Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/eab036da-666e-361e-85ce-bce589abb930.roa
File:                     eab036da-666e-361e-85ce-bce589abb930.roa (raw, json)
Hash identifier:          DYgITI6oZyXx9zc8LYnThCN5rUNtlnhrOdzWgsZklzY=
Subject key identifier:   34:4A:29:9A:8B:20:9D:3C:84:7C:B3:40:BE:5D:49:8B:06:F8:9B:FD
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584E059C65F21FADF89E7CEB6AC0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/eab036da-666e-361e-85ce-bce589abb930.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     12041
IP address blocks:        2001:500:1f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:65:f2:1f:ad:f8:9e:7c:eb:6a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=d13d5381-a90b-4628-a641-56975960347d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:56:a8:2f:cb:40:ae:69:f0:a8:f7:f3:cd:5d:
                    d2:75:79:6a:21:d3:61:eb:e0:d5:28:f7:bd:4d:a0:
                    c2:32:84:ef:35:ef:50:77:39:c1:46:77:bd:ea:a7:
                    42:10:ee:b9:c7:3c:53:95:e4:38:f1:50:2b:5d:f6:
                    87:ac:3f:0b:a5:e8:f6:c8:10:74:ba:e6:a7:4b:b8:
                    89:2b:3b:4b:c7:0e:6c:4c:93:90:b1:88:de:c0:a6:
                    51:a3:ab:cb:23:a2:05:00:2a:eb:d7:61:70:5e:34:
                    91:fe:dd:d0:0d:30:87:c7:59:94:8e:1e:97:1f:58:
                    83:81:81:81:2b:28:48:c1:90:07:ff:de:28:ba:4d:
                    3b:dd:5f:37:00:73:07:0d:ae:5b:3c:02:20:24:a6:
                    33:6a:b8:14:1b:ab:e2:bd:b2:ce:1d:e1:75:61:41:
                    86:43:e0:ca:ab:05:3d:3b:79:cd:2b:44:33:35:02:
                    98:c1:80:5b:fc:d3:47:48:d6:59:d7:40:6c:d3:05:
                    e8:f6:11:dc:2a:eb:80:e5:2a:88:6f:35:2a:7f:54:
                    1a:b4:bf:30:e5:46:1d:3c:67:cc:05:23:88:95:0d:
                    31:ce:78:80:71:81:b2:f1:9d:d9:44:8b:92:d4:f9:
                    80:18:7c:d1:c4:39:92:79:cf:f5:c3:71:36:b3:4c:
                    76:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:4A:29:9A:8B:20:9D:3C:84:7C:B3:40:BE:5D:49:8B:06:F8:9B:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/eab036da-666e-361e-85ce-bce589abb930.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:1f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:94:4a:35:e4:d7:2f:ed:71:fc:bd:cb:5a:04:61:f5:2f:42:
         60:d8:af:14:ac:29:5d:e4:69:25:fd:72:d1:d1:1b:2e:45:1a:
         1b:b4:36:55:02:4d:85:ea:fc:54:ae:1d:c5:ac:67:a6:7f:3e:
         01:15:6a:5c:4e:2c:e2:55:18:d8:04:4d:59:46:e7:e1:3c:bb:
         1d:47:7b:ed:78:9b:96:8e:a5:f0:ba:ff:85:21:1e:58:a2:f1:
         86:88:75:82:cd:59:d2:22:70:0d:97:f8:e4:6f:ba:bb:47:40:
         80:93:87:79:ab:e7:a6:e7:fd:c2:23:95:f7:ea:8a:8b:84:56:
         13:c5:cf:c8:ec:b5:51:eb:56:44:f2:79:c6:59:cf:ef:50:b8:
         d7:bb:e5:48:42:dc:05:91:cc:cc:1a:ae:41:4b:80:21:9d:57:
         b5:ca:8e:ec:11:04:20:1a:20:57:92:b8:81:dd:a1:84:54:52:
         ab:e8:e0:5b:01:db:6a:87:38:8e:a1:41:9e:3a:7f:e3:2a:f4:
         49:df:71:fc:2e:06:2c:03:c8:26:7e:1f:f3:8f:19:b3:1e:34:
         bb:99:ee:0a:23:df:f4:69:66:cd:ab:40:4a:49:cd:dd:38:16:
         49:48:ec:a5:a8:13:d5:13:72:03:7f:10:5a:cd:8a:e2:86:4b:
         03:97:47:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:33:19 2026 by rpki-client