Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c75c1f32-0012-3c54-aa55-d5fc2e169ded.roa
File:                     c75c1f32-0012-3c54-aa55-d5fc2e169ded.roa (raw, json)
Hash identifier:          Mpom0cicgrVQcfgMtFXECXsWxnKW6QtqsjkJkEiA3TM=
Subject key identifier:   F1:5A:9F:92:E6:54:38:D5:D5:29:E9:2F:CB:84:76:0B:5D:37:6A:46
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584E059C5DEE4178E37117166320
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c75c1f32-0012-3c54-aa55-d5fc2e169ded.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     12041
IP address blocks:        2001:500:24::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:5d:ee:41:78:e3:71:17:16:63:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=9436b115-acc2-47fd-a790-f610d16ea30c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:44:31:0a:35:de:50:5e:01:2f:c0:33:2f:a9:
                    48:3e:d6:ce:c4:54:17:cf:7e:cc:44:b5:74:12:ba:
                    24:4b:68:b7:4e:14:f7:8d:26:2e:18:97:78:0e:cc:
                    f1:fd:68:ab:92:f1:b6:54:14:10:8a:9b:4a:f6:33:
                    25:4f:13:a0:ae:7f:fb:4e:30:32:96:53:c8:8f:a2:
                    13:1d:b7:a2:82:b4:e1:20:dc:43:8b:2d:23:bc:4f:
                    9d:fb:54:c1:d2:2a:8b:c4:c6:7f:e4:78:01:4c:73:
                    6c:bb:f5:f9:61:9a:58:7d:a4:5b:89:ad:8b:75:b6:
                    9e:6e:85:ed:2a:66:b9:52:9a:b2:39:10:34:41:ea:
                    16:60:f1:64:21:48:4d:14:e2:8b:41:cb:77:6a:05:
                    a3:95:cd:74:5c:a2:18:9e:06:20:7c:9d:62:e1:ce:
                    6a:89:00:05:e1:15:5d:5e:fe:3a:ca:48:0c:70:69:
                    7e:a0:d2:ad:a2:4c:e9:b8:34:bf:b1:de:76:f4:26:
                    9b:af:77:89:eb:7b:35:62:9e:95:81:87:0d:7b:47:
                    d5:23:fc:b8:8e:2c:12:9a:b5:9f:7b:51:85:e4:49:
                    69:7e:30:9f:e0:8d:02:af:f3:af:2b:45:9f:7d:4e:
                    db:09:c1:4a:42:5d:b5:34:33:52:cc:1d:58:72:39:
                    e6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:5A:9F:92:E6:54:38:D5:D5:29:E9:2F:CB:84:76:0B:5D:37:6A:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c75c1f32-0012-3c54-aa55-d5fc2e169ded.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:24::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:a4:ed:a6:1a:31:bb:72:e7:16:de:42:3f:b9:99:f0:fd:ff:
         31:ad:3a:d3:34:9c:8c:fc:02:56:b8:f2:6b:04:e3:4e:a9:5a:
         33:56:51:31:11:fc:aa:7c:14:70:6b:73:06:9b:8b:35:1f:0a:
         d3:c5:90:28:28:dc:b5:5d:cd:1d:da:05:3a:ab:91:08:4c:f0:
         6b:ab:c1:9f:4a:de:72:09:d9:34:78:9e:bb:e5:6a:18:af:6c:
         78:fa:14:2f:88:10:d5:71:e2:1f:f8:12:ba:46:2a:af:17:4a:
         95:1c:60:63:92:e9:30:15:56:24:7d:b8:08:49:a1:b8:29:c7:
         60:85:5b:e0:87:6d:7c:2d:eb:89:50:01:52:30:7e:7d:15:cd:
         84:14:df:38:05:58:54:07:dd:cd:9a:d4:97:cb:14:28:96:00:
         97:d0:0d:38:09:c5:68:3f:41:83:d7:e7:98:fe:77:50:6a:fe:
         4b:09:80:74:de:a0:dd:02:70:95:18:15:73:3a:82:bf:2e:05:
         43:da:4b:88:85:cd:50:09:f4:81:05:66:72:9e:bf:d5:52:f2:
         3d:d0:be:e8:f3:49:94:98:dc:4e:d9:f1:ec:37:a8:9a:6e:ab:
         13:5f:e8:10:e8:f0:73:a1:8c:01:ec:b8:f1:01:37:71:33:d1:
         6d:d2:fd:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:00:05 2026 by rpki-client