Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e54b960f-f08b-362f-b430-187955fdce20.roa
File:                     e54b960f-f08b-362f-b430-187955fdce20.roa (raw, json)
Hash identifier:          9aMl1PeQ3IgMp8WoJujLpCX0RqxvmkJ3ge9x3CXjzTg=
Subject key identifier:   FE:EE:45:B4:32:A1:86:CE:99:BD:C2:C7:74:EB:03:37:9B:C8:03:AE
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584D24E126D4262F46E2D1E97D60
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e54b960f-f08b-362f-b430-187955fdce20.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     12041
IP address blocks:        2001:500:c9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:26:d4:26:2f:46:e2:d1:e9:7d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=a642ce65-c08f-41ea-a8d4-48f89f83cb4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:16:2d:5c:fa:a7:a4:74:98:3d:53:61:56:cf:
                    0a:74:df:8a:27:ed:2b:5d:93:2b:f9:6c:82:18:b8:
                    42:eb:5f:a4:20:64:b6:b4:2e:43:bd:d2:5a:84:b8:
                    85:03:8f:b4:d9:b8:5e:9c:05:5b:87:60:c7:b1:3a:
                    cf:00:b7:a2:f3:ba:59:48:01:d5:c0:59:2a:29:5c:
                    36:6f:4a:b6:87:98:de:6d:70:f1:d7:6b:f7:16:6b:
                    b9:5a:0e:0e:f2:bb:ff:f4:39:5a:5d:09:68:a8:25:
                    24:83:41:b5:03:95:16:f4:7f:11:1e:fc:a0:8f:ad:
                    70:d6:33:0b:54:78:bb:18:0b:98:b9:03:dd:dc:05:
                    f8:95:93:fc:6a:4f:af:fe:34:22:8b:69:c5:e5:f2:
                    61:e8:12:39:eb:36:b7:39:2e:23:c4:6e:a2:95:d8:
                    d6:c3:ff:9a:59:c3:c8:8a:ea:2b:e8:88:d9:35:97:
                    08:77:cb:fe:30:14:ec:7d:09:22:b7:19:ff:8d:f0:
                    51:6a:fa:91:31:3a:06:db:63:a0:01:3b:ed:ac:82:
                    1d:ea:5b:8e:a4:7e:fc:ed:ce:f5:63:fa:09:7d:64:
                    25:3a:d8:42:6f:6b:7c:85:3b:53:0e:db:26:b0:91:
                    e9:ab:17:a6:46:6a:81:8f:10:78:35:94:58:a9:d5:
                    24:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:EE:45:B4:32:A1:86:CE:99:BD:C2:C7:74:EB:03:37:9B:C8:03:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e54b960f-f08b-362f-b430-187955fdce20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:c9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:a6:fe:b1:83:67:09:3e:ea:d8:19:1c:ee:68:dc:0f:fc:e5:
         b3:75:ea:da:a1:84:ea:22:6a:1c:72:96:fd:be:bb:2c:44:60:
         bb:7f:cd:6b:7c:5e:b5:c5:92:92:09:47:5a:9e:cd:c5:79:03:
         27:e0:ac:6a:cb:be:d6:99:24:14:fc:e4:88:76:61:a6:e0:51:
         8d:ca:13:e8:81:9f:30:be:32:2d:8d:04:8a:53:fa:94:83:20:
         04:79:56:0b:fb:a2:41:f6:a0:44:3e:40:66:e4:ba:5b:dd:08:
         e7:bb:f3:1c:59:d5:95:0e:51:01:7b:30:94:43:9b:50:69:12:
         44:bf:0f:11:b8:5c:70:45:e9:aa:67:18:57:24:0f:ef:ee:cd:
         b0:23:40:77:81:25:9e:ea:70:2a:21:79:8b:18:6e:9b:24:05:
         88:ae:a0:50:35:fc:99:e3:b2:c5:29:23:6f:05:10:12:3d:6e:
         f4:65:27:40:70:44:fb:6d:b6:99:80:18:9f:58:90:a7:d6:2c:
         06:10:c6:31:1c:81:3b:b0:25:57:2a:d0:d9:d8:6a:90:46:16:
         57:94:2a:91:1f:59:82:22:7d:39:c7:09:f7:94:cd:01:60:f4:
         a2:53:5c:4e:81:3b:44:3a:87:df:6f:d0:cc:b4:ec:dd:c6:b0:
         ee:b7:29:5c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4SbUJi9G4tHpfWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
YTY0MmNlNjUtYzA4Zi00MWVhLWE4ZDQtNDhmODlmODNjYjRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hYtXPqnpHSYPVNhVs8KdN+KJ+0rXZMr+WyC
GLhC61+kIGS2tC5DvdJahLiFA4+02bhenAVbh2DHsTrPALei87pZSAHVwFkqKVw2
b0q2h5jebXDx12v3Fmu5Wg4O8rv/9DlaXQloqCUkg0G1A5UW9H8RHvygj61w1jML
VHi7GAuYuQPd3AX4lZP8ak+v/jQii2nF5fJh6BI56za3OS4jxG6ildjWw/+aWcPI
iuor6IjZNZcId8v+MBTsfQkitxn/jfBRavqRMToG22OgATvtrIId6luOpH787c71
Y/oJfWQlOthCb2t8hTtTDtsmsJHpqxemRmqBjxB4NZRYqdUkDQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFP7uRbQyoYbOmb3Cx3TrAzebyAOuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTU0Yjk2MGYtZjA4Yi0z
NjJmLWI0MzAtMTg3OTU1ZmRjZTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADJ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFWm/rGDZwk+6tgZHO5o3A/85bN16tqhhOoiahxylv2+uyxEYLt/
zWt8XrXFkpIJR1qezcV5AyfgrGrLvtaZJBT85Ih2YabgUY3KE+iBnzC+Mi2NBIpT
+pSDIAR5Vgv7okH2oEQ+QGbkulvdCOe78xxZ1ZUOUQF7MJRDm1BpEkS/DxG4XHBF
6apnGFckD+/uzbAjQHeBJZ7qcCoheYsYbpskBYiuoFA1/JnjssUpI28FEBI9bvRl
J0BwRPtttpmAGJ9YkKfWLAYQxjEcgTuwJVcq0NnYapBGFleUKpEfWYIifTnHCfeU
zQFg9KJTXE6BO0Q6h99v0My07N3GsO63KVw=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:06:35 2026 by rpki-client