Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/817ea094-4777-36ea-a87b-2b3b384cd7f9.roa
File:                     817ea094-4777-36ea-a87b-2b3b384cd7f9.roa (raw, json)
Hash identifier:          0qhPlbkijNfsSYhr5hynRBtXm8zW/2f9GXolI6Se2iI=
Subject key identifier:   3B:C1:0C:E2:10:04:ED:51:29:DF:C3:BD:0F:C0:C9:76:B8:41:91:45
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A8410BE726739B3DDB99A96C0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/817ea094-4777-36ea-a87b-2b3b384cd7f9.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     12041
IP address blocks:        2001:500:e6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:be:72:67:39:b3:dd:b9:9a:96:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=7a27d334-8a8d-4a7d-80c7-c6fa8fa9ad8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e9:0e:ec:12:02:52:32:9c:78:0e:09:3e:b1:
                    9a:78:df:2d:11:7c:a4:bc:89:8d:0d:75:1b:b5:67:
                    96:99:07:70:a0:34:47:2b:92:0d:5f:5d:09:ab:07:
                    b5:8e:c1:80:ad:53:5a:1f:29:81:4a:84:a2:bd:6f:
                    70:6d:a7:de:cf:7d:1c:8c:98:5c:13:b7:8d:02:cf:
                    d1:b5:f5:c1:8a:f6:fb:37:2c:9f:c4:e1:fb:8e:42:
                    2e:57:10:ee:0d:81:2d:cb:06:2f:1c:a1:06:2e:6f:
                    45:77:68:a2:0f:4e:87:c2:8c:b7:c0:ee:4e:67:36:
                    25:9a:f0:b6:1a:e7:dc:57:48:1c:28:f7:7d:01:e3:
                    f4:d5:f3:67:7e:09:e4:91:cb:3d:b9:a8:6a:81:a3:
                    4a:8f:10:8b:68:85:ec:f0:f1:6a:c7:e6:04:98:55:
                    6c:e6:1f:c7:5a:86:25:17:23:a2:af:0f:a0:98:f2:
                    66:b1:cc:70:d3:6b:46:87:8f:1d:c0:34:86:d4:9a:
                    62:ad:f3:d5:53:67:8b:19:79:71:c6:1c:48:8a:85:
                    c1:29:17:aa:91:63:e4:80:15:b9:30:39:33:08:d3:
                    eb:06:5f:6f:87:cf:2c:78:8d:71:74:47:85:9c:a3:
                    a3:c6:b6:a7:9d:f7:ec:fb:7c:07:66:b4:ee:72:cd:
                    76:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C1:0C:E2:10:04:ED:51:29:DF:C3:BD:0F:C0:C9:76:B8:41:91:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/817ea094-4777-36ea-a87b-2b3b384cd7f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:e6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:0b:32:5c:99:9d:c8:0c:b5:cb:69:80:8d:e8:b1:76:7b:d5:
         c5:25:ab:cb:a0:44:ce:f6:4c:de:dc:49:26:72:25:47:c1:03:
         be:cc:ca:27:3e:d5:1c:7e:fd:d5:5d:42:e6:ad:da:45:ee:81:
         fa:8e:21:97:26:dc:3a:1e:0b:6e:09:59:6f:ae:92:0b:51:f7:
         8c:eb:f6:96:0b:40:a7:d2:27:b7:9c:12:29:ec:34:e6:08:70:
         5b:85:ab:d1:0d:9e:72:88:8a:67:00:c1:48:7c:49:46:39:77:
         d5:d3:e7:0f:ea:1c:7f:91:8d:4d:08:83:be:90:06:f5:4e:01:
         52:22:ff:7a:4a:2e:83:84:f8:af:df:85:2c:de:e1:55:79:cc:
         cc:6c:a9:83:c9:40:40:03:22:08:65:8b:c0:98:6e:8a:52:78:
         0b:48:d3:ee:8c:fd:52:20:c9:ba:9a:ce:56:d2:4f:90:92:0d:
         35:64:80:90:94:8f:18:2c:c1:35:91:6a:fb:05:32:3b:73:42:
         d6:5a:67:a2:e2:f6:d0:48:6d:3a:07:91:95:1e:12:3a:04:22:
         4a:59:a6:24:b8:ea:c6:97:ea:83:4e:65:39:f0:ec:97:47:41:
         20:0e:79:b8:e8:27:77:5d:74:6d:98:c1:5b:eb:b0:f3:b7:c8:
         53:ee:45:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:06:36 2025 by rpki-client