Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8f92cc81-ec07-39b2-9f74-7efd8814cabb.roa
File:                     8f92cc81-ec07-39b2-9f74-7efd8814cabb.roa (raw, json)
Hash identifier:          z8cvM1zkZVXKzxEGN4DcDRavADux3UxWYKpMO7bv8Ho=
Subject key identifier:   65:CA:BF:72:04:FB:29:D7:78:90:5F:96:A9:FB:A0:9C:DA:1C:09:50
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B64CE40FC3C0601BBED320B80
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8f92cc81-ec07-39b2-9f74-7efd8814cabb.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     12041
IP address blocks:        2001:500:25::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:40:fc:3c:06:01:bb:ed:32:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=75bd2c62-78b8-4779-b8e6-5051519149e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ba:9a:f3:f1:79:a8:5a:32:e4:ec:94:1d:ee:
                    54:00:3b:25:99:0c:10:86:12:68:82:08:8f:fe:28:
                    a2:e5:b1:7b:d6:a3:ec:d2:bd:22:e7:d7:5d:80:f1:
                    cd:dd:b2:3e:79:a9:9c:5f:59:a0:56:e7:f9:79:48:
                    45:67:fb:bf:2e:c8:c0:87:c4:2a:53:28:d4:1d:a5:
                    f0:0f:90:31:2f:6f:c6:d5:44:1d:ba:c6:6f:a1:c9:
                    c8:c1:5b:f7:9a:62:c2:37:4e:27:59:2f:cf:2c:7d:
                    1a:16:12:a7:18:1d:e4:51:a8:cc:7e:72:15:1f:74:
                    2d:fc:3f:fe:41:13:25:9d:b7:ec:bf:d3:29:29:c8:
                    99:45:85:e8:ac:7a:1a:6c:0c:c6:e8:27:ad:25:94:
                    c5:e7:a4:24:4d:26:48:7f:04:2a:a1:6c:64:8e:7f:
                    b7:0b:60:fa:6b:a8:20:c6:83:eb:da:00:91:dc:76:
                    29:84:b4:27:6d:b7:6d:1d:c7:4a:db:c3:47:b2:d7:
                    95:13:fd:2b:3c:98:50:06:6b:00:66:96:3d:b6:e8:
                    95:f1:50:32:30:d9:46:37:8d:8f:8f:f4:79:f7:4d:
                    0e:86:e5:ce:60:1e:4a:54:86:76:10:f2:45:2a:05:
                    29:6e:8d:65:09:32:5e:81:11:56:bd:fb:af:4a:0f:
                    78:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:CA:BF:72:04:FB:29:D7:78:90:5F:96:A9:FB:A0:9C:DA:1C:09:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8f92cc81-ec07-39b2-9f74-7efd8814cabb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:25::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:7b:5c:d7:d6:c1:1b:7a:81:6d:77:a8:57:d0:4c:e3:7f:a8:
         ce:6c:ec:b1:6a:76:76:84:f2:f7:ee:89:03:ab:29:96:3e:e5:
         51:70:be:85:36:b6:4d:20:09:99:dc:9c:6e:59:b8:86:47:93:
         da:8f:08:b9:4f:db:bf:60:07:59:e8:3a:98:d0:95:fa:f9:56:
         aa:77:ac:7a:ea:07:0f:f5:46:5d:96:51:e3:f6:66:4b:a9:d6:
         53:5f:7f:ae:07:2c:57:bf:06:bf:de:32:d7:91:b2:ae:53:08:
         c4:b4:0a:97:ff:48:f7:25:38:a8:71:52:89:d7:b2:cc:a3:f1:
         dd:5b:75:0b:22:dd:b3:3e:32:19:00:dd:5b:01:4d:b0:ff:68:
         bf:d7:e8:fa:8e:cf:d6:6b:8b:a4:3d:dc:60:41:e0:a5:b1:e4:
         5c:b6:bf:c8:81:a7:e1:6c:89:d4:e5:5c:22:19:58:72:b4:92:
         bf:4e:cb:e8:4f:3a:17:e2:21:04:ec:e5:f1:4c:c7:d6:36:6c:
         f5:2e:e9:9a:2e:28:ba:9f:58:73:c2:be:67:ef:88:e9:43:03:
         56:80:d1:62:da:3d:94:7d:89:20:83:68:c1:0d:fe:46:08:9f:
         f3:b6:5c:bb:d9:45:30:75:ed:b7:06:18:c1:73:ab:52:db:e6:
         76:f6:c4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:16:33 2025 by rpki-client