Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f7782cf5-d37a-3298-b0d3-2e4b037f5bc4.roa
File:                     f7782cf5-d37a-3298-b0d3-2e4b037f5bc4.roa (raw, json)
Hash identifier:          xkD9DiELyZmy2SKps8B4nM6B0wqWvzkT6/WJ4nFl0M8=
Subject key identifier:   49:70:55:95:1F:F2:6D:E8:BD:1D:D6:1E:71:F4:82:AD:A1:09:CB:BA
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584E059C689FE9AD58ECAD563880
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f7782cf5-d37a-3298-b0d3-2e4b037f5bc4.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     12041
IP address blocks:        2001:500:a5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:68:9f:e9:ad:58:ec:ad:56:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=fa247fb2-2c82-421d-96e1-c4685bbc8d1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fb:96:78:40:a1:8b:d8:6b:6b:5f:ff:d7:c4:
                    09:94:ed:5a:f7:b1:37:10:ab:b3:65:50:b0:10:e7:
                    f6:fb:74:d0:ad:1b:a3:f0:bc:20:9b:5a:4f:ac:ad:
                    41:a6:62:b5:e1:8c:1f:23:c0:fa:fb:0d:0b:fb:ba:
                    56:3e:76:c7:e9:1a:dd:fa:dc:7b:85:56:4c:a2:bb:
                    8a:05:4e:2e:dd:ec:30:f2:ca:58:e0:f2:e0:b4:07:
                    a9:b5:6e:a9:6f:85:8c:7a:3e:41:13:6a:78:5f:cc:
                    7b:69:f2:e9:5c:ef:0e:7a:f3:0d:2d:8c:96:78:9b:
                    3e:9d:de:0f:52:b8:b2:32:6c:60:31:b3:8d:c9:31:
                    89:ce:43:e5:c1:f0:7c:c4:d9:3c:b8:62:e0:de:f2:
                    b0:a0:f3:14:c7:33:0f:ec:9c:26:88:81:ea:37:b5:
                    aa:04:db:ab:c3:b5:b0:62:e5:f8:40:35:58:6c:66:
                    12:37:7e:5f:2d:2f:64:6d:4a:a7:33:b3:96:b0:56:
                    a2:69:69:52:db:e8:ad:ab:7a:69:f0:f3:a7:a6:c8:
                    6d:9e:9a:5e:bc:c4:31:3d:e6:ab:de:26:ba:ad:fc:
                    ac:3b:ed:16:91:57:34:73:01:ed:70:d2:cd:60:3e:
                    93:fa:4c:ba:6c:da:b9:68:24:b1:76:bd:c4:e6:9e:
                    c8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:70:55:95:1F:F2:6D:E8:BD:1D:D6:1E:71:F4:82:AD:A1:09:CB:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f7782cf5-d37a-3298-b0d3-2e4b037f5bc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:a5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:cd:21:6c:e4:e1:0e:b0:dd:53:b0:87:ca:aa:07:d8:27:a9:
         72:0a:ec:da:3d:67:ff:2b:02:5e:f5:33:a4:16:03:d5:79:33:
         cd:eb:52:57:bb:c2:18:09:7e:eb:2c:92:62:51:4a:67:40:9c:
         6a:24:4f:e4:5a:9b:4e:94:25:8b:bf:a9:32:4b:42:e2:3c:03:
         da:bb:2e:47:eb:01:e4:ac:e7:16:3a:9b:e1:3a:86:ba:80:4e:
         fd:0d:9c:e5:78:b1:35:e4:62:bd:fa:7d:1d:4a:3a:d3:8f:48:
         8b:72:3b:07:2f:80:08:84:cb:4d:14:4b:c5:fe:f9:52:86:9d:
         e0:52:ba:32:9b:3d:29:74:6f:c6:23:0e:44:c9:97:25:16:5e:
         5a:2f:be:3d:64:32:cb:2c:31:02:06:8f:52:c7:42:67:de:41:
         ae:c4:9f:02:df:39:1f:13:01:a5:83:23:bc:8c:b6:cb:cb:82:
         f3:9f:57:51:3e:0a:f2:b4:e5:f6:35:1e:99:59:bd:e7:26:ad:
         b7:55:db:6a:f0:6c:1a:2e:0a:dd:37:6b:7f:2c:2f:90:d9:79:
         12:fc:f6:79:62:64:93:a7:f2:c7:5d:e8:e5:88:0e:20:70:d7:
         1f:8c:2c:ed:94:ec:ce:14:8b:eb:95:6f:8c:e3:57:b5:70:fc:
         5c:ee:56:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:21:05 2026 by rpki-client