Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7bab1756-00e2-3740-b396-a45136227786.roa
File:                     7bab1756-00e2-3740-b396-a45136227786.roa (raw, json)
Hash identifier:          R7E1n8wdNuTMT4iHUvx6Ha182Qci2x9VzBspbyvsuIs=
Subject key identifier:   D5:51:6E:45:3A:27:A0:FD:EB:65:80:A7:1A:08:FB:C4:41:11:2C:9F
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B64CCB04A40CD20253F791400
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7bab1756-00e2-3740-b396-a45136227786.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     12041
IP address blocks:        2001:500:d4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:b0:4a:40:cd:20:25:3f:79:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=91793851-d27e-4470-b6bc-3749fa5eeb31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9f:c0:2c:cd:29:05:7b:2f:2d:d1:4a:4e:10:
                    20:51:34:86:e4:13:38:07:39:ef:dc:31:74:e4:92:
                    dc:0e:cf:17:13:47:fd:47:e5:d4:6a:48:b3:52:8c:
                    f9:be:ee:e8:ba:1b:0c:0d:8a:f1:07:2a:55:1e:37:
                    23:12:f7:ed:ee:a4:50:a1:fa:a9:4c:8a:35:61:4a:
                    4d:8d:81:19:80:da:b7:d8:ce:4b:39:2e:3b:77:33:
                    ca:f1:d1:f4:d3:22:59:bb:56:e8:95:8e:4d:ba:a1:
                    cb:60:e5:c5:e2:36:53:94:57:4f:b5:90:2d:37:2a:
                    f7:dd:97:e5:84:3f:86:7f:69:33:8f:90:d6:bf:6a:
                    34:0d:be:1d:a8:fc:d0:03:76:f3:b0:fc:0c:3c:b3:
                    2a:7b:80:35:b2:70:23:c5:b8:e0:1d:a2:17:0b:fe:
                    78:9c:78:95:f5:da:67:53:b9:e5:bf:46:c7:bf:ed:
                    ae:b7:ae:9d:87:bc:37:4a:e2:4e:74:38:b0:8b:72:
                    96:26:08:db:e7:e1:8d:b5:3f:71:4d:b0:e0:75:42:
                    e4:3e:b0:0b:46:14:4b:c1:46:d8:df:32:74:65:94:
                    36:bc:6c:09:be:c8:6e:22:cd:30:85:16:9a:ef:3c:
                    8c:f4:4b:47:63:03:9d:71:be:88:26:71:3d:ba:be:
                    2b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:51:6E:45:3A:27:A0:FD:EB:65:80:A7:1A:08:FB:C4:41:11:2C:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7bab1756-00e2-3740-b396-a45136227786.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:d4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:31:d9:87:82:25:32:17:1d:6f:6f:b3:9e:81:20:57:b9:03:
         e9:b5:59:3c:64:1c:92:5f:38:72:27:a5:2d:0c:27:c6:ab:5a:
         b3:12:73:8b:47:d0:76:8e:54:f8:ac:ff:8b:f7:a5:2e:00:8a:
         f1:6b:4b:d0:74:f1:c4:c7:f0:91:13:4a:2c:3b:9a:53:2b:de:
         ee:f1:cc:62:8b:44:e3:46:e5:e3:77:b9:42:85:4e:f3:4c:aa:
         60:a9:b2:2a:cd:f7:cb:2c:32:93:81:6b:a2:83:cb:38:42:62:
         2b:ed:85:85:91:51:86:ca:b3:2b:ee:c0:eb:16:09:42:18:06:
         7f:5f:95:52:e7:a3:97:c8:05:38:ad:05:0b:c8:b4:92:51:77:
         f4:e3:ab:05:9b:08:c5:92:ab:24:7b:d8:e5:73:f8:f0:ef:eb:
         58:d5:d0:2d:2e:42:a3:09:2c:fd:c0:a7:d3:f7:c1:be:72:8f:
         3a:53:0f:22:34:5a:38:95:ad:94:ba:95:c0:39:9f:7d:89:37:
         c0:15:5f:48:64:8f:17:83:5a:7b:3a:6f:63:44:20:cc:36:2a:
         2e:11:b9:d0:1a:62:5b:e8:4e:d4:64:bc:c4:e3:0e:17:82:29:
         37:2a:b9:fe:36:7b:10:5f:ce:ba:cd:a1:f0:a4:93:0b:d9:ba:
         42:a2:59:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:03:37 2025 by rpki-client