Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/eab036da-666e-361e-85ce-bce589abb930.roa
File:                     eab036da-666e-361e-85ce-bce589abb930.roa (raw, json)
Hash identifier:          s44PxF2IDaCjsprSqLMTb+hlPc6h2MtBD+96i1jwjUM=
Subject key identifier:   84:C6:02:FA:F2:73:9A:2D:5A:54:F0:5A:1E:18:1B:E6:E2:E8:F6:94
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584EA7A0BAA2220143D9B17BF9C0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/eab036da-666e-361e-85ce-bce589abb930.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     12041
IP address blocks:        2001:500:1f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:ba:a2:22:01:43:d9:b1:7b:f9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f7024275-57d8-4b08-b5ca-fb9da16dc018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:24:95:ac:d0:07:a5:33:89:a5:7f:eb:74:0a:
                    44:04:bd:f0:3b:c3:99:cd:a0:d4:6d:e3:37:d4:cf:
                    7e:be:a8:39:e1:89:5b:21:47:bd:98:a2:a2:90:57:
                    fc:62:57:4b:8f:05:83:96:64:cd:59:43:d2:a0:99:
                    53:17:65:f2:20:09:df:e6:b0:9a:62:36:2e:dd:8a:
                    de:8c:6b:92:1b:e4:c0:f4:d7:f3:3a:7c:0a:ac:56:
                    b2:dd:7c:32:c3:9c:8f:2a:81:33:e7:ff:c0:2e:fb:
                    0d:a8:20:6b:0e:f2:3f:c9:c5:9b:f9:ba:b8:6c:a1:
                    ab:d9:2b:ff:9a:82:1a:30:7b:8b:ac:40:50:cb:08:
                    e3:ab:8f:26:15:57:9c:f0:c5:7f:4f:58:ce:8d:db:
                    a7:3d:5e:13:d6:7d:2b:fd:24:1d:6a:12:79:e1:06:
                    2a:b1:dd:50:81:e1:d2:f4:8e:e7:73:e9:cf:62:4b:
                    cd:9f:cd:af:c1:a2:a8:07:a5:f0:58:f4:40:aa:00:
                    fb:01:8c:3a:d7:3e:d7:29:67:a5:7d:b7:a9:15:34:
                    82:de:bc:2c:f0:85:04:71:74:75:2b:05:40:74:a5:
                    66:a7:54:9c:b1:9c:87:1c:92:0d:1c:30:db:cf:87:
                    96:b0:e3:a8:27:f2:37:c2:aa:2a:19:89:d3:3d:cb:
                    13:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C6:02:FA:F2:73:9A:2D:5A:54:F0:5A:1E:18:1B:E6:E2:E8:F6:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/eab036da-666e-361e-85ce-bce589abb930.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:1f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:8a:a0:d5:70:6b:0b:58:ea:ac:4c:64:75:f8:51:5a:93:19:
         2b:4e:a6:63:f5:60:a6:f6:3a:d6:a1:8d:98:d0:be:8d:89:73:
         3f:b8:ff:39:6b:f6:d4:3e:25:5c:dc:70:2b:a8:88:9e:4d:90:
         d7:d8:82:4d:75:c1:6a:55:1b:82:eb:72:58:b1:be:b5:b5:4d:
         db:42:e4:a4:f4:b2:34:ee:71:d6:9f:0a:b2:04:22:30:17:da:
         a9:1d:a9:3c:f9:0a:eb:08:64:96:e8:b3:33:d5:92:c7:28:a1:
         74:51:54:13:55:7a:c6:bf:b5:f1:9a:ea:98:e9:25:d5:a1:5a:
         3a:fb:d3:fa:db:3d:bc:9b:b4:a9:76:72:63:87:43:a5:f0:d9:
         94:09:11:28:f3:81:5b:e7:a9:57:95:9a:6b:1c:03:04:53:e2:
         d1:56:92:c1:cc:88:4a:48:d3:d2:4e:9b:2d:1f:c6:8a:ca:41:
         f3:d2:93:9f:d4:f2:97:04:09:78:7e:75:2c:1e:c2:e3:5b:07:
         2e:8f:a8:4f:4d:d5:14:0b:4a:76:ea:2e:fa:b4:d4:73:26:67:
         02:83:bc:b7:19:e6:fa:41:51:a9:ef:46:2d:f3:60:ee:be:32:
         17:48:3b:3e:c8:5d:a7:48:90:c5:b8:3e:d9:4d:d5:99:fb:b1:
         c0:76:e1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:54:53 2026 by rpki-client