Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS49981.roa
File:                     AS49981.roa (raw, json)
Hash identifier:          m8a/J3p8oS/gtwspe+HSOdLXnpAEXl8XA6CNCgofHcM=
Subject key identifier:   18:29:24:96:96:24:7F:6B:53:E9:43:80:76:8B:1E:F8:1D:B6:F2:04
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       20D0AB9732B9D4AE3000A579717C9893CFFAEF0B
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS49981.roa
Signing time:             Tue 07 Oct 2025 16:11:12 +0000
ROA not before:           Tue 07 Oct 2025 16:06:12 +0000
ROA not after:            Tue 06 Oct 2026 16:11:12 +0000
asID:                     49981
IP address blocks:        192.228.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 22:20:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:d0:ab:97:32:b9:d4:ae:30:00:a5:79:71:7c:98:93:cf:fa:ef:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Oct  7 16:06:12 2025 GMT
            Not After : Oct  6 16:11:12 2026 GMT
        Subject: CN=1829249696247F6B53E94380768B1EF81DB6F204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b2:c8:2d:57:82:45:86:7b:25:55:21:de:c2:
                    38:12:71:75:88:26:39:bc:d3:75:ea:6e:dd:0d:fe:
                    6e:94:e8:e4:93:36:be:41:c2:3f:d9:f2:96:d3:8f:
                    bc:be:16:02:c2:15:ec:46:b3:0f:55:96:01:f8:26:
                    a2:d8:07:6d:88:29:d7:b0:08:d1:5a:85:2b:76:4c:
                    61:b0:73:f9:bb:fe:25:3f:52:54:58:76:2f:19:85:
                    9b:c6:e5:9f:67:f2:ed:5f:fa:af:37:b7:db:d7:23:
                    1b:dc:b3:b6:b8:db:8e:49:3e:dc:68:22:10:3c:f6:
                    d7:ac:53:b2:d3:f3:a1:ac:27:a0:96:8a:70:12:2d:
                    c5:8e:ab:3d:5c:f3:c1:82:75:7a:5f:57:dc:55:da:
                    6b:8d:10:d8:7c:4f:f2:e5:3a:43:3d:98:fe:c9:92:
                    12:95:b0:6d:06:50:7e:d9:cd:a2:a7:91:c9:35:83:
                    7c:31:fe:76:fe:6d:0f:6a:4b:16:7d:c8:0a:37:5c:
                    79:e1:b3:41:a1:95:cc:e0:a4:86:e6:1f:63:4f:2e:
                    26:dc:d9:09:bc:dd:62:85:50:66:10:4e:a8:08:d1:
                    b4:4f:31:d7:52:f5:8a:6b:7c:60:5b:f3:0f:12:a2:
                    c5:d0:85:f4:bd:13:ea:df:2a:b1:92:e1:0b:c6:e6:
                    e0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:29:24:96:96:24:7F:6B:53:E9:43:80:76:8B:1E:F8:1D:B6:F2:04
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS49981.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:66:30:5c:f0:63:ae:14:a9:1b:70:80:1f:72:60:68:96:39:
         f0:63:87:ad:d8:95:67:72:cb:ee:13:af:00:3c:82:b9:6d:70:
         15:e5:4f:88:97:98:96:81:2f:5a:4f:ad:ee:6b:aa:34:f2:70:
         53:04:c8:64:4b:58:3c:9f:aa:53:c1:0b:6d:36:cb:03:78:0b:
         9d:ac:c1:75:6c:9e:cd:49:e3:c6:19:cb:5f:0d:3d:12:8a:ec:
         c3:62:6f:ad:44:8d:d9:fd:e5:bd:83:5c:85:ad:c7:21:0e:b8:
         46:fd:de:2e:89:98:a0:b5:d7:8f:46:f6:13:fc:1a:b6:47:83:
         f7:1f:60:42:c0:75:a6:0f:29:31:f6:2f:55:91:5b:68:c2:eb:
         77:69:c4:26:61:f0:4e:07:40:fd:0e:c0:0c:0d:23:c0:b6:a0:
         7f:00:21:cc:09:1a:be:c8:db:00:e8:a2:81:22:42:ec:de:e7:
         3d:e3:a1:69:c8:06:3c:34:c0:14:4f:b4:f4:b6:85:05:83:ad:
         81:9c:db:64:ed:19:68:3e:c3:e4:8e:dd:59:43:f7:55:35:20:
         e3:bf:b7:ca:24:e1:dd:12:4a:5f:91:e7:15:f2:64:18:28:fb:
         81:7a:50:7f:8e:02:71:f6:17:35:40:4a:08:fc:ab:4a:ab:59:
         b3:9a:6a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 20:28:42 2025 by rpki-client