Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4546c97d-ce09-36b4-ab62-95f581ad6db4.roa
File:                     4546c97d-ce09-36b4-ab62-95f581ad6db4.roa (raw, json)
Hash identifier:          J6fZpvHTCE+EKQ66DMj2V/vdT2FOw16B4MDy2KX+R/U=
Subject key identifier:   14:0B:E4:EB:DE:BC:8D:CF:C1:E6:04:21:BE:A2:58:9B:4B:80:B5:BC
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584D24E130A5EA3FB42699100780
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4546c97d-ce09-36b4-ab62-95f581ad6db4.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     12041
IP address blocks:        2001:500:26::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:30:a5:ea:3f:b4:26:99:10:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=431a0775-0a62-4a82-a0af-a103b368910b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a6:8c:5e:12:b4:0b:00:c4:2f:c2:b3:09:16:
                    ea:35:d2:94:ca:7d:69:93:d1:35:e5:6f:e1:55:8c:
                    01:0e:6f:68:75:9c:f9:46:67:f4:0a:4f:08:55:90:
                    e3:6c:22:a3:10:f9:2f:50:6e:6e:91:af:cb:5f:0e:
                    ce:1c:a1:bc:a2:43:bb:10:8a:ff:de:06:a5:6c:e5:
                    a0:04:98:52:9f:fd:cc:71:bd:23:78:b9:8d:cb:10:
                    2a:07:15:10:81:af:79:ef:a7:a1:da:88:8e:49:02:
                    43:ae:d6:83:28:23:61:50:96:ea:69:94:ce:b1:73:
                    c4:32:28:e8:0b:34:75:1d:cb:a4:05:67:c2:bb:75:
                    fb:7b:1f:19:61:8d:8d:05:f9:ef:2f:03:9c:e2:51:
                    6b:e6:a3:bc:65:e2:19:5e:38:bd:ab:d8:7f:28:2e:
                    96:83:05:83:b0:50:48:9a:66:a5:2a:0e:1d:a8:86:
                    18:a5:f4:97:aa:a4:2d:be:b3:b3:d3:8f:2a:b5:32:
                    cb:d4:90:93:02:0e:f3:a2:32:fb:63:dc:b8:50:80:
                    da:33:33:82:ee:53:35:3c:2e:33:12:2a:34:c6:85:
                    bc:34:75:aa:25:42:d0:f1:ed:9e:e1:b7:f0:97:ff:
                    5b:0c:51:1c:89:ab:b4:39:4d:3d:63:f5:b1:68:e3:
                    42:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:0B:E4:EB:DE:BC:8D:CF:C1:E6:04:21:BE:A2:58:9B:4B:80:B5:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4546c97d-ce09-36b4-ab62-95f581ad6db4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:26::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:31:52:aa:c4:88:6e:e6:d9:a5:8c:51:57:d0:ac:1a:80:54:
         0e:37:c3:e3:04:ce:05:30:50:a8:95:ae:51:b8:75:43:39:ab:
         fc:e8:44:b7:1b:f7:a8:72:c3:80:87:9c:70:6f:6c:df:87:2b:
         c2:03:26:27:3a:fd:e0:0f:2a:24:2a:38:c6:2b:cb:da:d9:66:
         0a:33:bf:16:a0:71:00:b6:83:bc:b2:6b:a8:06:e5:c1:56:ef:
         4f:a7:5b:03:c0:61:88:ae:e9:ad:14:d0:e9:96:39:89:e8:0c:
         d5:4c:ab:d2:32:f7:92:cb:e9:cb:6d:b2:71:8a:eb:2b:13:a1:
         07:19:e7:5d:e8:c9:bc:58:98:ff:2c:95:eb:89:ca:9e:ec:65:
         2f:93:a5:d7:9a:69:19:3d:1e:4f:d3:cd:8d:05:e3:b2:78:8d:
         35:c5:5f:b7:f1:d9:4c:4b:39:89:68:cd:2a:95:35:57:de:9d:
         54:f6:02:3b:54:a3:81:6a:63:d9:00:cf:1c:16:bc:06:7f:ea:
         47:f5:3f:7d:5f:a2:f8:90:1c:7d:19:e6:65:b9:db:06:3f:aa:
         c7:a9:2b:6d:6b:c0:d1:04:de:a8:e7:2b:be:53:63:b8:4a:bb:
         ef:c6:64:80:45:ce:07:09:50:e5:4a:fb:2f:92:2e:d7:f5:a6:
         87:cd:b5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:20:22 2026 by rpki-client