Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d7b76d36-d31b-377f-98aa-7d8bea972932.roa
File:                     d7b76d36-d31b-377f-98aa-7d8bea972932.roa (raw, json)
Hash identifier:          I68/CxHHT/7UWzZ55sIRjYfMp5RfKenXn2ogLjAW9i8=
Subject key identifier:   C2:E3:A0:83:E5:1C:06:15:D7:B4:70:11:4C:E3:52:28:DC:55:8A:BC
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584E059B35711ADC2C8D7F63F380
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d7b76d36-d31b-377f-98aa-7d8bea972932.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     12041
IP address blocks:        2001:500:d8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:35:71:1a:dc:2c:8d:7f:63:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=b943fe60-08ad-4e00-8929-49f99e530b6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d7:5b:a0:20:14:44:cf:86:6d:e3:77:1c:03:
                    1d:41:82:bf:f9:4e:67:56:51:3c:11:27:6d:c2:98:
                    61:a2:32:64:33:8a:6d:a0:c9:62:1b:88:a7:15:ed:
                    39:f4:9e:10:e1:0d:9f:ac:b4:cd:b8:44:c6:7e:63:
                    66:53:f7:52:c5:3b:0c:51:83:af:80:41:3e:6a:b3:
                    40:6e:b8:19:4f:62:b5:6e:5c:24:90:41:35:ea:b1:
                    dc:a6:66:95:a7:b3:7b:4b:81:69:b1:d9:79:b6:cf:
                    99:f9:5f:3b:33:b8:62:5b:f3:49:62:e5:be:23:df:
                    1c:f0:40:51:14:c6:52:1b:d1:79:09:06:79:ee:b3:
                    6e:35:4c:20:7f:c5:17:64:46:54:c3:68:60:80:b7:
                    31:46:3d:af:54:b6:f9:b8:c1:f3:cd:bf:55:8d:d9:
                    37:34:e3:84:c6:56:67:76:49:69:a3:72:01:45:ee:
                    49:09:14:76:66:6b:49:05:ac:87:6b:5d:82:7b:aa:
                    6f:b0:88:2a:9f:ff:82:76:fc:2e:f3:6d:35:5a:c5:
                    40:35:f4:48:23:85:ae:8b:87:35:13:79:80:eb:39:
                    da:1f:3a:15:c1:0e:9e:91:4b:35:53:22:88:a7:0e:
                    b9:08:c0:4c:01:74:d6:c9:89:ca:54:65:0f:2a:fc:
                    b7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E3:A0:83:E5:1C:06:15:D7:B4:70:11:4C:E3:52:28:DC:55:8A:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d7b76d36-d31b-377f-98aa-7d8bea972932.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:d8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:5b:56:5e:7f:37:77:0b:18:21:e7:ae:65:36:e3:57:a7:56:
         7f:61:50:4a:3d:68:ac:e2:2e:de:56:bd:de:44:09:79:18:fc:
         ae:eb:93:51:cf:ce:05:dc:45:f0:9b:26:97:de:dc:aa:e6:d2:
         1d:70:f0:04:ee:3b:42:b2:64:7b:45:36:da:f7:ef:7d:df:55:
         a7:22:bf:6e:2b:51:23:6c:0f:ce:f3:12:02:ce:3c:0c:db:47:
         01:64:b9:e4:a8:1a:e6:1b:cc:db:a1:2c:41:91:e5:b9:d8:80:
         8c:2d:b4:a9:07:1a:9f:7f:de:55:c7:46:9f:8f:dc:55:6d:eb:
         dc:a1:86:f3:36:fc:1b:d2:0d:89:f0:68:93:a8:5f:e8:ba:e5:
         de:13:07:d9:88:04:1d:1c:5f:b8:c8:92:9e:3b:cd:00:c5:4f:
         e4:47:28:ec:d1:ec:f9:13:03:25:0a:d2:00:07:eb:19:21:5c:
         29:d9:db:03:b1:92:64:42:07:ac:57:5a:3c:60:19:39:70:17:
         b9:2c:27:26:e3:b4:d4:05:e6:f3:1d:f6:fe:4b:62:4d:e7:0a:
         b7:a2:36:75:19:6d:68:e5:52:17:c6:7c:b5:8f:c4:b2:c1:28:
         90:13:f7:b2:b8:6d:9c:f9:7f:62:e3:1f:ba:69:68:0d:4e:33:
         22:77:92:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:59:11 2026 by rpki-client