Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/49bbbd0f-35ec-3df0-96be-ba897acece3b.roa
File:                     49bbbd0f-35ec-3df0-96be-ba897acece3b.roa (raw, json)
Hash identifier:          VuRNnWicKEGGcgw9MHZnXNURz25ud/lhiMFcLjiCKnY=
Subject key identifier:   24:68:3D:F0:B4:FC:9A:35:21:A3:E9:43:34:1D:28:B0:66:8D:D6:C5
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584F498A3B19EEE94039F4ED9900
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/49bbbd0f-35ec-3df0-96be-ba897acece3b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     12041
IP address blocks:        2001:500:f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:3b:19:ee:e9:40:39:f4:ed:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=055c1aa0-80b5-40a1-8954-401a36fa76a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:76:bd:55:5f:e9:40:2f:ab:6f:22:d3:76:a4:
                    ef:1f:b7:13:09:d6:c5:1e:c8:e2:23:22:8a:e8:99:
                    db:ba:28:46:24:aa:60:8a:2d:a2:e1:7c:46:ad:f7:
                    5a:cf:a8:2a:21:41:c4:57:d0:5e:20:07:85:bf:8e:
                    36:00:ae:9d:0d:74:a4:df:c3:e1:ae:b3:73:cd:77:
                    06:4d:82:c3:6f:a0:5e:a4:a4:b6:e5:3d:6b:0b:ce:
                    fb:70:cf:b3:fb:b7:24:d3:50:25:59:d4:d1:d8:64:
                    b1:05:f8:3b:55:81:17:26:70:1a:6c:f3:05:3e:e5:
                    1d:55:db:e9:87:6b:d2:90:6d:cf:cf:6d:7d:43:74:
                    30:2e:54:c8:34:09:f5:d0:58:53:a8:24:13:83:66:
                    9b:47:27:c0:58:e5:ee:e3:68:54:ed:8c:50:8e:c7:
                    0f:3c:f3:2a:60:be:ab:34:e3:c2:bb:1c:de:4a:24:
                    94:7f:51:30:12:9b:05:32:a4:9d:ca:c7:39:40:21:
                    29:e7:16:5b:da:ef:43:2a:d3:45:2d:9b:04:42:69:
                    59:59:6a:3d:43:28:ef:fc:e6:c4:48:34:71:f6:62:
                    46:a1:d5:ba:a2:db:90:5d:2c:ed:a7:2e:fd:c3:02:
                    95:06:25:75:30:ff:5f:c6:7e:00:0a:76:bd:19:7b:
                    c5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:68:3D:F0:B4:FC:9A:35:21:A3:E9:43:34:1D:28:B0:66:8D:D6:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/49bbbd0f-35ec-3df0-96be-ba897acece3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:88:4d:ef:58:db:23:ba:bd:71:ee:03:e8:a8:53:ec:bf:97:
         04:bf:63:da:2f:72:64:74:43:a3:fb:4d:d2:bc:3b:33:71:c0:
         e7:2c:2c:d6:e7:17:d2:40:76:5a:fc:51:8a:f5:65:ff:e5:d6:
         1d:47:f5:85:6b:84:6f:f3:58:ee:af:92:30:4f:c9:ef:0a:c2:
         f2:12:06:85:e8:a0:b3:e2:21:09:1d:f2:6b:a0:39:3e:e9:df:
         bb:14:81:46:ec:1c:b9:17:b7:e3:05:13:f1:7d:85:59:67:45:
         06:36:38:81:aa:cb:58:6c:66:c5:e4:41:cd:87:16:53:fb:4e:
         c8:9b:ff:73:04:42:e9:7c:7f:ff:33:27:0a:95:af:7d:e0:41:
         1a:1a:3e:c3:7c:fc:78:d3:f3:ce:b2:23:f7:b4:2a:31:0e:fc:
         99:5d:12:27:24:3a:7c:6c:f0:af:d0:60:06:75:60:22:0b:0b:
         38:a2:96:e9:dc:e4:33:cd:e3:cb:4a:29:00:d7:33:e8:c4:b7:
         ed:71:5e:79:7e:39:75:bd:d6:32:24:d3:bf:bd:c4:3b:56:f0:
         b9:92:ca:d5:0a:45:cb:0b:54:fb:62:2a:95:d4:22:21:f4:68:
         db:ec:66:b2:a7:2d:d9:95:0b:f8:b4:ad:78:a0:8c:05:14:8d:
         77:e8:f2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:10:10 2026 by rpki-client