Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e629835a-3d42-3735-977b-a5f68caaceda.roa
File:                     e629835a-3d42-3735-977b-a5f68caaceda.roa (raw, json)
Hash identifier:          AkhLpo60I4ylPziM8NlIrk3wqvIJhzf2BLDtOqrX+HE=
Subject key identifier:   42:DC:E4:CE:DA:29:91:52:02:CC:03:0D:7A:04:91:F9:20:C1:95:A1
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B64CC9BCB3F260AA5F3AB6180
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e629835a-3d42-3735-977b-a5f68caaceda.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     12041
IP address blocks:        2001:500:1a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:9b:cb:3f:26:0a:a5:f3:ab:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=d05b2c29-9f5c-4abb-bc86-6d76f72ccedb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:56:06:de:48:24:91:dc:36:f9:09:21:74:dc:
                    33:03:c3:55:79:96:fd:18:92:70:7d:de:b6:12:a3:
                    f3:33:e3:e0:9f:37:ba:14:89:f2:7b:44:6a:f1:15:
                    c6:de:28:d9:64:d7:d3:69:29:73:fe:0d:dc:0b:3b:
                    c9:e9:02:81:5f:8b:26:b3:6f:d1:34:e7:7c:fe:c2:
                    a4:67:e4:7d:02:f3:88:ab:ff:64:2d:b8:33:63:df:
                    35:d1:44:37:3f:3c:a0:26:a8:19:4a:f8:01:c2:30:
                    e1:09:c9:20:3e:7f:6b:db:cf:5e:b5:28:72:86:7e:
                    0e:ac:79:03:83:f5:33:5d:54:65:11:77:c8:7b:a8:
                    5e:7e:41:cb:02:b8:8e:90:29:72:57:8a:df:cf:fd:
                    9f:d0:93:35:0a:e4:ef:d1:a3:d0:2b:38:12:ad:f9:
                    f6:ee:62:95:e8:30:eb:ef:b0:6e:86:07:47:ac:34:
                    7f:e1:08:93:c0:83:4c:92:8a:ef:df:6c:0d:b0:82:
                    a4:67:c3:b9:cb:92:6d:d0:44:c2:f4:83:23:77:07:
                    a4:0a:2c:b8:ed:cd:7b:ae:49:da:84:6b:ca:03:f6:
                    30:f8:c9:78:03:77:fd:cb:27:2f:12:d4:a9:1e:14:
                    b9:e2:7c:95:c8:ea:ac:df:9f:42:72:6f:a3:11:d8:
                    84:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:DC:E4:CE:DA:29:91:52:02:CC:03:0D:7A:04:91:F9:20:C1:95:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e629835a-3d42-3735-977b-a5f68caaceda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:1a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:b8:b1:63:22:80:0e:54:06:5a:f9:ff:c0:5e:45:45:a2:22:
         28:ce:cc:17:f2:1c:59:5d:ab:63:11:ce:ff:cd:73:a7:55:4a:
         76:04:e6:2a:b8:38:0d:e0:51:37:fe:21:19:cb:d0:51:17:19:
         53:70:e2:51:a8:86:da:ed:7f:a2:65:50:06:36:19:62:dd:5a:
         98:78:38:1c:35:7a:6e:09:d5:55:1f:25:18:6d:b3:8e:56:f8:
         f2:99:2a:fb:37:4c:e8:ab:ed:68:16:1f:73:4c:ba:ff:83:e2:
         86:05:27:0e:54:12:33:c9:8f:fc:78:20:46:9b:c0:8e:de:2c:
         b6:08:11:30:a3:76:f1:30:c9:74:1a:8a:3f:59:20:c3:da:12:
         46:4c:ea:55:c7:08:99:4c:64:ca:b3:75:12:12:b5:61:10:70:
         72:09:02:f3:c7:b4:ba:b8:87:bc:85:2a:17:b6:25:65:f4:49:
         4d:c7:59:eb:67:5f:3e:0f:99:e3:ea:ae:90:72:bb:0b:f7:77:
         8d:9c:e8:78:cb:a8:6e:10:c2:a1:23:f8:09:ab:6c:7f:c9:5a:
         14:77:35:fa:8a:76:18:da:b6:12:47:c5:22:21:d6:8c:42:a9:
         52:43:f0:83:0c:cf:66:84:cd:f8:86:e1:37:34:f6:84:ff:17:
         c5:e4:a2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:17:30 2025 by rpki-client