Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f0a64266-fafe-3553-8bb1-89bb9c1a73c7.roa
File:                     f0a64266-fafe-3553-8bb1-89bb9c1a73c7.roa (raw, json)
Hash identifier:          k/wGyL6pAob9Nau9hGJ28wIXKSSGARm66jGt/hqEMIk=
Subject key identifier:   30:5F:91:E0:7D:D8:2A:3D:27:FD:64:15:6C:48:9F:0F:9B:1D:EA:B4
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584ED0020EEEC6B5BAA982078620
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f0a64266-fafe-3553-8bb1-89bb9c1a73c7.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     13901
IP address blocks:        2001:500:a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Aug 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:02:0e:ee:c6:b5:ba:a9:82:07:86:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=bf92384c-393a-4efd-ad44-c4c20a37d194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c1:5c:91:d5:c9:c5:56:42:ba:ab:90:10:d2:
                    d1:5e:09:91:76:59:b7:bf:ff:9b:1d:1e:f8:42:bc:
                    a9:2e:3f:29:3c:80:fa:d1:b5:89:1f:54:bd:c8:8c:
                    6b:b6:68:a3:47:a2:3e:c5:68:0d:0e:8a:29:41:12:
                    97:13:5b:c1:80:e7:1a:55:96:7b:46:39:58:6f:b7:
                    16:47:7d:b3:00:33:2d:e5:b2:6b:2a:5b:bb:0e:54:
                    47:42:0d:2d:ad:22:25:1f:1a:e9:08:37:94:aa:89:
                    2e:84:b2:83:e7:2d:24:de:5d:a0:71:b2:46:6a:86:
                    e3:0c:50:de:5e:c5:a4:c5:65:31:46:82:70:56:49:
                    f2:df:78:f9:1b:96:82:e7:e4:fb:22:91:ea:25:83:
                    2e:e9:62:c8:aa:ec:b9:de:72:f8:49:7c:88:9c:87:
                    8e:0f:d0:74:6e:fb:94:fe:25:63:62:0c:3a:ea:23:
                    6f:a0:17:4b:32:94:eb:9c:57:4b:b9:a9:ac:d6:83:
                    0e:e1:52:c5:7d:63:98:a1:91:e5:c1:14:90:e0:89:
                    46:42:03:9c:51:15:1d:77:a6:6e:53:aa:71:01:fe:
                    52:1c:1c:af:8b:eb:58:00:3c:9c:e4:28:16:31:ec:
                    96:69:6a:bb:6c:5a:17:00:14:b5:1b:f1:dd:f8:b5:
                    ba:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:5F:91:E0:7D:D8:2A:3D:27:FD:64:15:6C:48:9F:0F:9B:1D:EA:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f0a64266-fafe-3553-8bb1-89bb9c1a73c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:e2:f4:b6:56:2e:97:f9:26:cf:50:f0:62:d7:e2:c9:47:e7:
         cf:3a:76:2e:0c:aa:e8:16:ac:4f:97:7a:03:e5:b2:7f:b9:ad:
         f0:53:44:29:08:27:72:ad:22:93:f2:f8:58:01:38:3b:8b:e5:
         38:aa:90:9a:fe:b2:e3:d3:af:62:9d:14:d2:a6:0d:34:00:30:
         5f:37:f6:52:48:7f:40:ae:79:38:cb:84:ba:cf:86:36:25:9b:
         56:aa:18:ac:92:aa:ae:6c:c7:e9:da:ca:6a:57:46:7b:43:f9:
         f9:19:ca:5a:2c:a3:cb:06:67:5a:3e:71:99:57:f1:39:59:81:
         93:fc:3a:73:27:39:a2:75:3d:99:b6:26:98:06:3c:ac:f4:a7:
         a1:0f:14:63:e3:b4:b9:c3:5b:2a:de:da:3b:0c:bc:65:e9:db:
         df:fc:ce:91:43:ee:1f:0a:d5:bc:11:24:3c:2c:be:b7:19:c9:
         16:26:b3:69:0b:00:e1:de:97:5d:34:29:0a:ce:32:62:47:13:
         e5:a8:4a:67:1a:5e:b2:86:f7:f5:fe:79:b9:52:6b:07:03:be:
         04:66:56:14:90:e1:ad:41:de:60:bb:2d:46:fd:0e:79:bd:bd:
         23:8c:c0:55:c4:fb:ec:dc:c4:6e:dc:e0:1e:4b:d7:61:6b:78:
         2c:57:b0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:16:29 2026 by rpki-client