Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ca57f8ae-3787-3982-b423-ea35bbf42a1f.roa
File:                     ca57f8ae-3787-3982-b423-ea35bbf42a1f.roa (raw, json)
Hash identifier:          sGfknBEiAsCMzEyrQWMWMBa032UTU50YXFIorFKjLzs=
Subject key identifier:   DC:16:D5:D5:FD:92:99:20:55:3C:93:97:0B:87:E6:E0:C4:E7:71:07
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F43285849A42EACEF8442287698C18200
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ca57f8ae-3787-3982-b423-ea35bbf42a1f.roa
Signing time:             Fri 25 Apr 2025 08:20:26 +0000
ROA not before:           Fri 25 Apr 2025 08:20:26 +0000
ROA not after:            Thu 24 Jul 2025 08:20:26 +0000
asID:                     12041
IP address blocks:        2001:500:a2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:2e:ac:ef:84:42:28:76:98:c1:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Apr 25 08:20:26 2025 GMT
            Not After : Jul 24 08:20:26 2025 GMT
        Subject: CN=7f00a7ac-dac7-4752-9e61-c76e603cecfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ff:e8:36:7d:f6:a4:95:13:ec:78:1f:0c:3a:
                    c6:ab:f7:15:d9:f9:0a:96:ad:6d:88:8f:3a:28:d9:
                    82:4a:69:19:25:79:63:69:73:49:41:30:72:73:62:
                    1a:06:19:a8:bb:72:d4:c6:30:39:38:f5:71:ea:23:
                    c6:0f:e6:a6:8d:1a:15:7d:c2:71:da:e6:d8:86:b8:
                    3a:4e:6a:13:1d:ae:e1:e2:ac:a1:fc:0c:8a:e8:5a:
                    a0:7b:fc:b3:3c:d6:3b:af:9f:92:e0:cd:f9:ea:f0:
                    28:c6:bb:57:2a:eb:8c:db:b0:29:c1:26:1b:42:b6:
                    4d:1b:ab:b8:dd:91:e8:6f:2e:ae:91:c5:70:02:e8:
                    33:9f:d2:7b:a2:ba:17:1b:0e:91:ff:d7:27:b7:58:
                    3d:1e:1d:77:ae:b6:61:11:aa:a7:bd:5d:4c:60:87:
                    3d:84:63:b3:ea:2b:7a:ee:cd:d9:0c:0f:34:71:87:
                    97:36:80:4d:05:db:95:a1:e0:8e:a1:3d:23:36:02:
                    39:1f:75:52:66:87:b1:4d:2a:ba:15:53:57:72:ec:
                    bc:01:a0:bc:3c:06:4c:f7:44:39:b4:f2:a7:a7:46:
                    af:ee:4f:8a:cc:d3:90:9e:22:5c:ce:19:52:45:9b:
                    9d:90:d4:38:23:db:28:f6:36:09:39:e6:40:7a:bc:
                    20:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:16:D5:D5:FD:92:99:20:55:3C:93:97:0B:87:E6:E0:C4:E7:71:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ca57f8ae-3787-3982-b423-ea35bbf42a1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:a2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:46:d5:36:70:d4:02:3d:2f:43:d0:cf:6a:61:bf:12:12:8f:
         b3:d2:6f:3a:e7:cd:fd:bb:c4:e9:ce:79:34:e7:15:10:c1:40:
         ac:5a:15:ea:84:3b:79:e7:22:1a:63:ed:e2:68:27:20:17:55:
         7b:ce:c0:72:a7:58:a1:50:d6:f6:c6:71:eb:5c:43:83:9d:de:
         c9:ba:b6:e9:9c:55:83:ab:51:86:9f:2b:e0:8f:3c:99:ff:89:
         3a:63:7d:ff:2e:3a:32:1c:0f:12:78:6b:9f:c4:22:ac:f2:03:
         d8:ff:3a:e8:63:4b:58:18:0c:74:b3:b9:e2:79:7c:a6:6a:3b:
         5c:ae:e8:94:2d:a6:ba:76:26:cc:46:4c:30:79:93:d6:fd:ae:
         7e:66:0d:7c:28:5c:05:12:aa:dd:ba:26:33:01:ec:85:99:5f:
         82:79:b6:f3:54:ce:13:78:76:31:4b:69:b2:a5:cc:50:27:54:
         5e:69:a0:97:86:98:41:a7:bb:8e:56:c0:55:a7:bd:c5:a4:a6:
         c6:de:bd:2e:8b:5d:f9:ac:bb:66:89:b1:40:32:37:84:71:e8:
         18:b1:64:0a:04:7a:c5:31:26:3a:02:82:9c:27:f9:c0:5b:cf:
         ea:32:a4:08:32:42:ec:85:6b:1f:c2:54:1c:38:f0:07:9f:83:
         3f:0e:74:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:19:39 2025 by rpki-client