Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/eab036da-666e-361e-85ce-bce589abb930.roa
File:                     eab036da-666e-361e-85ce-bce589abb930.roa (raw, json)
Hash identifier:          ugWQ6o03c7U8kikfpBxpLAsGMdbnATpma5PWzIAHBdw=
Subject key identifier:   9F:C7:C4:A9:15:92:F7:7C:EE:3E:27:BB:24:D6:B8:A1:8D:EE:10:99
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A8410BFDE21BF7A1AE1FA2140
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/eab036da-666e-361e-85ce-bce589abb930.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     12041
IP address blocks:        2001:500:1f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:bf:de:21:bf:7a:1a:e1:fa:21:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=2d835d80-0195-4247-9fb0-dd28139f4ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1b:7d:e0:94:65:15:c3:e1:8f:4b:61:c4:94:
                    2f:b5:15:a1:98:2a:84:a1:a0:a6:af:19:f6:56:63:
                    c7:5c:19:11:7b:dd:e0:81:a9:3d:97:8e:fb:90:e8:
                    71:85:de:d4:62:5b:ee:45:02:62:a2:09:f8:88:70:
                    2c:b0:2f:27:f5:0e:9c:85:e3:aa:3e:d8:9d:ef:83:
                    3b:2c:7d:0f:4d:ef:42:f5:34:05:3d:0f:ab:e6:b3:
                    91:7f:63:d1:f0:27:d8:b6:8e:18:17:4b:00:6f:83:
                    ea:de:c3:0b:64:15:ce:e1:df:58:ab:7b:70:70:48:
                    0e:ea:a8:4e:41:8b:33:39:7a:c3:d7:5b:2d:e2:fa:
                    14:64:e7:1c:98:8e:99:f1:a3:e5:27:6a:da:ba:62:
                    47:7d:df:1f:56:bc:93:35:de:7b:80:d0:a0:bb:32:
                    2c:af:41:04:3f:19:3d:33:5e:06:35:97:62:9c:10:
                    b7:45:5a:91:5d:d7:d5:d7:24:e9:4c:72:0a:8d:ba:
                    d3:0c:66:48:c7:cc:e7:9e:62:11:87:1d:1d:58:8e:
                    75:1e:07:90:2e:a3:22:e3:93:0d:36:32:a7:53:15:
                    7f:20:3e:ed:9e:26:37:90:1a:00:b4:ea:68:70:21:
                    84:2f:65:8b:0a:f8:44:f2:5b:b7:c5:8e:13:6f:fe:
                    ec:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C7:C4:A9:15:92:F7:7C:EE:3E:27:BB:24:D6:B8:A1:8D:EE:10:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/eab036da-666e-361e-85ce-bce589abb930.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:1f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:ff:f1:af:c0:f4:f8:51:54:1d:65:25:32:69:14:80:25:69:
         59:1b:ab:d6:02:96:f0:66:f6:07:58:6b:c1:f1:3a:1b:45:16:
         0c:0f:0a:14:59:bc:4d:c3:89:d9:cd:0b:c2:2f:48:95:5b:bf:
         27:cc:f4:5e:8b:c6:7c:e6:2e:d7:a0:aa:1e:5b:22:70:7f:44:
         2d:2c:2c:55:b1:e6:92:3f:a2:c4:17:78:e8:c8:f1:1a:59:19:
         d3:3c:ef:43:4a:67:dc:f6:9e:a8:fa:10:8f:57:be:c8:39:ee:
         8e:3c:44:c6:3a:bc:dd:cb:0d:ab:69:3d:2d:d7:0f:d9:cd:d9:
         6b:d2:95:43:6c:d8:40:1a:ad:51:5d:4b:8a:15:bd:da:12:00:
         64:86:8f:e7:67:f4:94:7e:b6:89:ce:c7:a3:c0:1b:7a:c9:5a:
         ef:ee:16:b5:8e:38:89:8a:5e:b7:d2:89:40:33:c5:00:b3:e9:
         d1:59:81:1b:f3:93:f2:3a:94:7c:cd:c5:47:75:1a:16:22:29:
         64:72:0e:1e:29:a1:9d:25:22:3d:b2:26:84:7a:fa:2e:11:fd:
         84:ae:9d:bd:7f:5c:32:b6:53:41:4e:c3:3f:da:c3:56:c8:61:
         e0:0f:9b:1f:8d:1f:e1:1b:f8:ee:e7:4d:a4:62:cf:b9:4e:70:
         f4:fd:a8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:29:25 2025 by rpki-client