Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/49fab721-ee4d-39f7-95aa-244180f7663d.roa
File:                     49fab721-ee4d-39f7-95aa-244180f7663d.roa (raw, json)
Hash identifier:          Wvlv3xxzx9Cq7cGnxiRSn9Ll1tA9Tyy7T2BWvRY3EXU=
Subject key identifier:   5A:9F:B8:B0:6B:0F:AD:8D:0A:CF:77:11:41:AA:1B:FF:89:24:96:53
Certificate issuer:       /CN=8d2f044f-e9ba-4827-afd6-8e01d323d3ec
Certificate serial:       010D0C9F4328584ACCA65405800A51FA81E26A00
Authority key identifier: AF:3F:E4:D8:29:57:9D:AE:9B:52:E2:DF:D1:82:AB:8C:FA:84:53:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/49fab721-ee4d-39f7-95aa-244180f7663d.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     19468
IP address blocks:        2602:f76f::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:54:05:80:0a:51:fa:81:e2:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d2f044f-e9ba-4827-afd6-8e01d323d3ec
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=9f200e2c-f09e-400a-ba1c-3cd9517863c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:49:d3:d8:9b:44:cb:bc:be:79:7f:a7:e8:ba:
                    b4:b1:34:17:80:9c:e6:53:b9:f1:a9:c9:67:50:76:
                    a6:92:fc:ca:fd:14:6f:0a:07:5b:e3:1e:18:dc:64:
                    96:03:1d:37:9d:8f:3b:c5:3f:eb:62:7d:32:1d:2e:
                    dd:4c:8f:bb:7c:f5:31:54:c2:7a:10:95:6d:09:77:
                    ef:0e:1d:47:d0:ea:54:b9:29:4f:c5:a4:03:2d:6c:
                    67:64:6f:85:ab:98:69:32:62:38:a9:a5:db:6e:12:
                    2d:0d:49:95:6a:e6:e4:22:8b:93:06:44:4f:16:76:
                    dc:62:02:9f:79:86:ca:62:89:a5:08:e8:7c:47:59:
                    f2:c7:13:31:06:98:58:01:f7:dd:09:52:48:8e:bb:
                    8f:43:10:4f:27:31:d3:72:53:92:a3:53:5a:b2:54:
                    a6:8e:96:fa:5d:62:9f:4d:5b:85:30:ba:35:2e:4a:
                    af:4f:15:2a:f3:a8:5a:90:54:cd:a2:07:68:4e:3f:
                    40:c4:31:cb:86:fc:fe:5f:23:e5:54:46:c7:47:eb:
                    81:3e:20:68:31:8b:08:69:60:f4:3d:7f:64:e1:60:
                    39:60:6c:20:fa:56:35:8e:bf:55:2b:1e:f3:f4:87:
                    f1:77:79:95:d0:34:26:9d:d2:1f:5c:4f:b9:82:44:
                    74:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:9F:B8:B0:6B:0F:AD:8D:0A:CF:77:11:41:AA:1B:FF:89:24:96:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/49fab721-ee4d-39f7-95aa-244180f7663d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.crl

            X509v3 Authority Key Identifier:
                keyid:AF:3F:E4:D8:29:57:9D:AE:9B:52:E2:DF:D1:82:AB:8C:FA:84:53:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f76f::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:43:80:d4:e7:82:37:4e:57:6e:1b:e0:93:9c:6e:75:0a:ca:
         81:52:3a:e5:e0:ed:b8:3c:3f:5a:4f:40:23:01:26:b3:71:62:
         7e:ed:ed:5a:ec:18:ff:06:a9:d0:92:75:e9:e0:a5:23:0e:5a:
         48:c7:f8:58:63:76:e5:8b:c6:5a:e7:de:11:71:82:9f:0e:01:
         86:3d:11:26:6c:b0:ae:66:87:75:84:ca:cb:f6:ef:80:c5:ea:
         70:3f:3e:f7:f0:20:99:68:81:33:cc:9f:f3:8e:3c:4b:5e:a3:
         fc:6e:f7:a2:b1:bc:06:c9:fc:98:cb:b2:4a:65:fb:2b:8e:be:
         82:5f:2f:83:85:3e:49:15:e2:31:fe:86:5a:ef:73:35:80:aa:
         08:f7:f5:91:49:4a:6c:f9:09:5e:b1:f7:e8:bb:a7:6e:75:72:
         e3:3a:23:24:0d:18:66:6b:29:86:6b:c0:de:87:90:25:46:7f:
         01:f8:09:31:b7:95:9d:ce:5e:1d:50:a7:db:ca:b8:12:f1:71:
         bf:f9:8f:9c:08:77:04:56:b5:ce:e6:6a:13:ec:5f:88:f2:de:
         c5:d2:e3:31:28:06:55:36:fa:b0:f5:a3:5a:50:ed:1a:f5:0e:
         6a:4c:24:e4:95:9d:f3:ec:29:a9:28:b2:ec:3f:fc:e8:27:27:
         23:9d:b4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:58:44 2025 by rpki-client