Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e3d231a0-5597-3a08-9e86-7c7079d184e2.roa
File:                     e3d231a0-5597-3a08-9e86-7c7079d184e2.roa (raw, json)
Hash identifier:          0wHF1AIjQmY3XHC7yd5a6823ShACQnmr/E5yvrvlEUM=
Subject key identifier:   6C:99:49:9F:7E:15:6C:07:AB:E7:74:8E:6B:63:0D:3D:B9:5E:9B:2E
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A8410BF57B2E600ADB759EE40
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e3d231a0-5597-3a08-9e86-7c7079d184e2.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     12041
IP address blocks:        2001:500:e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:bf:57:b2:e6:00:ad:b7:59:ee:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=083b7d7d-c658-417e-8381-0bc256acb526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6e:c3:58:c1:d2:ca:7e:f6:0c:c8:7d:9a:c1:
                    89:06:95:7a:fc:27:8b:bc:db:98:6e:97:1b:09:77:
                    fb:d7:e3:16:91:f5:af:c6:58:00:99:5b:fb:2f:81:
                    07:26:d9:75:01:e5:51:62:f4:ef:84:56:c6:f4:26:
                    a7:e4:1e:31:8d:ce:0f:d8:54:7c:fe:58:33:8a:21:
                    bf:e7:f8:b9:08:06:3b:0e:45:07:1e:c9:9f:5f:c6:
                    4b:55:e3:f5:32:1e:35:8a:73:5b:38:ec:6a:39:cb:
                    97:7c:c3:d4:72:07:96:84:36:aa:6a:f2:65:3b:45:
                    56:98:d5:3c:c6:10:62:c7:55:f2:8a:0d:30:33:05:
                    29:f0:74:09:d7:a7:ac:76:9f:3e:32:da:ab:b2:80:
                    26:7a:58:45:0a:31:b6:42:65:64:2e:a3:ac:24:d5:
                    c1:c4:83:8a:e2:d5:c2:7d:d0:48:66:0c:a9:32:fd:
                    f1:ae:7b:fa:55:20:c8:5f:27:53:8d:99:be:66:de:
                    c5:8d:b5:bc:56:e8:77:89:50:77:a9:ae:99:ba:0b:
                    66:12:22:ed:f0:3b:1f:00:ba:a9:b1:a4:e3:ae:3a:
                    ad:b8:49:23:15:f0:78:93:30:80:ce:bb:07:65:c9:
                    30:9e:5d:6f:cb:fa:3a:0f:c9:96:81:4b:2a:32:b7:
                    07:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:99:49:9F:7E:15:6C:07:AB:E7:74:8E:6B:63:0D:3D:B9:5E:9B:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e3d231a0-5597-3a08-9e86-7c7079d184e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:ed:08:1a:94:85:e6:b6:7b:7f:ba:90:8d:35:d2:5b:1b:df:
         9b:40:72:4b:7e:3c:e8:8e:f9:21:dd:80:81:b4:ac:12:b5:71:
         5b:7f:30:4e:62:e7:d7:9f:0a:9c:eb:e6:d0:7a:76:19:9f:13:
         5b:3c:cf:21:9d:50:ea:f4:eb:c5:e6:78:92:71:4c:46:37:f6:
         fc:e3:bf:3b:11:6a:2d:b1:62:fb:f6:88:77:50:9a:32:fd:12:
         4c:48:26:40:19:00:f3:b7:52:d4:4c:1b:3e:35:6e:cf:96:f8:
         3f:e8:c7:18:3a:61:f9:ab:97:a4:80:3c:57:a8:26:ce:a8:de:
         ad:83:68:30:dd:d1:74:df:98:78:6b:4a:d1:e4:70:1a:ee:64:
         f2:bf:ea:b7:a3:2b:89:fb:9d:f6:a5:8b:67:b3:63:cf:6d:a6:
         8d:af:da:b8:9a:ad:50:db:87:83:f9:70:a3:c1:c5:c3:f8:f4:
         f2:36:d7:c2:dd:b4:9b:bd:f9:e5:e9:0f:50:aa:e3:a8:82:d4:
         77:88:4c:34:b0:a9:69:91:bb:f4:0b:aa:15:75:b5:83:8c:3d:
         8c:46:a8:a2:05:4d:44:c1:1b:39:5d:7f:13:be:1f:13:0b:d2:
         ed:ba:5c:e9:4d:e2:86:b2:32:ec:83:8d:3c:87:77:5b:9a:a0:
         9c:ae:0f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:07:37 2025 by rpki-client