Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d97e7a38-8b7d-3cb8-a06d-289074a13617.roa
File:                     d97e7a38-8b7d-3cb8-a06d-289074a13617.roa (raw, json)
Hash identifier:          jQKmj9z8KYne/UdmLPCluPuBj/t5/+44iiP3IzB066U=
Subject key identifier:   49:25:B7:6C:29:B5:73:FB:E0:5B:ED:8D:37:97:AB:AB:13:EF:1C:33
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584EA79D3F444E3B52A7ABB3F300
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d97e7a38-8b7d-3cb8-a06d-289074a13617.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     12041
IP address blocks:        2001:500:51::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:3f:44:4e:3b:52:a7:ab:b3:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=979ce370-10af-4cfa-a498-d85b952085c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:07:ff:37:a0:ea:ac:36:42:1b:16:b3:a0:41:
                    96:ce:75:93:21:16:58:b5:3e:1b:03:b8:2d:77:76:
                    5b:9b:6e:7d:2a:76:d6:c1:e0:12:c4:a0:dd:d6:fb:
                    43:1b:ae:31:4d:38:ce:2b:de:b3:c9:2c:38:2b:83:
                    09:bf:bf:6c:56:69:2b:a5:32:d5:98:da:98:40:55:
                    97:e8:74:b7:6f:7a:66:e6:44:77:38:48:db:0b:8e:
                    6e:36:16:1c:d0:9b:5c:41:ce:98:1b:22:b4:9b:f5:
                    2a:fb:86:c7:3f:de:80:90:44:91:23:07:22:10:76:
                    09:8f:15:2b:43:31:5c:3a:56:1f:1f:5a:28:01:64:
                    6e:f5:b7:44:77:de:cc:a6:bf:cb:a8:b4:7f:94:c8:
                    05:c7:39:ee:e2:fc:20:ef:9a:64:7d:38:f5:e1:03:
                    09:2d:7e:83:62:6f:14:2b:ee:61:5b:e1:3b:cc:c0:
                    a4:77:72:4b:bc:86:f6:7e:f2:17:bb:60:f8:1b:3f:
                    a8:fd:c9:db:e5:17:d2:c2:5a:a3:5f:bb:c8:38:d2:
                    f9:ae:4f:76:e7:1a:d2:3d:38:26:99:e2:aa:c2:ae:
                    10:f4:bf:f1:b0:57:ba:a4:29:2b:d5:85:27:00:f0:
                    09:a1:39:1d:5d:42:a2:04:47:46:d8:6a:d2:5d:34:
                    35:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:25:B7:6C:29:B5:73:FB:E0:5B:ED:8D:37:97:AB:AB:13:EF:1C:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d97e7a38-8b7d-3cb8-a06d-289074a13617.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:51::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:33:a2:fb:67:57:5c:84:22:82:2f:06:f3:06:3d:00:65:9b:
         ab:0c:87:3d:b9:12:1c:7c:3a:5f:7d:ec:52:dc:5e:4e:29:c7:
         1c:71:0b:55:fd:9b:1d:da:e3:13:7f:fd:2f:a9:37:34:2e:89:
         a2:b5:13:6b:68:0a:a9:3d:68:2f:06:fd:94:88:4d:0d:77:3f:
         df:97:e8:ee:6f:77:27:fa:d5:d0:55:bd:5f:cb:df:bf:49:35:
         01:05:fa:52:b3:22:c2:4a:eb:91:cf:e6:13:f7:c3:05:25:94:
         87:a9:05:eb:57:c9:dd:c6:27:8d:e7:51:2d:55:c1:08:ef:2e:
         6c:94:54:a0:d2:e8:2b:e4:86:0a:ac:f7:bc:9c:cd:32:e3:07:
         79:12:22:58:21:1c:ee:e4:22:20:64:c2:fe:b2:05:74:f7:98:
         5b:c7:84:28:a7:66:89:55:e3:26:90:b5:45:d6:2e:cb:f0:f0:
         46:84:b0:8a:f5:ea:cc:29:b3:79:31:bb:ac:e0:0a:12:b4:fb:
         23:f8:fd:f7:55:01:2a:86:41:22:3e:93:78:4c:91:4d:96:f3:
         af:52:78:f7:15:14:65:be:52:36:fe:fa:b1:69:49:9f:2d:f0:
         21:c4:5b:16:7b:61:70:4b:b4:bd:e1:f6:f2:c1:60:ab:26:dd:
         9f:55:fb:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:55:20 2026 by rpki-client