Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/951a5c50-6265-3ebc-bbd8-06b4dab77e7c.roa
File:                     951a5c50-6265-3ebc-bbd8-06b4dab77e7c.roa (raw, json)
Hash identifier:          lu+ttQ9DIw+fBA+kzZCU6NDUQfdrAAOA3xSvS1ZkEiw=
Subject key identifier:   F7:40:EB:2A:7C:FE:7C:61:19:16:E3:EA:EA:45:50:3A:2D:0D:C5:52
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A8410C1894E6BE5A99E3D97E8
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/951a5c50-6265-3ebc-bbd8-06b4dab77e7c.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     12041
IP address blocks:        2001:500:27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:c1:89:4e:6b:e5:a9:9e:3d:97:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=fa0b7e2c-d1cf-4390-aa24-514b12ad625b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9f:06:0d:1b:0a:fd:ea:e0:a9:12:46:58:2d:
                    a7:84:a2:33:0f:fb:9e:a9:88:ee:0e:aa:9b:ee:60:
                    af:bf:bd:ef:bc:cb:9f:03:0e:d9:c4:dc:a2:4e:77:
                    32:7a:31:81:f5:0a:63:ff:0c:e7:53:a4:88:4b:0a:
                    53:cc:5c:ee:53:eb:71:73:05:1f:5f:6c:6b:4b:36:
                    1c:7c:8c:1d:0a:17:c0:d5:7a:2c:bd:39:6a:0c:2b:
                    1e:b8:4c:d5:61:f5:e2:e2:84:53:82:bd:e1:4b:27:
                    09:32:ad:67:ff:45:34:21:6b:09:62:c0:e9:7a:10:
                    58:1f:a8:05:12:b5:b0:12:5d:35:fa:a5:38:0d:dc:
                    05:d9:f9:85:a9:b4:7a:17:d4:a7:bb:8a:91:e9:77:
                    33:2e:9f:16:16:d4:43:fd:31:93:8d:6a:71:ee:7e:
                    bf:aa:43:53:9f:c5:46:f2:cd:24:67:5c:6c:14:0c:
                    07:d2:9f:4a:e3:c1:42:f7:a6:09:ef:8f:67:36:ab:
                    8f:8e:39:c1:e8:0d:e4:d6:dd:b7:60:b1:fe:7a:e9:
                    17:19:a4:e3:60:b9:1b:1a:70:8f:42:49:0d:88:f9:
                    00:17:51:ea:76:2e:05:6b:6f:bc:71:c2:61:4e:f3:
                    6b:6b:86:fc:11:ac:a5:de:ce:58:49:7c:7f:8b:5f:
                    38:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:40:EB:2A:7C:FE:7C:61:19:16:E3:EA:EA:45:50:3A:2D:0D:C5:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/951a5c50-6265-3ebc-bbd8-06b4dab77e7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:95:4d:b1:bf:fa:17:8c:96:f2:24:0c:bd:d4:86:af:71:f4:
         80:0c:f3:48:c5:bb:a6:d0:2a:35:01:4d:74:4a:da:3f:dd:04:
         83:47:ec:a1:b7:5a:84:1b:a9:09:8e:46:27:b6:c2:a7:23:ce:
         1e:a4:5c:bc:e2:ff:04:a8:46:0c:b5:18:e8:a6:48:ae:2d:6f:
         44:b7:37:ca:31:34:e4:60:fb:10:53:ea:f7:af:a7:e3:6d:21:
         98:1b:da:d4:b4:24:08:85:a5:22:a4:95:03:90:05:4d:1d:3c:
         c2:f8:69:df:53:26:2b:c1:0a:1a:51:53:ec:90:81:78:5a:2b:
         cf:74:b7:d2:33:8b:13:43:20:c8:15:eb:ab:50:b1:ca:6a:82:
         6d:ad:e3:b0:01:f0:c1:3c:9d:ae:de:90:26:09:0f:b1:ef:cf:
         78:6a:7f:7a:41:85:1e:73:c0:79:00:31:e3:e1:a7:fc:5a:95:
         db:fe:72:be:63:5b:8b:0e:bc:54:79:a8:80:56:5d:eb:a6:17:
         51:d3:36:19:35:95:af:77:ea:bd:ca:00:a8:83:13:b5:03:ae:
         89:88:39:56:32:de:86:62:6c:5e:3a:7a:0a:55:34:80:3d:b1:
         9f:be:04:24:ca:79:5a:13:d9:e1:7e:4e:d6:e5:b8:e9:fc:ff:
         eb:ff:b0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:01:19 2025 by rpki-client