Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1c886de0-6a95-394f-b0ec-798264a9c720.roa
File:                     1c886de0-6a95-394f-b0ec-798264a9c720.roa (raw, json)
Hash identifier:          l6RzxmNRoTDGTSJy30mg79Ze6QsQngzWzM6QL1tVK0Y=
Subject key identifier:   19:BD:AB:C0:98:E7:CC:A0:FB:78:68:5F:E2:70:5C:7D:C9:52:5C:36
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584D24E1377D65A5F67AF3ADE918
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1c886de0-6a95-394f-b0ec-798264a9c720.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     12041
IP address blocks:        2001:500:c8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:37:7d:65:a5:f6:7a:f3:ad:e9:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=f5eb1ef7-41ed-4fb1-bdf7-edbe57eeb23b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6f:3b:5a:58:80:34:2b:25:8b:8e:be:5a:3e:
                    a8:fb:3d:77:e6:1d:37:eb:bf:71:73:b7:c0:fc:12:
                    9c:89:06:52:7c:7f:bc:b8:2a:9f:3b:f3:70:2f:b7:
                    6b:79:3d:3e:d2:f3:4a:49:31:ed:68:2e:ce:6f:86:
                    49:41:f3:33:42:00:9c:ac:9c:99:fb:2a:04:63:67:
                    2b:6c:ae:67:dd:df:a5:7d:44:c8:9f:6e:f3:8d:97:
                    86:51:9e:7c:9b:63:b9:3f:24:b2:af:93:4d:98:06:
                    b4:3b:9e:d5:f1:94:72:04:f5:fe:6b:65:f9:3f:c2:
                    e3:52:3f:c2:21:d2:38:85:3b:14:3e:0e:a6:95:88:
                    0d:bb:d5:5a:85:3c:0f:1e:c1:49:97:7b:9b:9e:9c:
                    d6:2c:61:b4:6a:d6:a3:80:6c:19:83:af:66:e5:ee:
                    3a:2a:04:26:be:06:86:43:58:83:3e:bf:1a:9c:99:
                    c4:95:d2:0c:69:74:e4:ef:bb:44:5b:e0:64:bd:6d:
                    65:e9:41:b9:f0:b8:64:05:34:0d:3a:d9:e0:aa:aa:
                    cf:59:55:b1:61:39:03:cf:d8:52:4d:04:9f:01:d8:
                    20:fe:22:a5:5d:e3:22:b4:21:02:b5:9d:b6:7f:ee:
                    86:3a:4d:6d:65:db:8a:ad:8c:53:b5:2e:4a:f0:ff:
                    d8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:BD:AB:C0:98:E7:CC:A0:FB:78:68:5F:E2:70:5C:7D:C9:52:5C:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1c886de0-6a95-394f-b0ec-798264a9c720.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:c8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:fb:03:e8:59:98:61:a6:67:e7:5b:f7:34:2e:66:fb:87:69:
         76:56:00:4d:67:93:d3:46:31:4d:c1:b2:28:ea:0e:84:8a:fa:
         18:b4:c1:6f:77:13:54:8a:e5:cd:b9:ad:32:1c:39:4e:e8:84:
         09:e7:c6:53:61:a5:04:39:e6:64:34:1b:22:cd:cc:46:bc:e8:
         dc:bf:43:e2:5f:75:ac:27:89:f4:6e:4c:b4:5b:f3:60:e2:df:
         1b:e5:e4:39:f4:ff:e4:46:0f:c2:e8:ea:ad:c3:6d:45:0c:a8:
         b2:5f:c0:38:70:81:0f:db:ca:9d:06:24:35:2d:54:be:86:d7:
         98:34:40:a2:8e:a0:c5:f5:65:44:e0:5e:17:f0:e0:33:11:08:
         20:69:f3:ec:8f:a2:f8:ee:bc:a9:dd:dc:ab:9d:28:42:9b:d5:
         7d:45:e4:cb:8a:2c:a0:07:df:c3:9e:8b:d0:9e:ae:73:6c:ab:
         ea:fd:9f:a9:41:0d:da:e8:54:26:d2:38:8f:e7:3b:51:62:d9:
         1e:8e:20:f3:b3:20:95:d0:9c:53:03:ce:02:c6:7a:0e:69:6e:
         06:9e:7d:dc:9f:ce:9c:5f:4c:3a:d9:94:c5:59:95:ff:48:b7:
         f5:8a:55:9f:a6:bf:c1:b7:ea:23:c3:de:8f:9e:6a:95:34:ca:
         4b:8f:8f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:42:01 2026 by rpki-client