Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/46c5202a-9d84-3a1d-8956-f6014181cec4.roa
File:                     46c5202a-9d84-3a1d-8956-f6014181cec4.roa (raw, json)
Hash identifier:          T7YDzzHa03rSAnMDBPmkveCe8qzND1YyNwewMzouO/E=
Subject key identifier:   63:5C:FE:08:4D:C7:41:3B:56:AC:57:1E:4A:CD:24:6A:22:E6:DA:0F
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B6201E1FE82C1B57B43A97280
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/46c5202a-9d84-3a1d-8956-f6014181cec4.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     12041
IP address blocks:        199.249.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:e1:fe:82:c1:b5:7b:43:a9:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=c25f5cb2-46a4-4b5b-ba8d-24ae25a3ae85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:7e:ec:96:08:fd:01:5f:92:d5:b9:a1:c0:9f:
                    65:58:47:97:6b:d6:00:91:41:a8:9b:4d:84:e6:8c:
                    ae:6d:18:5c:c5:b7:42:19:51:f3:0b:11:a5:da:97:
                    df:eb:f7:65:79:e8:b4:82:1f:b5:ee:ca:f6:02:4c:
                    22:6e:6e:31:42:92:86:dd:2e:e2:38:20:86:0b:08:
                    c5:14:87:56:12:de:e1:de:28:5f:dd:1f:a4:63:cc:
                    c9:af:3c:13:dd:7f:c9:89:ff:2c:08:aa:17:43:4f:
                    95:44:48:ab:07:30:11:2d:f9:a3:b2:b2:ea:2d:85:
                    f0:cc:a4:16:a4:7b:b1:a4:70:16:5a:f4:90:65:ef:
                    87:75:1a:7d:fc:ad:98:85:7b:11:12:e7:ef:63:3c:
                    0d:1e:58:54:2f:ea:2f:8d:45:29:2e:14:c6:38:95:
                    e1:af:a1:df:58:1e:ba:44:7f:80:e3:fb:3c:fe:ff:
                    6a:fb:bf:8e:52:8b:2e:a2:27:f9:4c:1a:9c:68:f6:
                    76:5a:15:fe:80:b2:8c:7c:27:7f:98:89:f2:c8:6d:
                    6f:3e:54:74:49:d0:ae:e6:42:0e:96:7e:67:b4:bf:
                    8d:4d:74:65:40:0b:64:21:79:30:8d:c1:7c:87:e7:
                    69:1d:79:b5:71:8d:3f:de:1f:e2:a1:80:de:13:17:
                    3f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:5C:FE:08:4D:C7:41:3B:56:AC:57:1E:4A:CD:24:6A:22:E6:DA:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/46c5202a-9d84-3a1d-8956-f6014181cec4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.249.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:f5:5a:2f:a3:ca:a8:9a:63:96:9d:47:47:0e:44:34:e0:0a:
         30:03:37:c2:ca:76:a0:3b:54:46:7a:06:6c:94:23:14:8b:25:
         aa:7e:f3:24:f0:37:74:fd:ca:cb:67:40:7f:cb:10:8e:ce:95:
         d8:79:56:38:2a:ed:b2:d3:ab:71:e6:82:f9:e6:4d:5b:22:2e:
         04:96:2c:a1:21:14:39:6b:17:8d:c7:d9:11:09:28:9f:65:b2:
         91:81:21:48:5e:6e:78:3b:33:3e:2d:da:45:58:8f:52:a4:ed:
         03:e4:6c:73:35:46:3e:82:8b:e3:5f:1e:a0:e6:02:b0:ef:56:
         2a:75:76:ee:38:08:39:0e:42:51:d5:90:ab:8c:28:8a:35:97:
         db:ea:63:21:76:d0:36:99:be:ef:67:29:a7:98:7b:dc:69:13:
         f0:e3:86:29:14:52:1a:4e:ba:48:40:25:02:5f:0f:c8:20:dd:
         4f:01:98:84:81:3a:28:8e:9e:33:23:ca:72:0f:ca:0a:f3:f0:
         4a:9b:f4:af:d6:9a:ae:b0:82:61:e9:8e:e2:fe:25:82:28:2a:
         47:3a:70:e7:52:6a:50:fa:b6:30:b9:68:9c:8f:f6:ad:18:f9:
         2b:de:8b:16:7f:3e:db:2c:aa:22:d5:c1:0e:a3:26:17:fb:51:
         8d:cf:22:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:50:53 2025 by rpki-client