Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a2ac74d8-c5d4-3ccf-b7ce-2a86813ad2cc.roa
File:                     a2ac74d8-c5d4-3ccf-b7ce-2a86813ad2cc.roa (raw, json)
Hash identifier:          bz/PVWpeYKeKfu7KdrzqtrZL35KHXrlN4jtMP27ETvA=
Subject key identifier:   3E:6D:EC:20:56:46:51:7C:6E:E6:2A:DD:45:55:9C:98:B0:8D:CA:F7
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584F497390D1DE62962375D08180
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a2ac74d8-c5d4-3ccf-b7ce-2a86813ad2cc.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     12041
IP address blocks:        2001:500:1b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:90:d1:de:62:96:23:75:d0:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=57b2c84a-4637-43a4-ac13-078c66d3b8b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:54:ba:39:e9:96:a7:12:15:bf:5a:ef:eb:1c:
                    cd:48:5d:ac:8a:f0:6a:de:bb:24:44:07:96:1f:20:
                    fb:75:6e:46:26:e6:4a:f6:de:dd:30:20:23:37:90:
                    36:73:69:72:36:c8:e1:cb:d5:7c:71:ca:55:09:41:
                    d6:b6:03:d7:74:66:48:23:7e:35:6c:e1:15:49:19:
                    14:35:d3:69:3c:fb:b2:a6:9a:30:96:39:98:ad:db:
                    89:05:b0:08:6c:22:cb:58:b5:a2:92:8b:a6:f4:5a:
                    a1:38:5b:15:be:36:78:68:1a:ea:b5:21:de:38:93:
                    a4:12:13:ab:77:d2:29:2c:4e:35:cb:e2:d8:79:46:
                    51:4d:d4:ef:10:6a:0e:f0:ac:26:af:29:d2:f4:66:
                    e2:d7:e6:1d:da:54:42:d1:1e:cb:6f:77:f0:b4:cc:
                    ae:a3:5f:c8:0e:af:07:2b:68:98:ee:fe:8d:2b:41:
                    e8:51:75:6a:70:e9:8b:1e:22:c0:df:b0:eb:18:f5:
                    a3:f3:7f:50:00:68:c9:0a:6a:e6:7e:70:33:7f:08:
                    b5:db:af:ba:f8:4e:91:c8:5f:7b:fa:20:4d:b9:33:
                    8b:4a:2b:c5:c4:db:a5:77:36:8b:54:f6:39:0d:05:
                    f5:ba:b6:9f:d2:74:7a:c7:15:81:77:6e:12:a4:d6:
                    52:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:6D:EC:20:56:46:51:7C:6E:E6:2A:DD:45:55:9C:98:B0:8D:CA:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a2ac74d8-c5d4-3ccf-b7ce-2a86813ad2cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:1b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:ee:e0:7d:f2:37:20:68:e3:b5:b5:1c:3c:a6:61:9f:c7:1c:
         d5:eb:10:92:2c:7e:3f:56:fa:9e:38:0b:ec:6c:11:c1:f5:16:
         86:39:a8:e8:7d:78:95:67:a1:4a:84:ae:0d:e6:5a:e4:16:ef:
         33:85:29:7d:15:a8:23:37:68:ac:fb:5f:80:de:1b:8e:d4:35:
         67:e5:9a:dd:12:3b:05:66:10:c3:0c:a3:55:cb:b0:4f:2d:31:
         b2:27:2c:98:f8:f5:72:bd:d7:0f:18:8a:e8:92:df:93:af:1d:
         54:a8:7c:40:17:fd:e7:5b:cf:dd:b9:01:05:56:b8:53:1e:58:
         9d:e2:71:82:c4:a8:d2:7e:66:7e:19:de:07:d7:55:e2:b7:43:
         20:d2:14:90:0b:12:a4:f4:74:24:3e:d1:2c:f7:08:c6:c1:41:
         24:03:02:a4:a0:28:6f:c1:2f:8a:17:40:30:16:60:1f:74:ab:
         79:5b:ca:86:6b:c5:ae:f1:5a:fd:00:3f:e3:6a:61:b2:89:e9:
         a5:e0:85:bd:85:53:87:56:33:e5:86:5e:f2:ee:ed:42:17:47:
         4e:bc:5d:77:d2:35:f7:cd:2d:19:bd:0d:be:92:2f:77:c5:cb:
         6e:47:46:42:07:71:b0:5e:13:fe:03:83:4d:f6:70:be:8f:55:
         bd:a9:c7:25
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jc5DR3mKWI3XQgYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NTdiMmM4NGEtNDYzNy00M2E0LWFjMTMtMDc4YzY2ZDNiOGI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFS6OemWpxIVv1rv6xzNSF2sivBq3rskRAeW
HyD7dW5GJuZK9t7dMCAjN5A2c2lyNsjhy9V8ccpVCUHWtgPXdGZII341bOEVSRkU
NdNpPPuyppowljmYrduJBbAIbCLLWLWikoum9FqhOFsVvjZ4aBrqtSHeOJOkEhOr
d9IpLE41y+LYeUZRTdTvEGoO8KwmrynS9Gbi1+Yd2lRC0R7Lb3fwtMyuo1/IDq8H
K2iY7v6NK0HoUXVqcOmLHiLA37DrGPWj839QAGjJCmrmfnAzfwi126+6+E6RyF97
+iBNuTOLSivFxNuldzaLVPY5DQX1uraf0nR6xxWBd24SpNZS3wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFD5t7CBWRlF8buYq3UVVnJiwjcr3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTJhYzc0ZDgtYzVkNC0z
Y2NmLWI3Y2UtMmE4NjgxM2FkMmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAb
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAATu4H3yNyBo47W1HDymYZ/HHNXrEJIsfj9W+p44C+xsEcH1FoY5
qOh9eJVnoUqErg3mWuQW7zOFKX0VqCM3aKz7X4DeG47UNWflmt0SOwVmEMMMo1XL
sE8tMbInLJj49XK91w8YiuiS35OvHVSofEAX/edbz925AQVWuFMeWJ3icYLEqNJ+
Zn4Z3gfXVeK3QyDSFJALEqT0dCQ+0Sz3CMbBQSQDAqSgKG/BL4oXQDAWYB90q3lb
yoZrxa7xWv0AP+NqYbKJ6aXghb2FU4dWM+WGXvLu7UIXR068XXfSNffNLRm9Db6S
L3fFy25HRkIHcbBeE/4Dg032cL6PVb2pxyU=
-----END CERTIFICATE-----
Generated at Fri Sep 25 06:40:23 2026 by rpki-client