Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e54b960f-f08b-362f-b430-187955fdce20.roa
File:                     e54b960f-f08b-362f-b430-187955fdce20.roa (raw, json)
Hash identifier:          Rb6ieqGQ9wJZmieLY7gLrVsrhTt4fI3XfsKWBc8DipU=
Subject key identifier:   B6:AB:2B:E3:DD:8F:13:C1:B4:3E:F4:F7:EC:BD:78:B7:0E:E2:07:0C
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584EA7A0D328C66E9EB04ED54C00
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e54b960f-f08b-362f-b430-187955fdce20.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     12041
IP address blocks:        2001:500:c9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:d3:28:c6:6e:9e:b0:4e:d5:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d63c0987-f83e-42f9-94e2-ba69a008a389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0d:4e:41:0a:e7:d6:0a:66:ba:e1:28:f7:aa:
                    e1:7f:82:8a:05:e5:b1:fd:49:ec:9f:34:2b:31:7c:
                    ed:b4:fa:7c:5a:dd:d5:68:06:46:db:12:b3:99:eb:
                    74:ce:df:15:7a:2a:0e:ce:3e:c0:be:05:a0:19:7f:
                    3b:be:bb:8d:6b:9b:2d:c0:ff:0e:90:0d:5b:9d:e4:
                    d1:24:4e:92:a9:6e:74:d5:2c:c3:96:9f:a8:bb:cf:
                    0e:d0:e4:b0:2d:92:22:cf:4b:f8:72:8e:16:13:cd:
                    61:ed:98:6c:7b:2b:95:00:e4:ac:31:88:26:5d:7b:
                    f6:9f:86:a8:18:96:00:fa:d4:6e:e0:fe:96:59:1f:
                    cf:99:50:a3:80:62:12:31:80:ed:1c:99:4f:03:0f:
                    9d:fc:fb:fb:2a:c8:5a:01:76:69:7a:0b:c0:27:43:
                    a2:31:92:61:f5:74:1b:83:47:a0:b7:a4:64:60:55:
                    d0:99:89:40:62:4e:0a:18:24:32:a1:b3:2d:4e:50:
                    89:61:cf:16:0f:da:ef:ba:87:03:fa:51:09:a9:d1:
                    bb:c7:74:09:05:10:2f:c0:87:c5:8b:94:5e:af:16:
                    dc:84:55:45:5a:96:c4:01:30:6d:fa:e1:a5:c2:fd:
                    fd:f5:d2:85:b5:00:93:f0:b1:5c:ef:a0:ef:fd:d8:
                    f0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:AB:2B:E3:DD:8F:13:C1:B4:3E:F4:F7:EC:BD:78:B7:0E:E2:07:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e54b960f-f08b-362f-b430-187955fdce20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:c9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:bd:b7:86:90:14:bb:0b:60:c1:3a:04:82:b1:ca:da:09:b8:
         e8:1d:b3:2c:0a:78:78:61:68:23:c3:59:71:04:33:a6:75:95:
         ca:6c:e7:b8:aa:d8:90:00:fb:03:97:32:8f:00:4b:26:6f:10:
         6e:b5:4d:d2:04:e0:b4:4a:50:dd:fc:99:b5:ef:f0:f8:a6:e4:
         4c:af:56:e2:87:99:b1:3d:85:b4:f4:26:72:ca:52:c4:52:f6:
         5e:3d:bd:e9:2a:88:08:2b:a1:37:97:df:84:3e:65:f0:f4:cb:
         65:d9:2c:f8:0b:e5:82:04:11:9c:41:73:68:d8:9d:76:ba:81:
         0b:c8:4e:0b:66:92:9f:06:5d:99:ed:3c:ea:0c:13:28:e3:e1:
         c7:33:1c:4e:56:d4:b5:f6:78:90:01:32:33:08:49:76:0a:52:
         31:69:47:fd:ed:6d:83:9f:04:be:6b:56:eb:a4:13:c2:b3:78:
         a9:d0:4f:8a:87:2d:32:9e:9c:83:67:1a:d3:7e:97:fe:de:d1:
         f4:7e:c3:bc:fd:92:af:bf:16:ea:82:0a:56:a4:84:1c:98:bb:
         64:e0:15:11:ce:11:ed:67:95:06:6e:9a:8a:95:e1:46:7c:58:
         eb:be:45:57:06:4a:6c:ca:28:07:18:9d:3b:6f:5b:b5:59:7b:
         a9:c5:bd:7e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6noNMoxm6esE7VTAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZDYzYzA5ODctZjgzZS00MmY5LTk0ZTItYmE2OWEwMDhhMzg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ1OQQrn1gpmuuEo96rhf4KKBeWx/UnsnzQr
MXzttPp8Wt3VaAZG2xKzmet0zt8VeioOzj7AvgWgGX87vruNa5stwP8OkA1bneTR
JE6SqW501SzDlp+ou88O0OSwLZIiz0v4co4WE81h7ZhseyuVAOSsMYgmXXv2n4ao
GJYA+tRu4P6WWR/PmVCjgGISMYDtHJlPAw+d/Pv7KshaAXZpegvAJ0OiMZJh9XQb
g0egt6RkYFXQmYlAYk4KGCQyobMtTlCJYc8WD9rvuocD+lEJqdG7x3QJBRAvwIfF
i5RerxbchFVFWpbEATBt+uGlwv399dKFtQCT8LFc76Dv/djw1QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLarK+PdjxPBtD709+y9eLcO4gcMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTU0Yjk2MGYtZjA4Yi0z
NjJmLWI0MzAtMTg3OTU1ZmRjZTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADJ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAMO9t4aQFLsLYME6BIKxytoJuOgdsywKeHhhaCPDWXEEM6Z1lcps
57iq2JAA+wOXMo8ASyZvEG61TdIE4LRKUN38mbXv8Pim5EyvVuKHmbE9hbT0JnLK
UsRS9l49vekqiAgroTeX34Q+ZfD0y2XZLPgL5YIEEZxBc2jYnXa6gQvITgtmkp8G
XZntPOoMEyjj4cczHE5W1LX2eJABMjMISXYKUjFpR/3tbYOfBL5rVuukE8KzeKnQ
T4qHLTKenINnGtN+l/7e0fR+w7z9kq+/FuqCClakhByYu2TgFRHOEe1nlQZumoqV
4UZ8WOu+RVcGSmzKKAcYnTtvW7VZe6nFvX4=
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:58:11 2026 by rpki-client