Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0366b212-bc0f-30f9-baec-e5a537914813.roa
File:                     0366b212-bc0f-30f9-baec-e5a537914813.roa (raw, json)
Hash identifier:          S1fJ3xK96nU6vxC8dFrat6hUYYPk18UyZpeMw5EFonQ=
Subject key identifier:   06:65:0B:BD:14:97:EA:9F:06:E1:F6:2F:79:57:19:E4:3A:28:EC:B1
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584C45A8203C27015FAB45CEA4C0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0366b212-bc0f-30f9-baec-e5a537914813.roa
Signing time:             Mon 22 Dec 2025 14:00:39 +0000
ROA not before:           Mon 22 Dec 2025 14:00:39 +0000
ROA not after:            Sun 22 Mar 2026 13:00:39 +0000
asID:                     12041
IP address blocks:        2001:500:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:45:a8:20:3c:27:01:5f:ab:45:ce:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Dec 22 14:00:39 2025 GMT
            Not After : Mar 22 13:00:39 2026 GMT
        Subject: CN=d7fc27b3-bed1-4c52-a4c0-921ab532ee3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:72:51:dd:db:99:68:fa:91:36:ef:ae:dd:db:
                    9a:2b:46:60:dc:7c:b4:2e:98:91:9f:41:31:a3:87:
                    a9:ba:50:e6:19:38:e2:0b:2e:6a:00:2a:b7:76:91:
                    ae:06:bc:b8:e2:18:dc:55:f9:0a:e2:a8:8a:c0:d2:
                    ff:04:e3:f7:a3:fe:20:35:f8:0f:c1:04:14:f1:47:
                    0a:20:60:1b:cf:90:78:45:1d:04:13:d0:cd:4b:2d:
                    46:71:05:6e:ee:d6:2b:b9:a8:dc:d6:55:c0:b6:44:
                    8b:c5:56:9c:9b:71:44:c0:71:7f:05:7e:fb:d1:9b:
                    8c:e2:66:eb:3f:bb:3e:e3:ae:3b:b1:17:75:4a:6a:
                    d3:50:8d:84:5e:4d:42:7a:1a:28:ad:f4:65:d0:34:
                    ab:a0:8d:5d:ef:db:a3:89:6e:ce:3c:98:e2:bc:29:
                    ec:7c:f7:93:67:73:71:68:2d:df:34:73:56:56:7b:
                    d0:ff:f6:d5:d1:35:e7:ca:d7:93:d2:45:ef:b2:f2:
                    19:50:49:e8:86:15:ee:39:4f:2c:e7:19:e2:ee:81:
                    e8:29:ae:68:e8:be:a8:89:ed:1f:dd:65:1a:ce:6e:
                    1e:f1:24:09:ff:d8:d6:8d:71:5c:91:fc:47:e0:5a:
                    38:b4:b7:7a:45:e3:0d:a9:51:e1:b0:66:73:99:59:
                    cd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:65:0B:BD:14:97:EA:9F:06:E1:F6:2F:79:57:19:E4:3A:28:EC:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0366b212-bc0f-30f9-baec-e5a537914813.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:88:14:9a:fe:b8:18:dd:4c:56:16:f2:79:8e:ea:03:5b:35:
         0a:89:b2:d0:ea:91:4e:14:24:bb:a0:1b:ec:ea:70:eb:50:bb:
         8b:2a:dc:4b:2d:2d:61:e1:4e:74:04:d1:c0:f2:17:34:a7:dc:
         0b:72:1b:d3:3b:1b:29:e8:2c:b7:b7:06:b8:50:6b:9e:74:7e:
         6c:a6:6a:ec:36:e3:76:f0:0a:37:f1:42:af:3e:bd:4c:20:f9:
         d9:1d:24:a2:7a:5b:8b:e4:17:f1:25:b9:82:01:8b:86:ba:de:
         a5:bb:ca:f3:a9:bd:db:3e:30:11:e1:45:c5:f8:89:cf:df:a0:
         20:00:32:e0:fc:f6:2e:f3:b9:40:01:94:7c:47:e1:fa:81:76:
         37:3b:45:59:f1:f1:12:90:44:e3:c7:18:ef:dc:73:6d:29:e1:
         9b:65:ff:ea:41:38:08:72:46:19:1a:e3:0f:79:5b:fe:cb:a0:
         1f:b1:d2:ab:69:ff:d5:7a:b4:73:68:4c:7a:8f:7f:61:22:f5:
         09:4a:24:35:be:c0:f7:e1:6e:82:23:17:6f:50:9a:84:24:f4:
         4e:28:4a:cc:13:4f:f2:27:da:29:41:2a:ee:fa:fe:47:60:d0:
         fb:a3:c0:43:e4:b4:bf:99:60:26:31:7a:b2:6d:79:68:ba:66:
         28:ee:9a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:55:24 2026 by rpki-client