Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7bab1756-00e2-3740-b396-a45136227786.roa
File:                     7bab1756-00e2-3740-b396-a45136227786.roa (raw, json)
Hash identifier:          aa/nEHcAhsb2iOmM3Jv9j/1W5kcFEEX5cm7Yk/ESouI=
Subject key identifier:   68:68:67:DE:B8:F8:6A:96:07:88:D4:03:9B:C7:22:09:72:08:51:0E
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A8410BCC51609AAD14B508780
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7bab1756-00e2-3740-b396-a45136227786.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     12041
IP address blocks:        2001:500:d4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:bc:c5:16:09:aa:d1:4b:50:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=ed85089c-afd0-4449-9bc6-4dfad5803df5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6f:62:04:f9:af:e1:00:79:0d:e9:46:c8:ed:
                    0f:d8:6f:59:22:9a:eb:1a:20:60:ca:f0:82:94:ca:
                    e0:ce:8a:2f:7d:ad:8c:d4:96:90:3d:3f:12:d4:8a:
                    5c:bd:16:ec:5f:93:51:2b:76:b2:81:7d:12:bb:47:
                    52:9a:38:0f:5e:69:78:db:34:8e:1f:7f:d9:76:55:
                    b5:b5:67:1f:85:6c:66:87:af:e9:95:5f:a4:4e:06:
                    e5:54:ba:70:f2:ef:26:82:31:f2:13:18:ef:44:27:
                    27:6c:c4:3a:42:0f:ca:43:64:c4:d7:f5:c3:0e:08:
                    22:a2:48:ab:d5:6c:ea:c6:28:6d:57:21:98:98:40:
                    ad:d2:1e:a1:e3:fb:bd:31:cb:da:5c:f4:55:dc:ae:
                    b5:b7:6e:78:f3:bc:47:fe:4c:f1:ac:62:22:d7:28:
                    4b:6b:4f:cc:34:bc:e1:0b:f7:29:17:68:7b:30:1b:
                    8e:40:dc:c8:8e:51:27:73:57:10:7b:9d:32:3c:0d:
                    e7:51:e5:2b:8a:d8:2f:56:9e:6d:d7:2e:8d:9a:a9:
                    ac:f3:fa:92:97:58:34:9f:4f:b3:84:74:c0:e5:8e:
                    eb:d2:9c:33:10:26:3b:b6:65:92:89:07:27:84:bb:
                    21:3a:40:50:20:45:2d:f0:d0:72:fe:0f:13:12:4f:
                    8e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:68:67:DE:B8:F8:6A:96:07:88:D4:03:9B:C7:22:09:72:08:51:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7bab1756-00e2-3740-b396-a45136227786.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:d4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:fe:2c:ca:64:f9:7d:34:4c:54:31:0e:3b:59:60:c5:7d:32:
         88:18:20:12:62:c5:51:a0:e8:d9:62:6d:1e:5f:ce:a4:06:36:
         82:77:7c:21:c8:02:04:7f:51:9a:e5:05:22:42:b1:9c:e7:6e:
         b0:79:63:47:6b:48:82:63:4b:98:2e:0a:77:8f:06:f2:eb:d5:
         35:4c:0c:35:d9:64:38:68:22:ca:d9:ee:7a:ae:95:a4:54:8d:
         27:60:10:41:b3:33:25:3c:b0:bf:e7:dc:a6:1d:5f:8e:37:f7:
         f6:72:e3:e4:4d:ed:88:65:29:21:1a:75:4a:42:10:9d:f9:7a:
         db:1c:49:97:47:e9:f0:60:f2:75:33:0e:3d:b6:7b:0b:c2:88:
         a5:85:6e:02:14:8c:f1:12:9d:f1:f1:2f:c9:d1:60:79:a1:70:
         60:bb:bf:fb:95:0e:b4:74:81:66:3d:88:0c:65:50:1a:2e:8e:
         5b:f4:7b:b2:97:56:cc:5b:cc:4a:0c:55:c7:f7:0e:9a:c3:19:
         26:e6:60:29:04:09:40:6f:98:c5:f5:b8:56:73:89:01:08:85:
         78:71:2f:f8:f7:ad:c9:86:12:fb:34:df:b7:43:41:a5:93:a5:
         6a:77:bc:be:e4:b6:0d:1b:74:87:26:40:3e:0a:d3:d5:90:a8:
         55:33:5a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:38:41 2025 by rpki-client