Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f10f2c59-a99e-36fc-b530-00baef18ece2.roa
File:                     f10f2c59-a99e-36fc-b530-00baef18ece2.roa (raw, json)
Hash identifier:          6L/kuW2ChX3qWUdv6smClDXVtvVEeL179lpDnz/16b8=
Subject key identifier:   A1:B4:E4:3F:A4:86:AD:7F:3C:D4:91:0E:6B:8F:4B:F6:58:1E:FD:61
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584E059C6AC731CDBC4531726900
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f10f2c59-a99e-36fc-b530-00baef18ece2.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     12041
IP address blocks:        2001:500:4b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:6a:c7:31:cd:bc:45:31:72:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=2ad05df6-eabc-499e-a122-0720c335892f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0d:ec:76:c7:bc:5b:ff:76:50:9c:92:66:32:
                    fe:db:ee:8c:59:79:f3:a6:02:ae:6e:ee:35:f0:af:
                    a5:3e:e5:5e:20:f7:55:c2:c7:aa:ce:71:fe:90:28:
                    5e:6d:3a:d6:87:ed:dc:89:4a:bb:1a:81:ca:3f:35:
                    58:0d:be:e3:0e:3b:f2:69:61:cb:bb:92:e9:e5:32:
                    42:0f:89:e1:86:ad:ef:5e:2a:ac:c5:fa:b0:cf:0a:
                    05:c1:d0:7a:7f:09:d6:63:b0:18:94:d8:00:43:a0:
                    19:89:66:7f:31:a4:bb:fc:b9:61:d1:79:f6:bd:7b:
                    a6:b3:77:40:a9:c7:b4:40:65:b3:fd:44:21:08:9d:
                    24:ec:2a:37:4f:e9:00:08:70:49:83:1e:3b:d7:c3:
                    6b:31:11:8d:fa:f3:99:06:0c:ee:c9:cc:f6:84:aa:
                    ce:e3:f2:65:98:ef:15:86:b3:1a:11:b9:a0:5e:31:
                    11:de:b6:50:da:54:c9:81:7a:93:f1:2c:eb:35:e0:
                    77:33:87:67:d4:50:a6:74:ec:75:6d:c1:0b:36:55:
                    c7:a2:6d:b5:da:46:be:ea:67:11:fa:f7:70:94:a2:
                    3e:53:5a:07:94:07:a1:ac:53:93:a5:e1:4f:16:78:
                    62:38:c3:b8:06:37:39:71:fc:b8:3f:af:3e:1c:e7:
                    61:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B4:E4:3F:A4:86:AD:7F:3C:D4:91:0E:6B:8F:4B:F6:58:1E:FD:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f10f2c59-a99e-36fc-b530-00baef18ece2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:4b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:bd:0c:59:aa:26:fa:4e:96:80:65:4e:57:ca:bf:ed:d5:ee:
         4a:e6:f6:4a:20:f2:51:74:0f:c0:c5:a2:b0:a3:f3:41:53:2f:
         61:3f:49:58:ad:0f:f7:2a:ac:6a:2c:b3:17:57:5a:6f:af:a7:
         60:5b:f1:2c:1f:df:8d:99:4d:ca:d1:00:d5:45:1d:05:e5:f9:
         57:50:aa:00:6b:ff:f9:df:e1:91:02:29:51:e0:6d:d5:58:ff:
         be:81:f5:24:76:de:0a:dc:b2:0a:1f:ba:25:f4:38:13:e6:43:
         9d:d5:f3:e5:0e:ac:3b:c4:5e:c5:32:97:32:76:a2:be:3e:b4:
         87:13:18:ed:a7:73:fa:7f:32:59:fe:64:aa:d4:39:87:63:95:
         e6:64:b9:81:c7:c3:d1:fc:3b:14:34:ea:a5:3d:16:e0:b1:dc:
         d1:57:c6:df:64:05:26:05:38:d0:25:55:51:6e:4a:72:3c:43:
         1c:ca:1f:fd:7d:fe:a9:d7:20:5c:01:2f:46:3c:a0:05:df:ab:
         51:28:37:53:64:3f:6b:ed:6a:83:ca:45:99:18:6e:23:34:7f:
         4e:41:ad:69:6d:da:5a:75:01:4c:67:7a:0f:38:1a:f6:89:67:
         a9:81:c9:9c:f8:83:ee:a3:69:90:e7:47:32:41:0f:aa:05:24:
         1b:11:75:50
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4FnGrHMc28RTFyaQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
MmFkMDVkZjYtZWFiYy00OTllLWExMjItMDcyMGMzMzU4OTJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ3sdse8W/92UJySZjL+2+6MWXnzpgKubu41
8K+lPuVeIPdVwseqznH+kChebTrWh+3ciUq7GoHKPzVYDb7jDjvyaWHLu5Lp5TJC
D4nhhq3vXiqsxfqwzwoFwdB6fwnWY7AYlNgAQ6AZiWZ/MaS7/Llh0Xn2vXums3dA
qce0QGWz/UQhCJ0k7Co3T+kACHBJgx4718NrMRGN+vOZBgzuycz2hKrO4/JlmO8V
hrMaEbmgXjER3rZQ2lTJgXqT8SzrNeB3M4dn1FCmdOx1bcELNlXHom212ka+6mcR
+vdwlKI+U1oHlAehrFOTpeFPFnhiOMO4Bjc5cfy4P68+HOdh8wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKG05D+khq1/PNSRDmuPS/ZYHv1hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjEwZjJjNTktYTk5ZS0z
NmZjLWI1MzAtMDBiYWVmMThlY2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABL
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADe9DFmqJvpOloBlTlfKv+3V7krm9kog8lF0D8DForCj80FTL2E/
SVitD/cqrGossxdXWm+vp2Bb8Swf342ZTcrRANVFHQXl+VdQqgBr//nf4ZECKVHg
bdVY/76B9SR23grcsgofuiX0OBPmQ53V8+UOrDvEXsUylzJ2or4+tIcTGO2nc/p/
Mln+ZKrUOYdjleZkuYHHw9H8OxQ06qU9FuCx3NFXxt9kBSYFONAlVVFuSnI8QxzK
H/19/qnXIFwBL0Y8oAXfq1EoN1NkP2vtaoPKRZkYbiM0f05BrWlt2lp1AUxneg84
GvaJZ6mByZz4g+6jaZDnRzJBD6oFJBsRdVA=
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:07:05 2026 by rpki-client