Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d80b6c84-2a5d-302a-94a7-c2abc010ffca.roa
File:                     d80b6c84-2a5d-302a-94a7-c2abc010ffca.roa (raw, json)
Hash identifier:          xqmlhx+gbP9tIWWy39SDCEiVbu+/rJKmlQjFWKSa1nE=
Subject key identifier:   F5:F7:A7:FB:3A:86:7C:70:7F:57:D3:DE:82:F7:DB:A2:26:89:98:29
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584F49735D30E8B0D42F37C51600
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d80b6c84-2a5d-302a-94a7-c2abc010ffca.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     12041
IP address blocks:        2001:500:c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:5d:30:e8:b0:d4:2f:37:c5:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f5ce86cc-69e2-4fa3-9f49-8dcb2f25b9ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:fc:d4:88:1e:59:76:3d:8b:82:d2:e2:ca:b8:
                    36:00:bb:56:2b:45:ce:9a:66:6d:c9:ca:b4:c1:ce:
                    5f:b3:3b:ea:77:f4:04:aa:1a:b1:8d:d9:b7:b5:53:
                    fc:08:27:66:85:d5:82:10:46:a9:48:ec:b4:97:73:
                    03:8a:18:8b:b4:3c:8e:ee:17:41:7a:b2:74:24:d6:
                    ed:f3:17:23:7b:9d:ae:a4:5c:82:70:30:13:d3:ef:
                    c6:ca:62:4c:22:30:ed:a7:7f:0c:85:58:76:f0:13:
                    d9:e2:52:84:a7:6e:08:86:aa:1f:ef:cc:45:24:9b:
                    80:b8:91:d3:2f:b5:13:99:f6:87:cb:af:7e:d0:64:
                    f1:13:7c:d1:db:4f:96:d0:ab:07:99:05:c5:4f:e2:
                    7c:d2:41:c5:2a:2d:b3:d1:c3:bf:4f:a9:f1:e6:23:
                    91:43:8e:bd:8c:6f:81:57:85:7f:c3:9f:c5:43:a8:
                    95:cc:e0:e8:f4:61:aa:0e:6b:96:fe:c6:ac:dd:32:
                    27:0d:ca:9b:b1:f7:8d:fc:71:bc:26:67:20:44:58:
                    28:ed:4c:67:80:bc:f1:bb:d4:65:9e:74:ba:1f:bf:
                    1d:9f:08:6b:42:da:ae:dc:8b:4e:fb:67:f9:9e:84:
                    de:de:7a:fa:78:27:78:5d:a2:40:c6:84:c9:c7:90:
                    33:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F7:A7:FB:3A:86:7C:70:7F:57:D3:DE:82:F7:DB:A2:26:89:98:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d80b6c84-2a5d-302a-94a7-c2abc010ffca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:c6:f6:c9:e2:06:c3:07:d8:08:1a:a2:5a:1f:30:87:80:ec:
         63:b6:e1:eb:97:51:1a:e4:61:dd:51:b0:db:35:8e:32:04:59:
         b4:d8:42:5e:2d:d0:27:00:3b:f1:60:63:83:5a:56:01:32:31:
         7f:56:33:70:30:2f:df:fc:26:7c:9f:dd:da:2a:1f:e5:cb:b4:
         c7:c5:14:b9:0b:b4:93:6d:d7:d3:27:fe:b0:16:e5:e7:5a:ca:
         a9:c8:de:6e:26:28:46:58:0f:38:be:4c:1e:c0:5d:f7:5e:8e:
         3e:1f:1b:10:23:59:f5:d8:f0:8a:5e:e0:e3:83:2d:9e:69:7a:
         61:65:9a:95:a9:9b:71:c1:48:44:ce:51:ba:84:96:9f:28:a9:
         eb:60:8f:60:2b:f5:d4:23:e7:cb:32:25:86:49:69:4a:80:ef:
         b8:04:e2:9f:f8:cf:5d:3f:cc:fc:ed:3d:e7:7f:8c:7e:1a:c2:
         b9:12:76:6b:9b:94:91:38:78:b3:c9:17:96:71:4f:f0:6a:37:
         8f:fe:d2:84:cf:0f:59:65:f0:42:d1:3d:7d:af:0d:a6:8b:bd:
         39:e9:03:ab:e4:99:83:83:6e:41:42:9e:6c:aa:d8:f8:a3:a4:
         4e:5f:f6:a4:a4:d8:52:5c:f8:87:0c:ee:e7:83:5b:99:95:d5:
         43:c2:60:0e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jc10w6LDULzfFFgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZjVjZTg2Y2MtNjllMi00ZmEzLTlmNDktOGRjYjJmMjViOWFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPzUiB5Zdj2LgtLiyrg2ALtWK0XOmmZtycq0
wc5fszvqd/QEqhqxjdm3tVP8CCdmhdWCEEapSOy0l3MDihiLtDyO7hdBerJ0JNbt
8xcje52upFyCcDAT0+/GymJMIjDtp38MhVh28BPZ4lKEp24Ihqof78xFJJuAuJHT
L7UTmfaHy69+0GTxE3zR20+W0KsHmQXFT+J80kHFKi2z0cO/T6nx5iORQ469jG+B
V4V/w5/FQ6iVzODo9GGqDmuW/sas3TInDcqbsfeN/HG8JmcgRFgo7UxngLzxu9Rl
nnS6H78dnwhrQtqu3ItO+2f5noTe3nr6eCd4XaJAxoTJx5AzJwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPX3p/s6hnxwf1fT3oL326ImiZgpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDgwYjZjODQtMmE1ZC0z
MDJhLTk0YTctYzJhYmMwMTBmZmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAM
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADDG9sniBsMH2AgaolofMIeA7GO24euXURrkYd1RsNs1jjIEWbTY
Ql4t0CcAO/FgY4NaVgEyMX9WM3AwL9/8Jnyf3doqH+XLtMfFFLkLtJNt19Mn/rAW
5edayqnI3m4mKEZYDzi+TB7AXfdejj4fGxAjWfXY8Ipe4OODLZ5pemFlmpWpm3HB
SETOUbqElp8oqetgj2Ar9dQj58syJYZJaUqA77gE4p/4z10/zPztPed/jH4awrkS
dmublJE4eLPJF5ZxT/BqN4/+0oTPD1ll8ELRPX2vDaaLvTnpA6vkmYODbkFCnmyq
2PijpE5f9qSk2FJc+IcM7ueDW5mV1UPCYA4=
-----END CERTIFICATE-----
Generated at Fri Sep 25 14:14:27 2026 by rpki-client