Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/84daf953-7ff6-323b-8169-713278400e86.roa
File:                     84daf953-7ff6-323b-8169-713278400e86.roa (raw, json)
Hash identifier:          w4ugw0d3p0Maqoe9VNyHPD4WD+sdc0b4yaZgHmJSlT8=
Subject key identifier:   68:47:93:77:18:64:F7:41:CC:AE:81:6B:7E:B7:71:A7:86:C2:47:E4
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584E059C658E67717C043B5E8D80
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/84daf953-7ff6-323b-8169-713278400e86.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     12041
IP address blocks:        2001:500:eb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:65:8e:67:71:7c:04:3b:5e:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=fd1f698b-ad11-4fbe-a835-bc1d4937af42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:de:67:d7:05:25:c4:7e:2e:e7:33:3a:07:26:
                    79:84:62:39:10:5a:f8:84:ef:b4:d4:fe:b9:03:06:
                    44:dc:b1:30:59:ae:73:e1:38:70:d9:1b:65:cf:fb:
                    c1:2e:46:52:3d:28:b0:89:6f:ff:9d:0c:44:1a:8f:
                    8a:d9:76:a1:cb:c9:24:f7:ca:76:0a:8b:19:a8:43:
                    87:08:4e:a0:5b:50:42:b8:26:d1:be:a2:15:d6:a9:
                    53:4d:cd:9d:bf:de:e7:c0:db:61:e8:c4:0c:4c:f8:
                    9b:d1:86:d1:71:66:ab:c1:8b:ce:03:00:af:07:f7:
                    f6:95:e0:d8:cd:b5:10:88:b4:72:61:ab:c3:98:4a:
                    e0:7e:ed:5e:b6:ce:3d:72:87:36:69:c3:52:de:f1:
                    3b:23:e8:17:b9:e1:a7:9a:da:9a:3a:78:f7:34:fc:
                    93:70:22:c1:96:40:a0:e4:85:e6:29:6f:32:ad:28:
                    d2:94:01:7a:9c:55:37:41:38:5d:64:e6:6e:21:54:
                    a8:65:90:c8:4a:e3:90:f8:15:01:31:53:fa:98:8c:
                    ca:0a:9c:8e:d3:2c:ac:34:73:c5:d0:21:c6:f9:6f:
                    3c:cc:9c:b2:fb:85:55:05:e5:24:bd:18:f0:4b:f1:
                    47:ca:95:e2:55:f3:b4:79:57:b0:b9:f7:28:cf:0a:
                    4d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:47:93:77:18:64:F7:41:CC:AE:81:6B:7E:B7:71:A7:86:C2:47:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/84daf953-7ff6-323b-8169-713278400e86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:eb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:8d:80:f1:f8:99:67:37:4b:36:66:d5:1f:80:46:6d:7e:31:
         15:55:16:fd:9a:a5:f4:9f:b0:9b:90:8f:d1:37:0e:e7:f6:fd:
         81:eb:2b:29:18:23:f7:9a:5a:54:2b:72:0e:c0:ca:84:f9:a1:
         9d:3e:6f:82:d1:0a:08:f8:b8:7d:de:31:ad:f4:92:6d:17:21:
         be:0c:64:3f:db:b6:65:81:b6:75:ba:ec:0a:af:42:20:83:ac:
         6a:d6:5c:7e:82:3f:cd:7c:f3:9f:40:fd:27:22:3e:48:0a:ae:
         e2:f8:24:6b:fd:6e:5b:f8:5c:64:eb:4c:ec:82:72:82:d7:70:
         e2:6c:2b:39:ad:e1:ee:c4:07:3c:95:7c:6a:a5:70:df:96:c7:
         63:d2:0d:97:fb:91:ad:3b:db:64:a1:59:40:26:ae:9b:93:12:
         40:f4:98:b6:2d:36:2d:1e:2e:ca:65:0f:2b:2f:e3:d9:51:d4:
         69:92:b2:b7:e4:87:26:a3:6b:3a:f9:29:50:df:f9:1d:81:40:
         53:34:e7:ba:4e:46:07:fb:c5:9c:c3:c7:fa:26:51:2d:97:2a:
         b8:62:7d:c3:74:01:3b:25:16:18:2e:d3:9f:45:4d:8a:60:07:
         a7:39:5c:f0:8c:6e:95:ef:0d:02:92:22:f1:1f:8b:a2:c7:bb:
         01:0f:f0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:38:40 2026 by rpki-client