Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/095223a2-77aa-32e9-9655-7dc8e7c6bb82.roa
File:                     095223a2-77aa-32e9-9655-7dc8e7c6bb82.roa (raw, json)
Hash identifier:          mAgYAl3yBiOr8b1zTDXuP84hqp1SzfegObRcMQkUrf8=
Subject key identifier:   4F:C3:1F:E7:50:D0:57:B2:C3:23:11:4C:53:9E:DB:CD:B9:81:82:AE
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584E0435F864B498A0FE5FCA0400
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/095223a2-77aa-32e9-9655-7dc8e7c6bb82.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     207266
IP address blocks:        2001:500:4f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:f8:64:b4:98:a0:fe:5f:ca:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=c54616f7-8c83-4a82-a56f-92daabc15fec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:dd:f6:7c:76:d3:b8:bd:b9:67:ca:8f:67:3b:
                    eb:ef:d7:fc:8a:8a:32:06:bc:22:7a:da:0c:8d:0c:
                    f7:57:43:ed:03:a5:fe:d7:85:19:0e:1b:a5:dd:53:
                    f8:9f:97:c1:6d:35:ed:b5:0a:3c:f1:12:90:88:fe:
                    27:9a:65:34:a7:73:59:e0:7c:e0:29:93:c7:08:ef:
                    43:20:97:37:b8:d7:fd:00:f0:36:11:ac:39:a5:f0:
                    db:1e:4b:1f:82:e0:bf:65:0e:75:fb:63:5c:c3:da:
                    5e:c8:5a:f6:fb:2c:78:1c:b1:40:bd:11:32:3a:25:
                    fc:c2:5b:3b:b5:7f:68:de:62:c5:0e:e5:88:a2:1e:
                    55:85:12:f5:ab:f1:47:83:41:b2:4c:e9:4a:5f:fd:
                    96:bb:b3:d3:b1:3a:63:3a:1b:87:e6:cd:9d:ae:3f:
                    46:7d:f3:79:86:35:cf:76:ea:a8:17:80:c0:25:bc:
                    58:78:37:e0:8e:48:f0:59:e5:69:d8:c6:87:5b:ae:
                    d5:7b:5f:21:c5:47:f8:d2:aa:79:41:ef:42:16:23:
                    84:09:7c:cc:3b:f0:9f:f9:b8:0c:75:60:c9:79:f7:
                    b2:46:43:b0:ef:10:3c:5c:23:13:4f:c2:e8:de:b3:
                    88:42:1e:19:59:73:82:ac:6f:2e:c7:10:50:f4:a9:
                    58:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C3:1F:E7:50:D0:57:B2:C3:23:11:4C:53:9E:DB:CD:B9:81:82:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/095223a2-77aa-32e9-9655-7dc8e7c6bb82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:4f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:de:f8:06:fd:61:07:61:6f:5e:94:0a:75:f6:63:7a:0a:3c:
         eb:10:ac:cb:3d:3b:8e:f8:86:04:cb:2b:18:6d:f5:5e:35:ce:
         1c:8a:29:8a:9b:48:d4:7b:d1:b9:70:9b:6b:5c:3f:21:27:67:
         ec:21:25:99:89:2f:6e:79:92:c0:6d:19:91:3b:81:74:46:bc:
         b3:e0:7d:4f:60:59:7d:68:31:f8:f7:bc:e0:2b:0a:c2:f3:e3:
         1d:32:78:95:98:5b:63:8c:d9:71:46:34:c7:45:2b:49:ea:e8:
         f9:81:b9:2a:c2:b3:df:0b:10:2d:d4:51:95:8a:0c:4e:d9:bc:
         71:4d:12:b8:a8:2c:1e:3a:8f:4d:88:43:1e:0a:20:89:7f:43:
         be:26:6f:35:95:c8:79:f8:a2:75:2c:ee:66:ed:a6:68:e6:a5:
         c2:84:e5:fd:1b:c1:a5:39:ba:61:1b:9e:98:5c:04:1b:ef:6c:
         bd:95:b9:27:0e:d2:ff:9b:85:1f:e9:1e:c2:8b:b2:95:ac:ea:
         d6:95:ac:88:c5:c9:f3:fa:33:d5:d3:e2:74:bc:a1:7a:eb:df:
         16:68:04:45:73:59:f0:c6:aa:ae:c0:cb:47:fd:dd:67:12:59:
         7f:0f:ac:18:c1:08:f1:e0:a4:1c:99:17:28:8d:4b:04:19:35:
         96:3d:51:7a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4ENfhktJig/l/KBAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk
YzU0NjE2ZjctOGM4My00YTgyLWE1NmYtOTJkYWFiYzE1ZmVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyd32fHbTuL25Z8qPZzvr79f8iooyBrwietoM
jQz3V0PtA6X+14UZDhul3VP4n5fBbTXttQo88RKQiP4nmmU0p3NZ4HzgKZPHCO9D
IJc3uNf9APA2Eaw5pfDbHksfguC/ZQ51+2Ncw9peyFr2+yx4HLFAvREyOiX8wls7
tX9o3mLFDuWIoh5VhRL1q/FHg0GyTOlKX/2Wu7PTsTpjOhuH5s2drj9GffN5hjXP
duqoF4DAJbxYeDfgjkjwWeVp2MaHW67Ve18hxUf40qp5Qe9CFiOECXzMO/Cf+bgM
dWDJefeyRkOw7xA8XCMTT8Lo3rOIQh4ZWXOCrG8uxxBQ9KlYTwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFE/DH+dQ0FeywyMRTFOe2825gYKuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDk1MjIzYTItNzdhYS0z
MmU5LTk2NTUtN2RjOGU3YzZiYjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABP
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKDe+Ab9YQdhb16UCnX2Y3oKPOsQrMs9O474hgTLKxht9V41zhyK
KYqbSNR70blwm2tcPyEnZ+whJZmJL255ksBtGZE7gXRGvLPgfU9gWX1oMfj3vOAr
CsLz4x0yeJWYW2OM2XFGNMdFK0nq6PmBuSrCs98LEC3UUZWKDE7ZvHFNErioLB46
j02IQx4KIIl/Q74mbzWVyHn4onUs7mbtpmjmpcKE5f0bwaU5umEbnphcBBvvbL2V
uScO0v+bhR/pHsKLspWs6taVrIjFyfP6M9XT4nS8oXrr3xZoBEVzWfDGqq7Ay0f9
3WcSWX8PrBjBCPHgpByZFyiNSwQZNZY9UXo=
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:34:00 2026 by rpki-client