Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7143821d-b959-370f-bcec-f9e5be34ed99.roa
File:                     7143821d-b959-370f-bcec-f9e5be34ed99.roa (raw, json)
Hash identifier:          9G4DOCIO8i9f1U1jY2XQeirN+jsI6ar3Ssowj/2Mcag=
Subject key identifier:   98:E7:63:2A:62:1E:43:5C:DF:F6:07:C8:B2:85:D5:C2:E3:8E:A7:52
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A8410BC1AD1182AE8D03AFFF8
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7143821d-b959-370f-bcec-f9e5be34ed99.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     12041
IP address blocks:        2001:500:cb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:bc:1a:d1:18:2a:e8:d0:3a:ff:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=59f53382-91d1-492a-aaa3-e3f8f6a34fad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:73:ff:60:e1:64:ae:ee:e1:74:4d:19:6b:98:
                    0b:d3:74:47:a9:e6:ae:2a:33:e1:19:3d:b8:52:81:
                    12:af:f0:78:80:6a:b8:04:b5:a0:16:35:ae:47:c4:
                    04:01:9b:38:74:60:d0:2c:ca:0f:44:c9:4a:b7:54:
                    26:3b:16:59:48:f5:2a:3b:6b:79:04:19:70:c1:85:
                    ab:5a:46:ec:b5:71:15:89:f0:19:80:b8:b4:cb:80:
                    99:76:63:78:70:76:38:1a:3f:15:1e:41:09:22:98:
                    9a:70:a3:cc:17:28:f2:e1:da:1e:7a:ae:fe:d4:cc:
                    5f:dd:45:a3:b8:39:fe:85:99:05:e2:48:01:c5:4b:
                    1c:f7:37:af:0a:1c:ca:ac:20:c9:fe:24:af:a4:44:
                    a2:f6:ff:a3:92:32:35:59:d0:44:8b:9b:31:aa:3e:
                    bb:50:30:89:47:9b:5c:62:1c:1f:a2:d3:08:8a:8a:
                    35:7d:51:03:ef:8b:a7:b5:db:ae:af:f2:9a:49:f7:
                    71:05:96:b7:8a:2a:2a:81:25:d4:6d:56:66:1a:a4:
                    0a:9e:ef:4c:70:22:3b:7e:40:d8:b8:ee:94:bd:d0:
                    b6:68:0c:9b:3b:26:96:0f:b6:bf:a5:0a:80:06:8f:
                    19:8b:1f:6b:0b:b7:e5:1b:f6:db:a0:26:fb:ee:96:
                    8c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E7:63:2A:62:1E:43:5C:DF:F6:07:C8:B2:85:D5:C2:E3:8E:A7:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7143821d-b959-370f-bcec-f9e5be34ed99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:cb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:2e:54:5e:77:7f:70:85:c0:67:97:18:58:bd:8a:7e:5a:11:
         7c:d3:b7:ea:2a:b8:ba:29:4b:77:38:e3:cd:ea:75:9e:c6:2c:
         e3:bf:d7:27:75:32:4d:1d:4e:57:54:bb:94:92:44:c3:c5:8b:
         69:8b:ee:6b:31:54:17:02:3b:38:02:4a:40:df:5e:44:af:02:
         fa:b6:78:cc:2a:07:b8:0c:3a:df:52:25:dc:13:b7:fc:71:ce:
         4c:15:77:fb:a1:de:33:b1:db:8c:e6:bc:09:44:74:d9:80:7d:
         64:81:ed:55:28:07:b3:83:dd:30:c0:ae:45:24:ca:4a:e5:71:
         1e:b6:fe:da:47:1b:2d:09:07:24:7a:75:4c:e8:fb:00:1e:46:
         72:22:b5:a3:71:a6:db:53:61:e2:80:54:b6:37:30:c8:0a:5d:
         1b:50:86:18:d2:f9:6d:8c:9f:17:c9:0f:73:3c:bf:1d:82:db:
         81:9d:58:ef:33:ec:c0:01:ab:ea:e3:bc:83:e1:f0:c7:b1:59:
         07:aa:d0:1f:c3:1b:fb:b0:54:91:bc:0a:34:86:56:d0:c5:f4:
         1f:89:8b:38:59:ab:cc:d0:24:09:d4:bb:30:26:56:24:a9:d5:
         92:79:4f:79:b2:c6:cc:3c:b3:7d:d6:f9:de:8e:3e:96:9a:fc:
         75:03:e3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:20:23 2025 by rpki-client