Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bdbfb896-a10f-3b73-8710-07fa0dd42fb2.roa
File:                     bdbfb896-a10f-3b73-8710-07fa0dd42fb2.roa (raw, json)
Hash identifier:          TxrvAnfn8uocyJI81S54Z/llzXI8gN4lqWXVe6unORQ=
Subject key identifier:   B9:9A:00:79:7F:77:20:EE:5D:0C:96:4F:1A:AF:27:FF:E7:68:91:0C
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B63674ECCD591D686D84048A0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bdbfb896-a10f-3b73-8710-07fa0dd42fb2.roa
Signing time:             Thu 02 Oct 2025 13:00:40 +0000
ROA not before:           Thu 02 Oct 2025 13:00:40 +0000
ROA not after:            Wed 31 Dec 2025 14:00:40 +0000
asID:                     207266
IP address blocks:        2001:500:46::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:67:4e:cc:d5:91:d6:86:d8:40:48:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  2 13:00:40 2025 GMT
            Not After : Dec 31 14:00:40 2025 GMT
        Subject: CN=6347e907-2fe9-49f3-9c27-a9ec55549bb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:06:cf:9f:01:9c:6a:55:c9:b2:9a:66:b1:d9:
                    90:5c:93:c5:97:49:6c:df:44:48:5c:03:27:e9:53:
                    41:3e:d0:27:e5:6c:a3:0c:79:6c:38:0d:38:45:cc:
                    25:dc:15:be:30:bf:de:de:bd:95:19:78:d1:32:cf:
                    4c:ca:2e:5c:bb:30:8f:29:10:e1:2b:f6:21:98:68:
                    80:0f:92:b8:b1:1d:c1:3a:18:52:c3:90:bd:3c:ab:
                    5e:7d:0c:59:b6:7b:d1:4b:d6:bc:6e:76:08:ed:62:
                    2f:6d:f6:09:58:fb:68:b5:cc:ed:91:9a:b9:14:b2:
                    5a:c8:59:65:ba:3f:74:b4:4e:b9:7c:89:4e:ac:cf:
                    de:66:68:25:5f:37:fc:58:db:78:8c:b6:91:77:34:
                    16:44:09:54:85:bf:a8:cb:0d:c1:a9:f0:31:fc:58:
                    da:21:e2:82:98:09:f6:b4:d8:18:f1:99:ef:5f:c1:
                    04:4a:7f:4d:b1:82:ec:2c:e1:dd:fd:db:63:b2:82:
                    04:74:2c:18:74:a3:3b:00:d7:2f:bc:f5:ff:09:fc:
                    37:24:19:10:d0:88:14:7d:7d:59:7d:8a:73:e8:44:
                    d6:2b:78:74:86:b4:70:81:fe:75:43:5a:96:d0:7f:
                    d2:19:17:e7:c2:5b:13:34:df:bf:5c:71:5f:12:6c:
                    c8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:9A:00:79:7F:77:20:EE:5D:0C:96:4F:1A:AF:27:FF:E7:68:91:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bdbfb896-a10f-3b73-8710-07fa0dd42fb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:46::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:a1:97:73:5c:c3:a9:49:92:d8:26:26:a7:90:20:12:24:be:
         30:96:c5:f1:52:91:3d:2c:59:b8:9a:34:7c:ce:f4:cd:45:5a:
         14:ba:5f:eb:0f:ed:1f:04:0a:99:7a:a4:a4:00:9c:63:db:f7:
         c5:11:d9:ed:0b:8e:e2:20:87:76:9d:4b:dd:d8:88:6b:21:86:
         e0:95:1b:19:82:c5:68:ca:6f:de:d2:76:11:d1:23:79:6a:ff:
         f2:c2:6e:cf:4b:bc:c5:22:0e:f4:21:74:b2:ce:74:a5:db:0c:
         14:10:99:85:ae:17:33:98:44:eb:a7:7f:af:b9:e0:0e:03:d9:
         89:50:0f:78:60:97:95:1c:13:20:97:b5:8a:9b:e8:04:9a:70:
         a5:fb:7a:d1:7b:5b:88:79:18:20:9e:88:33:dd:3d:5d:ea:67:
         95:42:2a:8d:b4:d9:6c:8b:2c:10:61:03:0a:3a:f2:ec:d1:f9:
         cc:8b:c1:c0:db:d5:b4:a4:c0:2f:23:a2:eb:d2:2b:ab:4f:3d:
         a0:05:6f:11:b9:b3:1d:28:25:7b:58:c4:9e:1d:85:83:c5:70:
         4e:51:56:fa:84:f3:f3:1a:cd:db:26:a0:b8:5d:ac:81:a3:44:
         52:3d:14:69:8e:93:36:7c:48:20:02:cb:0a:5e:97:45:5f:bc:
         5a:9f:15:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:16:36 2025 by rpki-client