Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/817ea094-4777-36ea-a87b-2b3b384cd7f9.roa
File:                     817ea094-4777-36ea-a87b-2b3b384cd7f9.roa (raw, json)
Hash identifier:          6jinbRvaoDVUJU9cXuFjYzvf5mjD2+noXBWTn/f+McU=
Subject key identifier:   42:6A:9F:FC:76:27:7E:D9:CE:3D:D2:9F:7B:32:5F:70:07:43:BF:01
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B64CCA4BD9B1EBBF1F8340AE0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/817ea094-4777-36ea-a87b-2b3b384cd7f9.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     12041
IP address blocks:        2001:500:e6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:a4:bd:9b:1e:bb:f1:f8:34:0a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=f366193e-92e7-4acd-9438-6cc983f0d1b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:57:d7:de:f1:24:47:9f:17:32:9c:12:5d:0b:
                    b5:0d:63:c8:ee:f8:12:21:b4:1a:6f:c6:88:38:f0:
                    36:dc:28:db:4f:93:5c:da:76:fa:57:65:a6:aa:ed:
                    95:a4:58:a4:c4:05:65:63:34:4c:3c:30:28:91:38:
                    c2:f8:cd:61:50:c7:02:79:3d:16:ac:e6:f4:fd:aa:
                    66:55:9d:ac:fb:86:44:3e:58:bb:70:5d:75:a2:30:
                    9c:5c:ee:0c:26:89:25:91:2e:6d:98:74:7f:ea:a7:
                    0e:ca:b3:4e:0e:2a:af:10:1d:c4:43:77:63:d3:14:
                    1f:cc:85:a3:98:27:4c:ca:70:93:55:87:8e:35:a0:
                    4c:a2:3d:cc:f2:83:75:16:3f:4a:51:62:05:33:a3:
                    2b:0d:9a:f6:08:7a:89:43:5c:49:41:3a:42:87:28:
                    46:b7:b9:4e:81:70:2d:d6:55:fd:b3:3a:50:a9:40:
                    a9:61:24:62:fd:7a:5d:0e:19:0a:1a:ed:cf:8c:94:
                    35:1e:14:4d:8f:53:28:e8:b4:f8:b4:f9:2d:f6:c2:
                    fb:09:1a:e6:d4:7c:4c:6c:b6:0b:ca:a9:3a:08:54:
                    40:1d:55:45:82:d9:85:94:57:3e:9d:ba:08:99:74:
                    b2:30:1a:ca:44:38:93:e5:8a:14:35:cd:27:b7:55:
                    52:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:6A:9F:FC:76:27:7E:D9:CE:3D:D2:9F:7B:32:5F:70:07:43:BF:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/817ea094-4777-36ea-a87b-2b3b384cd7f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:e6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:5e:18:be:bf:3b:27:8f:34:4c:68:a7:ee:da:41:00:0c:da:
         be:e3:6d:d5:8b:35:41:2b:06:b0:52:4c:29:56:14:46:ab:5b:
         6a:d4:03:af:83:9e:60:be:e6:92:2b:46:1d:c8:6d:27:d8:39:
         ad:82:c8:c1:09:28:63:20:6d:e9:78:87:25:85:64:a9:c0:17:
         6e:67:52:87:aa:de:58:c0:ba:4b:94:10:4b:30:6f:51:1b:6b:
         a5:d5:70:11:42:26:45:de:4a:68:e9:05:a7:bc:03:66:bd:0a:
         f1:64:25:ee:92:e3:23:64:5d:bf:24:cd:a4:2b:17:55:65:ff:
         54:be:8e:ab:33:e4:0f:ba:74:18:9a:97:36:e3:d1:e1:c1:86:
         ee:d1:d3:55:2c:23:6e:b4:3d:96:60:b3:f4:0b:9e:27:d4:ce:
         96:36:ee:3d:be:98:49:62:f6:bc:64:c5:01:cb:03:f8:e8:12:
         8a:d4:96:8c:6c:7f:36:20:2c:b8:13:e3:e4:57:c5:56:85:77:
         31:81:71:6b:23:f0:b3:6a:72:be:c7:8d:a6:f1:07:68:f1:1b:
         f3:c3:a6:17:f8:fb:86:91:6a:46:84:89:03:bb:6d:00:dd:55:
         0c:de:8a:24:58:8f:af:8f:88:c7:39:bf:f7:30:81:d0:a5:2e:
         3c:d1:fc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:16:36 2025 by rpki-client