:83:98:0e:1d:f0:a7:3f:dd:20:1d:da:e0:
                    fe:8c:a9:e8:77:6d:a6:97:63:71:00:41:11:a8:be:
                    3c:da:c4:3e:61:c8:28:3a:8e:8d:6f:3e:db:09:dc:
                    e8:77:f7:7f:ce:c1:a2:ca:6d:e8:db:2a:f7:8f:67:
                    e9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:65:B3:14:8D:9C:63:85:D0:EF:A4:58:59:A6:AE:4D:2D:63:12:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/031defe2-7837-3206-b868-b95875061cac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:48::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:ac:fb:4a:7b:e2:b4:65:1b:9c:b0:fe:3c:2f:0a:78:ba:cb:
         90:24:68:aa:30:a5:db:43:d6:a8:bd:d4:90:72:a4:41:58:75:
         d6:ac:39:42:8d:84:5b:10:c8:56:39:34:ee:c3:ed:15:da:47:
         c9:03:1f:ad:82:d3:60:0b:cc:09:25:e9:6c:a9:c3:c6:be:c2:
         df:0b:3c:fb:32:3d:45:29:37:e0:41:db:19:02:04:ec:f6:78:
         f9:df:a7:84:41:67:ba:c7:53:0e:91:03:11:b1:71:f6:57:4a:
         16:d4:a4:f9:6c:b5:d4:35:04:eb:33:c0:d8:78:b3:05:b4:ec:
         02:ef:df:0d:20:a9:cd:69:a9:80:83:ab:46:d2:37:06:24:36:
         0f:66:1c:3d:c3:c0:36:bf:d2:70:86:2f:d5:86:72:42:0f:0a:
         90:ae:84:e8:75:d7:97:21:cc:1d:79:31:7c:26:56:d7:12:22:
         9d:dd:c4:cf:88:71:38:89:22:0f:00:d9:33:6a:91:9a:f9:bd:
         f1:0c:c0:85:98:31:dd:28:1d:13:90:a5:ad:e7:8a:6a:8f:21:
         1e:af:3b:43:34:86:02:0b:dd:81:90:9b:fe:da:37:04:6c:d1:
         a0:2d:a1:70:17:00:3d:7c:d0:8f:a5:06:b7:9b:72:05:38:08:
         67:8f:af:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:58:15 2026 by rpki-client