Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6e5e5ff8-7b1f-3f05-860a-ee03e42c3ac7.roa
File:                     6e5e5ff8-7b1f-3f05-860a-ee03e42c3ac7.roa (raw, json)
Hash identifier:          73PmpEG3whYVJoBwMqF9n8YYv4BGcg8YKXL0fkcFjws=
Subject key identifier:   A3:C9:72:DF:5F:9F:18:6E:1A:2F:02:8A:BE:28:EA:A1:38:2D:59:DB
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A8410C29408F36B48202CB980
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6e5e5ff8-7b1f-3f05-860a-ee03e42c3ac7.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     12041
IP address blocks:        2001:500:52::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:c2:94:08:f3:6b:48:20:2c:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=042548b6-1e93-45b4-9d83-b08f8b921915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:63:ee:f9:a9:d8:9b:78:b5:ca:b6:17:f3:b2:
                    64:5e:60:59:5e:31:b0:a2:d0:b3:91:db:29:b8:35:
                    21:0b:6a:b3:aa:e2:42:35:71:1e:ee:d9:3f:53:19:
                    53:2a:d4:f7:87:66:bd:d4:91:d2:e5:2b:d1:4a:99:
                    94:1c:bb:d0:7f:07:71:c5:3e:07:e0:fe:be:6c:3c:
                    ab:08:84:b0:cf:df:ae:77:8a:d7:51:01:e0:30:5a:
                    f0:4a:68:71:b5:d0:0a:64:2f:38:5c:a2:a3:3f:3a:
                    30:81:c5:a6:22:5f:7c:ab:3c:29:a5:1a:f4:e4:da:
                    64:f5:4c:51:9d:76:59:c5:9c:78:17:9c:51:3a:3b:
                    82:48:68:34:8d:c1:26:79:3e:b1:c9:dd:95:d1:62:
                    50:25:69:fb:f8:4d:a0:d9:8d:58:66:99:e8:69:c6:
                    b5:00:a9:dc:3d:6c:c4:4f:a8:13:75:11:bc:ce:6b:
                    23:c9:b0:bc:ea:b1:f0:b1:1b:f5:c8:63:10:e2:5a:
                    c2:26:d7:a0:f4:d3:5b:fd:f8:c7:ba:17:86:32:79:
                    68:97:86:25:fb:99:7f:c1:8c:0f:77:76:2b:c9:fa:
                    de:30:88:97:b0:4b:a7:d7:df:c2:24:21:65:af:14:
                    4d:8b:4b:61:8e:b0:17:bd:39:15:d1:c4:b3:16:4a:
                    94:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C9:72:DF:5F:9F:18:6E:1A:2F:02:8A:BE:28:EA:A1:38:2D:59:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6e5e5ff8-7b1f-3f05-860a-ee03e42c3ac7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:52::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:e0:da:3e:f8:98:d5:c1:06:15:7b:15:a7:3e:25:06:7c:57:
         2b:75:2e:11:f5:36:37:ea:13:48:53:d9:34:9b:e4:41:c9:54:
         41:d1:85:9d:e3:4e:97:49:7f:d7:d2:8c:8f:5b:9e:16:39:26:
         d1:aa:c9:58:d8:1e:47:fe:1c:13:f2:7b:70:5d:c4:dc:7d:b7:
         7d:18:cd:e5:c2:c5:c5:0b:ed:bf:08:e7:a2:c5:bf:a6:b1:33:
         fe:fe:81:ec:06:ac:e1:de:cb:81:db:b6:b0:aa:a3:fd:83:39:
         47:ef:12:34:a2:bf:cd:18:6b:74:61:95:ea:2b:3d:cf:36:29:
         0b:0d:35:fe:fa:c9:76:7c:2a:53:0e:f9:fe:2b:4c:50:03:59:
         be:c3:1b:9e:7a:b2:55:05:3b:c0:18:1e:d9:7b:41:73:9a:b9:
         9e:64:24:93:11:df:21:35:3f:97:7c:11:96:8b:da:22:ef:98:
         00:17:c1:81:23:97:ce:82:26:cb:97:09:92:88:34:f8:93:93:
         b0:4e:df:5f:63:83:0f:96:a0:07:19:fe:a2:f3:a0:6a:00:ba:
         33:a9:d2:99:6e:7f:21:35:51:39:64:8c:9b:cd:f1:85:7a:b8:
         fb:62:b8:78:b2:cc:b0:1a:85:a9:68:7d:9a:aa:d9:47:2e:d0:
         5b:d2:e0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:30:21 2025 by rpki-client