Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cec5457a-a173-3447-ab77-a0e0d56c9157.roa
File:                     cec5457a-a173-3447-ab77-a0e0d56c9157.roa (raw, json)
Hash identifier:          w3DhvwokSYFDGf5wsAjs/+ILu5CiBOjhGhPjzmXpqKU=
Subject key identifier:   35:80:0E:B8:28:E6:ED:5B:DE:78:DB:29:A7:6F:4E:0B:0C:C7:C9:70
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584E059C61DD845853F3A6AE7100
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cec5457a-a173-3447-ab77-a0e0d56c9157.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     12041
IP address blocks:        2001:500:e7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:61:dd:84:58:53:f3:a6:ae:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=82f08839-0619-4ad5-9f28-8f3840588c96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9d:2f:a8:18:c8:0c:c0:36:bc:54:4a:cd:bb:
                    b1:20:16:65:2c:fc:d7:33:81:ff:86:b1:6d:86:64:
                    e0:11:56:a6:3b:a4:39:ad:65:ce:5a:05:17:c7:b7:
                    93:50:76:a2:e7:e4:d9:6b:01:8e:4e:78:29:bb:27:
                    58:6c:b7:ca:6a:1a:aa:b2:cd:1f:c2:7c:18:fa:38:
                    3c:37:b4:e7:b2:a4:c1:65:cd:75:4a:74:5a:69:03:
                    e1:2e:27:30:4b:21:79:8a:73:aa:c4:7c:53:ac:8d:
                    96:25:18:62:4f:ba:4a:38:e4:31:21:94:24:70:fb:
                    40:b6:1a:19:1b:4d:c0:c8:11:c4:a3:ad:3e:05:5a:
                    c0:5e:c4:cd:3d:38:b6:7a:32:a0:50:61:00:96:5f:
                    78:a9:db:96:af:94:3b:36:62:05:e4:e4:18:88:f8:
                    84:5b:93:32:7a:bf:42:9a:98:d9:f5:20:47:91:ad:
                    c1:8e:51:53:06:03:d8:21:d7:da:24:e7:36:b2:79:
                    ed:03:43:c9:5a:25:b9:4d:33:d9:7d:93:c8:b0:15:
                    ed:d5:3f:ce:dc:82:bd:57:d0:b5:65:8a:c6:fe:85:
                    5c:30:91:98:92:e5:0f:d9:5e:84:ff:28:c1:ad:c7:
                    73:c2:45:1f:69:cd:c6:0f:13:4c:60:28:5e:81:69:
                    09:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:80:0E:B8:28:E6:ED:5B:DE:78:DB:29:A7:6F:4E:0B:0C:C7:C9:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cec5457a-a173-3447-ab77-a0e0d56c9157.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:e7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:d3:e1:1c:4e:9e:e4:8f:24:0d:0a:39:9c:23:d0:59:ff:c3:
         24:1a:30:00:fe:03:cc:82:9f:b6:c5:c3:f6:73:fa:6f:c1:0d:
         15:a6:d8:31:63:b9:8c:4b:9f:ec:2b:96:44:a3:88:16:d7:84:
         65:79:95:43:dd:6c:ee:22:c4:12:b0:b5:0f:8d:57:ff:f3:71:
         ef:32:38:64:af:78:d5:fa:e8:86:7a:6c:1e:88:9a:3b:b8:d4:
         2a:14:a2:af:ea:a9:40:bd:50:40:c5:3f:a7:eb:e3:6a:66:5a:
         cd:6b:f7:e2:31:cb:7e:51:25:32:28:7b:7b:7f:79:9f:1f:9c:
         20:8c:66:27:e2:88:ed:d8:55:c0:1a:e6:10:cd:eb:65:dc:29:
         40:a9:1e:53:92:cf:da:64:d7:cb:f3:68:3b:5e:7b:c9:86:d2:
         9e:04:18:f5:b7:09:66:91:cb:65:ed:fa:12:f5:42:58:02:49:
         fa:74:c1:28:41:62:0b:ba:c2:26:b9:5d:97:ce:b0:c0:68:a6:
         a0:9c:a7:a9:0c:17:6e:0e:47:05:c1:a5:3e:5b:44:67:7c:0f:
         03:b5:e1:08:7d:54:02:c9:dd:43:85:67:00:3f:52:a1:0a:88:
         02:55:2c:07:10:1f:38:98:a7:af:8b:f6:ac:7f:f0:a9:68:b6:
         1f:56:36:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:26:05 2026 by rpki-client