Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4546c97d-ce09-36b4-ab62-95f581ad6db4.roa
File:                     4546c97d-ce09-36b4-ab62-95f581ad6db4.roa (raw, json)
Hash identifier:          AJtmXsF9i3YKiTKwPHwoJ6I92gcFomRr3bZIy4Su69Y=
Subject key identifier:   0E:61:2D:48:D0:E4:3D:29:53:DC:26:73:91:DF:0A:97:36:5A:09:4D
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584EA7A0F2029C4CECE399C94EE0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4546c97d-ce09-36b4-ab62-95f581ad6db4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     12041
IP address blocks:        2001:500:26::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:f2:02:9c:4c:ec:e3:99:c9:4e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7b5bb96d-8863-4fbd-aaba-97a1cb6c579f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:36:62:b8:ec:58:aa:1d:ef:e8:35:42:af:75:
                    51:fc:2a:d7:ed:ad:33:7d:e0:f3:00:4d:3b:71:37:
                    88:d6:43:b5:2f:fe:a3:ef:57:73:25:c3:ed:6e:41:
                    51:41:75:ca:e3:95:85:59:b0:83:46:42:71:63:35:
                    fa:a7:05:ab:1c:eb:33:9e:cd:d1:cb:0f:9d:5f:68:
                    5a:ef:90:67:ea:5b:d9:49:42:24:33:66:15:d1:c6:
                    5d:3a:76:10:dc:0f:ce:51:0d:43:ef:aa:ed:04:e1:
                    cc:e3:82:54:4c:38:83:e1:ed:66:c1:dc:e9:4d:1a:
                    58:6b:43:a4:87:a9:bd:da:24:88:41:bc:c1:02:cc:
                    9b:f0:da:46:b0:3d:8c:49:d7:ee:d1:64:b4:dc:de:
                    e8:62:36:a2:02:cc:3a:f3:36:fe:27:0d:2a:80:f3:
                    70:d8:b2:58:79:f7:9a:d2:e3:fd:d8:9a:33:f7:79:
                    cc:ee:2d:5c:f1:94:fb:ae:97:5e:be:2e:09:72:a9:
                    44:72:7f:2d:5f:c5:23:0a:1c:cf:f5:48:5b:86:b3:
                    3b:4e:39:d0:1d:39:be:54:b6:2e:49:a3:7f:92:13:
                    7d:43:bd:02:ef:1d:75:49:17:34:bf:30:58:b5:e5:
                    71:22:02:3c:cc:f6:eb:f9:61:1c:02:e5:3c:81:31:
                    d4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:61:2D:48:D0:E4:3D:29:53:DC:26:73:91:DF:0A:97:36:5A:09:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4546c97d-ce09-36b4-ab62-95f581ad6db4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:26::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:85:5e:c1:70:9c:62:74:3e:52:47:3d:14:a9:09:db:b1:63:
         09:8e:0a:0b:fe:de:2a:01:6c:de:6a:66:6c:ab:26:cc:70:53:
         a3:54:bd:c1:75:36:e6:11:1b:86:56:6b:92:31:df:1d:5c:a7:
         da:7d:d7:0e:7d:89:ef:f0:60:7c:a5:4f:89:46:64:5d:b4:d8:
         a0:61:36:89:c9:13:cc:77:c5:ba:bb:83:d9:da:f1:ba:ef:f8:
         f4:8d:62:73:62:e2:0f:ed:7b:49:e4:ab:c5:e7:3f:79:44:75:
         2c:34:14:ed:97:60:43:38:07:28:76:77:27:c2:b3:03:0b:2f:
         68:0e:83:1c:24:54:2c:bc:55:f9:f5:52:33:2b:bc:d0:e5:3b:
         31:3f:a2:80:25:e4:8e:0a:40:b9:b5:d9:31:a4:c8:44:50:be:
         33:d3:f7:84:e3:74:1a:67:c0:90:0d:be:08:db:bd:60:40:30:
         d4:dc:f9:dd:ef:31:f1:8d:68:44:1b:92:a4:80:53:f4:c6:c3:
         13:7e:19:c8:7d:fd:ca:fe:de:a8:62:68:a7:e2:32:9a:6d:b6:
         e1:82:8e:8d:e6:50:4c:97:e7:26:8a:db:6a:55:f5:21:cc:28:
         92:f1:71:30:8c:56:c9:57:3d:6e:5d:45:3b:b3:c8:a6:27:3b:
         38:0d:5e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:55:40 2026 by rpki-client