Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/be73092b-99c5-3625-9088-bb6e8d14cf0c.roa
File:                     be73092b-99c5-3625-9088-bb6e8d14cf0c.roa (raw, json)
Hash identifier:          36bYEC0cFlovhpoo+tgv/+Bz9qRdqmABOe4YGum3MM8=
Subject key identifier:   AA:0C:BB:A5:83:CB:A8:00:BB:F3:6F:38:D2:F4:81:5A:BF:41:8A:88
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584E059C6DD6021B1CAF5BCA4700
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/be73092b-99c5-3625-9088-bb6e8d14cf0c.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     12041
IP address blocks:        2001:500:16::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:6d:d6:02:1b:1c:af:5b:ca:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=2e93d640-0fcd-494d-b13d-766bb1a440e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a2:74:b3:8b:65:1d:58:e5:06:0f:ce:61:f5:
                    97:26:43:71:58:af:85:9f:81:25:43:99:8f:86:56:
                    cf:06:fe:74:5c:3a:79:f6:0f:73:96:ad:df:84:33:
                    a8:f9:cf:55:62:81:34:3b:5c:4a:84:7f:c7:e9:d5:
                    dc:4a:8a:85:39:60:ec:36:27:60:20:2b:ef:cb:da:
                    49:b0:4a:17:d5:65:2b:82:43:92:58:2c:7f:1c:42:
                    7c:ab:fb:be:59:e7:c9:e8:92:45:5b:76:61:9f:2e:
                    90:96:e9:42:13:a8:52:e5:3a:26:95:94:a5:1c:4e:
                    16:78:29:d2:20:35:99:c5:94:2f:3e:14:48:db:c1:
                    cc:00:a8:05:ad:fa:a8:63:e0:0f:be:21:35:72:2f:
                    df:7f:76:aa:3b:eb:93:03:1b:8f:3a:6a:50:0a:2e:
                    81:77:6d:24:1b:83:36:46:29:1c:62:c7:df:9a:19:
                    e8:de:8b:22:7e:18:a0:60:12:13:85:55:cb:e0:60:
                    39:39:a1:aa:d4:7c:12:df:60:c4:3d:16:d5:21:da:
                    70:58:57:62:18:36:50:5b:44:c7:7f:5e:37:e9:18:
                    40:a5:4b:7b:ae:6f:6f:43:75:06:5f:61:29:53:af:
                    2c:62:b3:68:4c:65:d9:5d:28:48:eb:04:dc:96:eb:
                    d1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:0C:BB:A5:83:CB:A8:00:BB:F3:6F:38:D2:F4:81:5A:BF:41:8A:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/be73092b-99c5-3625-9088-bb6e8d14cf0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:16::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:b0:70:55:9c:33:b2:16:a8:60:05:90:85:3f:b6:36:00:a0:
         a4:da:3f:2c:d2:c0:19:63:8f:58:c7:a6:b8:8e:65:dd:18:bd:
         83:23:6e:75:5d:d5:6a:45:2f:af:fb:45:e9:00:dc:2a:c7:8f:
         03:80:1c:d3:68:c0:9d:40:e4:d8:44:d4:43:4f:f2:a5:71:3e:
         35:ba:89:de:7b:5c:97:29:17:df:82:a1:ee:92:ca:eb:fc:4f:
         b5:c9:6a:58:e5:d8:69:c0:9b:51:90:86:cb:aa:ac:cf:8d:7c:
         70:66:8d:3e:d0:41:0e:99:51:f8:46:94:a6:ca:4c:42:c7:f7:
         8c:cf:24:41:9a:a3:21:ac:26:85:eb:45:f6:b9:bc:9d:44:b4:
         88:2b:a0:bc:77:11:05:6f:89:6a:6f:2e:68:13:33:92:18:26:
         56:43:a2:21:ce:f6:9f:33:6c:5c:77:50:f1:18:43:43:12:d8:
         5a:8e:4b:e6:d1:4d:ec:c1:91:20:0d:13:cb:2f:72:df:d5:69:
         0f:b4:bc:e2:37:a6:90:33:95:3d:63:28:27:86:10:a4:ec:f9:
         80:e7:83:68:5e:16:30:a6:f6:8b:08:fa:95:61:f3:16:55:ff:
         22:0b:1d:55:4c:c1:98:2a:2d:82:4c:0d:76:74:44:fb:d6:a7:
         37:2c:38:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:59:38 2026 by rpki-client