Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f99acc95-21c9-3a5e-bb23-a6b58b0c4ba2.roa
File:                     f99acc95-21c9-3a5e-bb23-a6b58b0c4ba2.roa (raw, json)
Hash identifier:          ngRNHejEWNu7H8Pau2Rx7vnbsx0cb5SyLPyozjpbv0w=
Subject key identifier:   49:2C:DF:51:03:7A:E2:D2:67:E4:70:35:32:E1:03:5B:B4:1C:3B:2E
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584B715CFEFDA329F6C196717200
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f99acc95-21c9-3a5e-bb23-a6b58b0c4ba2.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     7029
IP address blocks:        2604:cb00:25::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:fe:fd:a3:29:f6:c1:96:71:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=c6914a89-11bd-4ed9-a2bb-f00ac79119a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6c:b2:68:cb:9c:3e:f2:46:82:8e:fa:13:41:
                    c5:a8:a4:ba:a1:ef:2c:fb:b1:74:5b:7f:52:5d:e3:
                    8a:9e:be:11:7b:4b:19:b6:5b:72:4c:54:25:9a:2d:
                    c7:b4:86:c2:51:57:97:41:55:ae:23:bb:ce:3d:d6:
                    5a:ae:80:ef:e6:2b:3f:87:1b:07:7e:f6:f9:1b:3f:
                    6d:e8:65:3d:cb:44:2a:68:20:5c:99:42:ec:98:26:
                    56:23:8b:1e:8a:85:37:20:f7:18:08:74:61:49:1c:
                    88:d0:73:07:1e:73:0d:bc:53:61:1a:b9:97:17:2f:
                    9e:a9:6f:e7:e5:c6:be:da:84:40:4e:b4:da:e5:fd:
                    20:fb:79:3f:ce:39:09:27:1d:a2:d0:92:14:27:ab:
                    e4:dd:a2:5f:5a:75:96:46:86:1b:69:ee:85:96:7f:
                    58:da:e9:0c:8e:d1:53:c7:46:6f:1b:be:df:91:5d:
                    e7:94:60:9d:84:41:2e:06:87:d7:8e:35:3e:6c:0b:
                    4f:6e:ec:07:e1:ef:a3:80:59:a5:59:95:64:6f:c0:
                    a9:c4:04:97:35:3b:0f:aa:8c:2e:24:d1:b3:3d:6b:
                    19:19:c0:81:16:74:70:7b:91:10:ad:41:ec:c5:68:
                    0d:97:72:b9:66:5b:e1:8c:77:b2:f9:e4:60:e0:91:
                    ca:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2C:DF:51:03:7A:E2:D2:67:E4:70:35:32:E1:03:5B:B4:1C:3B:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f99acc95-21c9-3a5e-bb23-a6b58b0c4ba2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cb00:25::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:95:61:ce:2c:55:3a:1a:c2:1c:91:4d:90:82:9d:83:bb:bd:
         6e:19:ac:64:0d:08:4c:9b:dd:88:f3:36:59:ca:1b:5f:9a:ce:
         4a:a2:f6:9e:90:d8:f1:0c:6e:07:e6:bf:a6:75:13:07:57:9c:
         b2:6d:d0:9c:31:ce:93:20:1b:ea:2e:56:4a:65:eb:4b:e2:b2:
         75:28:1c:49:6f:38:f7:48:1d:eb:84:a1:fa:1f:5f:c3:ba:a0:
         a6:bd:b6:b7:e6:9e:86:db:9b:36:e2:3c:7c:b3:50:38:74:05:
         67:7d:77:44:09:75:c9:0e:48:57:31:fd:ee:6f:12:cc:49:5c:
         4a:1d:91:8e:36:0d:3c:42:73:de:2f:95:b6:e9:d1:48:94:27:
         ec:7d:95:93:78:16:5c:20:d8:66:75:d5:c5:ce:3f:11:70:93:
         c7:05:e0:ed:fa:4a:dd:6c:68:0d:5c:e7:12:fe:b0:ee:04:ff:
         28:d1:46:17:95:d8:5c:44:99:aa:53:3c:40:4c:13:ce:2a:b2:
         eb:36:8e:d0:1e:de:cf:78:54:fa:78:63:0c:fa:e2:17:06:e1:
         c4:08:9e:9a:ed:48:d6:fb:e9:59:9d:25:75:21:75:e5:75:59:
         78:ff:06:a9:ae:b4:53:c2:ed:7c:d3:fb:af:12:1b:ab:28:a1:
         b3:c3:ad:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:54:21 2025 by rpki-client