Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d7b76d36-d31b-377f-98aa-7d8bea972932.roa
File:                     d7b76d36-d31b-377f-98aa-7d8bea972932.roa (raw, json)
Hash identifier:          cnrJ3Vtjlcn+whUKDT1cbPNNGVMafNChaUFp1nwUFfA=
Subject key identifier:   BD:C6:FC:CA:C5:29:D8:3A:B3:66:88:07:6B:E0:5B:88:81:0A:82:3B
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B64CC8DDD4DBDC4B37C514940
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d7b76d36-d31b-377f-98aa-7d8bea972932.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     12041
IP address blocks:        2001:500:d8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:8d:dd:4d:bd:c4:b3:7c:51:49:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=b9ac259a-a70a-44ff-97fb-51228bb7931a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c1:bd:28:97:73:47:77:11:28:c2:40:12:e7:
                    84:d5:6d:79:08:1d:50:d6:0b:e1:8d:0f:28:fd:c5:
                    69:ad:05:22:f3:fb:f0:73:a3:5e:5f:4e:d7:28:20:
                    3f:4d:fb:02:4f:1d:6f:21:bf:f3:9a:30:7c:7a:17:
                    84:4d:eb:f8:d6:72:54:90:24:70:73:bf:9e:5e:41:
                    75:88:d9:e2:0d:08:45:51:db:18:36:e9:06:34:bd:
                    10:a2:78:13:b3:8e:5c:a8:93:e4:0b:b9:b2:a2:f0:
                    51:87:fc:2f:73:ba:b7:17:08:53:e3:55:ca:e6:7b:
                    29:95:bf:9a:f3:88:53:e8:ae:5e:44:34:6f:80:bf:
                    95:ec:68:7d:c7:a5:0d:36:0c:5a:a3:39:4a:25:be:
                    17:47:91:f8:dd:d1:9f:1f:46:09:cb:c5:00:cb:c9:
                    b4:f1:08:a2:0c:3a:d5:cc:63:ed:db:59:fa:84:88:
                    ed:cf:dd:88:b2:a8:f8:d1:a8:60:e1:f3:cc:64:e9:
                    30:48:f9:3c:cd:85:d0:1c:91:cf:df:5b:7e:d1:81:
                    06:75:cc:ff:b9:ad:30:83:6d:d6:21:35:2e:5c:2c:
                    69:8a:1c:81:21:04:75:3d:a7:93:e8:4d:e1:2e:54:
                    e1:dc:6e:8b:8b:4f:58:9a:04:b8:7e:43:a0:12:bb:
                    fd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C6:FC:CA:C5:29:D8:3A:B3:66:88:07:6B:E0:5B:88:81:0A:82:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d7b76d36-d31b-377f-98aa-7d8bea972932.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:d8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:ef:78:43:58:a2:51:d3:2f:23:88:54:b5:81:d5:86:9e:ae:
         0e:cf:d6:2b:72:96:87:a2:95:66:4f:76:f4:af:d9:8d:0a:80:
         ee:ad:95:12:a3:59:b5:52:78:c3:ab:d5:e1:d8:f3:1f:45:52:
         2a:72:65:8e:17:3e:21:86:47:c4:cb:6e:87:bf:a0:f8:77:00:
         01:68:93:99:f5:e3:95:74:23:e7:50:79:e6:70:8b:a7:0e:a1:
         b3:ca:5b:c3:8d:ca:fa:6e:0d:4c:ed:c2:f5:e6:ba:b8:09:52:
         45:47:a0:83:d7:39:3e:e0:88:a3:af:e8:bc:70:7e:6f:89:47:
         17:82:43:5e:05:fb:13:59:fd:89:ae:0b:31:45:d9:4c:24:2f:
         e9:a4:03:14:0b:23:23:ee:50:6f:62:4c:76:10:7f:86:2a:f9:
         89:98:40:ae:6b:7b:c7:fb:46:88:8b:cb:51:39:d3:62:63:46:
         17:15:de:cf:da:37:ee:39:08:98:ae:84:61:81:24:94:8a:d4:
         1e:82:1e:9e:66:d5:7b:ef:d1:78:96:64:2e:aa:2a:02:8f:b5:
         24:cc:39:5e:80:c0:21:a5:e2:ce:d3:18:5a:8f:24:06:d7:7d:
         9f:70:56:5a:8a:36:79:1c:be:6f:22:20:4a:bf:90:59:ba:c2:
         e4:7e:93:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:58:31 2025 by rpki-client