Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/84daf953-7ff6-323b-8169-713278400e86.roa
File:                     84daf953-7ff6-323b-8169-713278400e86.roa (raw, json)
Hash identifier:          UawHrf0Bgnt+39+yn4rbSDc/J16jlHaV7CnIQ632XTY=
Subject key identifier:   3D:FB:FE:2A:2A:82:08:99:0C:02:9F:6F:D1:30:22:81:0A:D1:15:D4
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B64CE492D1210BA7787E998C0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/84daf953-7ff6-323b-8169-713278400e86.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     12041
IP address blocks:        2001:500:eb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:49:2d:12:10:ba:77:87:e9:98:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=7d8cd18f-d2c4-4cb1-bc5d-19049d839d2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5f:7d:03:3c:d5:f4:6f:ce:d9:a3:6e:36:1a:
                    83:6e:06:12:ff:3d:9b:89:45:a0:6d:1d:be:f5:c3:
                    16:cf:ac:dc:e7:fe:ef:30:1b:80:5f:0a:18:bb:3e:
                    b3:38:d9:33:8c:53:90:cd:c8:70:fd:ae:5e:ab:c6:
                    c6:c6:27:53:f2:49:cc:02:cf:ec:a1:e6:06:e6:b5:
                    54:1f:75:21:91:ce:02:cf:d3:01:55:49:9d:43:53:
                    68:a6:4f:15:c9:0d:3c:6d:d2:0f:c9:15:69:52:5f:
                    09:b5:db:60:66:92:a3:34:4f:a1:75:eb:bd:ab:37:
                    70:dd:1a:ce:a7:61:5c:70:7f:fc:36:1d:e2:16:dd:
                    a6:1f:66:6e:c6:fa:3e:75:95:8a:2e:1c:4e:b0:e9:
                    fc:c6:bc:7c:76:7b:0f:59:53:ef:da:19:f4:06:b7:
                    79:96:31:d8:40:b6:d0:b4:dd:4f:fb:78:44:30:78:
                    5c:41:f2:f4:e2:13:a7:92:b3:44:c1:cb:85:91:13:
                    3b:a6:28:92:14:72:d3:4a:02:4c:6b:60:b3:d7:18:
                    00:fa:c2:d3:cc:29:30:1b:78:e3:ff:96:93:6a:f5:
                    ba:5e:1e:d5:e4:32:a1:a2:9a:06:38:93:bf:c4:c1:
                    8a:02:08:1c:d8:9c:5c:2c:38:f3:0e:82:47:ff:d4:
                    aa:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:FB:FE:2A:2A:82:08:99:0C:02:9F:6F:D1:30:22:81:0A:D1:15:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/84daf953-7ff6-323b-8169-713278400e86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:eb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:a0:f8:a5:a1:cd:eb:20:d4:b4:87:46:24:6e:05:0c:4c:f0:
         1e:ef:05:a3:50:e9:2b:e1:fc:9b:fd:f8:bf:fd:21:92:5a:fa:
         a1:9f:ab:53:e4:42:c8:c5:6a:24:63:f6:69:13:eb:a8:ad:82:
         2d:8e:60:fe:3c:85:ff:a6:7a:d6:47:5f:25:66:d9:21:af:f6:
         08:83:d6:d2:2b:f1:53:c3:d3:cd:94:39:3d:30:63:8e:e1:49:
         d1:da:79:9e:ed:ff:f7:a8:f0:63:16:8c:91:bc:e2:45:b3:0f:
         0f:37:7c:49:e1:5d:20:12:4e:5b:ae:36:bb:f8:68:24:2d:d6:
         a6:2f:50:cb:0e:6d:21:8a:0d:dd:e8:12:d2:1e:a1:d6:09:62:
         f1:c8:c5:1d:d5:08:12:66:21:f4:d5:17:5a:1c:7b:2f:b5:ef:
         73:83:01:8a:12:96:77:97:2d:6a:53:60:54:91:90:2e:25:9d:
         be:bb:4a:02:10:21:30:95:d2:80:cc:5f:28:d6:fd:02:11:ca:
         4c:28:00:f4:0e:f0:0c:db:29:f3:40:53:96:03:97:6e:92:e4:
         31:bf:d5:5c:1d:db:43:a0:a4:07:3f:db:17:37:01:27:9b:f0:
         45:80:57:62:3d:43:33:ef:06:b6:3d:9a:14:e0:a1:b5:bd:ad:
         02:cf:30:90
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzkktEhC6d4fpmMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
N2Q4Y2QxOGYtZDJjNC00Y2IxLWJjNWQtMTkwNDlkODM5ZDJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp199AzzV9G/O2aNuNhqDbgYS/z2biUWgbR2+
9cMWz6zc5/7vMBuAXwoYuz6zONkzjFOQzchw/a5eq8bGxidT8knMAs/soeYG5rVU
H3Uhkc4Cz9MBVUmdQ1Nopk8VyQ08bdIPyRVpUl8JtdtgZpKjNE+hdeu9qzdw3RrO
p2FccH/8Nh3iFt2mH2Zuxvo+dZWKLhxOsOn8xrx8dnsPWVPv2hn0Brd5ljHYQLbQ
tN1P+3hEMHhcQfL04hOnkrNEwcuFkRM7piiSFHLTSgJMa2Cz1xgA+sLTzCkwG3jj
/5aTavW6Xh7V5DKhopoGOJO/xMGKAggc2JxcLDjzDoJH/9Sq5QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFD37/ioqggiZDAKfb9EwIoEK0RXUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvODRkYWY5NTMtN2ZmNi0z
MjNiLTgxNjktNzEzMjc4NDAwZTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADr
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAE6g+KWhzesg1LSHRiRuBQxM8B7vBaNQ6Svh/Jv9+L/9IZJa+qGf
q1PkQsjFaiRj9mkT66itgi2OYP48hf+metZHXyVm2SGv9giD1tIr8VPD082UOT0w
Y47hSdHaeZ7t//eo8GMWjJG84kWzDw83fEnhXSASTluuNrv4aCQt1qYvUMsObSGK
Dd3oEtIeodYJYvHIxR3VCBJmIfTVF1ocey+173ODAYoSlneXLWpTYFSRkC4lnb67
SgIQITCV0oDMXyjW/QIRykwoAPQO8AzbKfNAU5YDl26S5DG/1Vwd20OgpAc/2xc3
ASeb8EWAV2I9QzPvBrY9mhTgobW9rQLPMJA=
-----END CERTIFICATE-----
Generated at Fri Oct 10 17:54:25 2025 by rpki-client