Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dec554fa-c1aa-3c06-9f62-6d8ed708df23.roa
File:                     dec554fa-c1aa-3c06-9f62-6d8ed708df23.roa (raw, json)
Hash identifier:          pEkA9KyEFn/UELoZxALmLYG+mAkAm16zyXiRk4hfVGA=
Subject key identifier:   7D:9B:0F:46:A8:B7:A2:F6:0E:BA:C5:50:B1:42:E2:37:46:EC:4F:F0
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B64CE39BFDCBD887A673F0880
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dec554fa-c1aa-3c06-9f62-6d8ed708df23.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     12041
IP address blocks:        2001:500:53::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:39:bf:dc:bd:88:7a:67:3f:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=305b8b25-e5f8-4a21-a610-c223afb8f497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:30:e0:cf:73:66:32:79:c8:59:b4:91:99:d1:
                    06:0d:5c:e9:c9:51:78:0b:2b:78:64:f7:91:92:02:
                    3d:80:aa:86:91:92:fc:f4:83:01:5f:d6:f5:fb:8a:
                    d5:8b:48:16:43:97:cc:6b:0c:37:d6:04:27:e2:27:
                    ee:f1:6c:aa:4a:3c:b9:45:bc:e7:ff:ac:6f:63:90:
                    f3:49:d2:4f:fb:09:ce:ef:9c:19:88:4e:73:e2:ba:
                    de:ee:fb:f6:06:e8:cb:72:4b:9f:5d:e8:01:88:31:
                    44:4a:7e:f8:23:8d:90:93:c6:21:47:2b:0f:6c:ab:
                    a3:1b:ac:56:dc:d2:21:06:dc:39:f2:8d:52:10:6e:
                    f6:92:0c:d7:41:dd:ed:69:16:58:45:db:a5:0b:e0:
                    c5:d2:20:9f:f7:a5:03:fc:f8:3a:0a:48:4b:bd:11:
                    cc:da:cc:41:fc:36:ed:94:05:27:d9:bd:1f:c6:bd:
                    3c:d0:bd:21:dd:13:5d:aa:54:7d:2c:f7:51:1d:cd:
                    5f:87:42:b4:83:5a:9e:96:c3:74:90:ae:26:12:f8:
                    40:42:cb:fe:5a:25:2d:79:c4:d0:86:37:00:34:10:
                    71:a5:9c:54:29:18:ef:6f:8d:a8:a0:ac:f6:4b:5d:
                    df:51:0d:a1:3e:ce:db:50:25:a8:ce:fe:a2:ac:ce:
                    5c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:9B:0F:46:A8:B7:A2:F6:0E:BA:C5:50:B1:42:E2:37:46:EC:4F:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dec554fa-c1aa-3c06-9f62-6d8ed708df23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:53::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:53:25:0d:5d:98:ff:06:2f:45:60:69:ad:57:a2:3f:fa:70:
         80:93:d7:71:67:23:fe:8c:9f:ab:d2:a2:05:ab:5a:33:79:fc:
         e8:20:7d:13:8d:a3:18:37:03:b8:e6:02:ce:a5:60:57:24:34:
         e1:cb:bf:c9:aa:b4:e3:c4:a3:e4:c1:c3:08:eb:61:01:62:7a:
         ed:63:d2:fb:28:c7:1e:f0:e7:f8:25:f3:b4:7d:eb:ca:2e:f9:
         6a:d0:b7:57:3a:ee:53:bf:8e:5f:d8:cb:b2:2e:94:6b:d3:40:
         91:86:ce:65:88:b2:5d:27:96:63:d7:e4:d4:18:21:15:8b:1d:
         d0:13:c8:cd:56:58:5b:43:de:aa:d9:69:f7:ce:ba:64:8d:62:
         f6:35:fc:f5:bd:fb:9a:e0:53:8c:ba:c5:ac:23:f0:3f:40:cc:
         f6:23:b8:c4:0c:3d:ef:f5:2e:9b:c5:b1:85:23:80:a9:36:37:
         8a:77:c1:13:13:6e:b0:d7:a0:1f:60:4b:17:01:88:f5:d9:63:
         35:06:05:0b:a0:5e:a7:31:32:5b:af:d5:a2:5d:9d:95:0e:1a:
         51:dc:1b:b3:b2:7b:26:75:e6:94:61:0f:a9:cd:6c:1b:c1:ce:
         8b:68:4a:13:dd:69:47:36:cf:14:2e:9d:a5:1e:7c:04:b3:f6:
         ef:fa:d3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:54:19 2025 by rpki-client