Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f18c1bc1-26fd-3786-9db6-3e39337100af.roa
File:                     f18c1bc1-26fd-3786-9db6-3e39337100af.roa (raw, json)
Hash identifier:          wgVp/CsnRTLP+B5Su9nbBpWRBs8XKlhDJDEIcXES/tE=
Subject key identifier:   0D:15:83:1E:37:A1:9F:2D:80:7B:E3:41:6D:9E:4F:0A:05:C1:94:FA
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584E059C63B9FD6AA69E15E42A60
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f18c1bc1-26fd-3786-9db6-3e39337100af.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     12041
IP address blocks:        2001:500:19::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:63:b9:fd:6a:a6:9e:15:e4:2a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=649ef507-3667-4ef6-b6d7-dacdfa0e17e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b7:d7:f8:52:af:60:b2:67:ed:ef:64:1a:0a:
                    fb:3d:a2:00:13:4b:c9:af:3e:c2:ed:50:33:fd:f9:
                    47:da:72:09:1c:82:a3:30:9e:1e:54:54:ab:ee:74:
                    94:a6:5c:c1:2d:94:2c:a4:ba:c8:0a:2c:1b:86:32:
                    e6:d0:57:ad:f9:95:79:45:5a:63:05:f5:fc:ea:9e:
                    d4:9e:6d:71:d2:8a:12:65:f9:22:93:66:93:d3:b2:
                    5b:74:5e:a9:8e:72:64:c2:81:41:36:bb:4f:42:d4:
                    54:f7:b6:76:27:5e:31:3e:1e:9d:f5:61:a3:42:e5:
                    1b:d4:1f:d6:fc:05:0b:56:3d:4b:56:f3:50:cd:e1:
                    d6:1f:4a:68:b8:b8:a6:98:e0:9c:bf:3a:35:aa:33:
                    d1:03:fd:86:43:fa:9c:64:c0:4f:e7:1b:76:5c:63:
                    1a:64:c8:d7:43:9e:d0:14:c2:37:75:ef:eb:fd:bc:
                    9e:81:56:8e:3c:3b:b4:10:09:b6:fd:6a:71:58:d9:
                    bd:65:19:c7:69:de:13:54:52:c9:d1:2c:e3:e2:c3:
                    8c:44:22:e3:ab:11:1a:3b:17:59:b4:81:87:22:05:
                    95:89:b6:b6:1a:8b:22:87:9c:a3:e0:17:73:fd:a7:
                    39:1c:f2:18:a3:de:bc:07:ab:da:70:82:95:14:0b:
                    53:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:15:83:1E:37:A1:9F:2D:80:7B:E3:41:6D:9E:4F:0A:05:C1:94:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f18c1bc1-26fd-3786-9db6-3e39337100af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:19::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:ab:7e:a3:e3:0a:b3:57:31:09:24:e5:aa:04:50:e2:90:a3:
         8b:fe:8d:02:4e:a5:72:45:e7:1e:20:48:a7:e0:a6:a3:50:54:
         aa:60:84:67:48:12:43:b9:4b:05:73:da:1e:8e:6c:66:b6:75:
         5b:8b:35:9d:6c:db:6b:85:bc:b8:81:1a:47:b1:22:eb:10:4a:
         dd:ab:28:8a:fe:90:99:5e:4b:63:87:12:87:5f:14:7e:5a:19:
         28:1b:62:19:8c:ca:20:a2:88:04:2e:fd:e9:bd:a5:bf:1a:45:
         49:b5:38:81:b5:07:3a:17:61:74:89:78:f7:ce:5f:ec:43:8e:
         db:8a:17:aa:9d:fb:95:bb:fd:1f:cc:eb:52:73:b2:65:ee:55:
         d1:be:e2:05:b0:fb:79:5b:d9:83:30:61:01:85:75:51:bb:dd:
         47:e3:36:40:df:72:6b:a9:2b:70:6e:84:80:f1:3b:5b:ff:0e:
         8f:1b:a0:89:2c:f1:5e:fb:57:38:26:e7:75:0c:67:37:c5:6a:
         bc:7d:b0:da:59:d4:3c:68:7e:b7:ab:bd:97:b9:60:2d:e2:fa:
         82:39:f1:d7:5a:80:c2:9f:2c:53:44:2a:c9:98:ca:97:ec:c5:
         7c:55:f5:45:43:62:b2:b9:1f:61:ea:29:72:3b:8e:d7:8a:29:
         32:d9:0a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:22:24 2026 by rpki-client