Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/04ce292f-3ad9-3e36-bd36-09ed1e3b2122.roa
File:                     04ce292f-3ad9-3e36-bd36-09ed1e3b2122.roa (raw, json)
Hash identifier:          Ahpoxy4z1T/nXaogTsms3m/5hi2dbRtIHtQyd8ZLUWw=
Subject key identifier:   0F:FD:F2:F9:8A:ED:48:AD:CA:09:91:D9:54:21:65:65:91:ED:1F:AA
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A8410BF0B44B7FCA925C9BD40
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/04ce292f-3ad9-3e36-bd36-09ed1e3b2122.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     12041
IP address blocks:        2001:500:ef::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:bf:0b:44:b7:fc:a9:25:c9:bd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=573f4ab8-35aa-447f-8f97-e2374cf46c6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:47:33:5f:b3:25:b0:b9:d0:91:a8:e2:3b:19:
                    59:0e:da:2b:05:fb:96:ee:a5:5c:0e:fa:bd:8a:02:
                    a7:78:3d:88:68:42:50:76:27:8a:72:51:9f:eb:09:
                    75:a2:47:8b:85:67:91:9d:ef:d5:3e:c6:23:1a:28:
                    6b:c4:74:dc:6a:c1:00:f1:f8:f7:2e:b3:40:f0:1f:
                    fa:5a:3e:f8:46:f4:17:f3:9f:91:d9:9f:c3:77:01:
                    f8:9c:e5:a3:f4:84:eb:c9:22:bd:dd:fd:19:ac:9e:
                    42:eb:89:9e:6b:ab:b7:86:a4:ed:e3:4e:d7:a7:90:
                    04:4c:f4:6b:1c:76:8b:66:29:ec:87:0d:1b:12:7e:
                    b3:e4:2e:26:92:bc:a6:81:b4:00:1e:45:b2:c9:d6:
                    89:23:bf:a8:af:dd:90:8e:16:e2:dc:df:18:90:7e:
                    49:44:aa:42:44:66:c3:c7:7d:af:05:93:ff:8a:9f:
                    1e:41:b7:3a:32:2d:aa:a8:b9:83:e6:73:33:49:27:
                    86:e2:f5:4c:a3:41:90:ef:f7:bd:86:70:e1:68:54:
                    15:29:2e:3d:78:7d:40:7d:94:db:a2:15:f2:52:8a:
                    ca:27:23:14:d7:dd:7c:36:9f:16:32:b3:56:48:bf:
                    d1:10:b7:96:d6:58:50:da:f4:60:07:7b:74:99:7a:
                    6c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:FD:F2:F9:8A:ED:48:AD:CA:09:91:D9:54:21:65:65:91:ED:1F:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/04ce292f-3ad9-3e36-bd36-09ed1e3b2122.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:ef::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:a8:c2:09:7e:ce:04:30:11:8c:d8:f2:9e:0e:6e:39:34:56:
         3d:b2:d7:24:85:8f:1d:01:38:8e:7d:5c:5e:0d:01:0a:9b:84:
         2e:62:84:90:66:1d:e2:85:7f:ca:10:88:9d:24:aa:4b:7d:68:
         b8:81:3d:37:24:47:40:76:96:de:e1:a8:fe:d2:e1:e0:4c:fc:
         5a:93:da:23:ea:3a:4e:0a:7e:84:d5:66:85:36:89:d6:20:b9:
         58:3b:92:67:8b:73:8c:f2:1b:24:c7:e0:d4:29:ce:d9:ff:b5:
         0d:a5:df:99:0d:8a:aa:b7:e1:4a:b0:d8:df:9e:a4:2a:30:41:
         51:85:0f:e3:1b:f3:44:89:3d:10:9c:b1:e9:9a:79:e3:1d:3e:
         7d:51:9c:a7:2a:17:35:eb:b5:c8:e3:72:ab:79:b0:f7:49:5c:
         f9:7a:f4:dc:21:2f:aa:17:60:8a:56:b3:da:56:c8:c6:ce:ed:
         96:80:7a:45:8a:89:33:10:1c:ea:ab:1d:e1:d5:d1:d5:e1:c0:
         62:aa:93:54:64:a0:84:f8:81:00:16:2f:51:72:70:45:a3:b2:
         aa:b4:58:a3:cf:1f:cc:86:2c:fa:17:aa:54:bd:40:86:ec:22:
         f9:6e:14:7e:8a:b2:0e:e6:4d:ed:bb:b2:2a:bc:d8:fb:0a:af:
         54:83:37:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:07:31 2025 by rpki-client