Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/02926569-f229-3c38-a5b9-babb7a6f76bd.roa
File:                     02926569-f229-3c38-a5b9-babb7a6f76bd.roa (raw, json)
Hash identifier:          UE1SP1FB6X8uHAP7hJ4qIFWgv79QDOL8uEe/Chc/bUs=
Subject key identifier:   5F:E5:CF:A7:18:A5:9D:8E:8C:5C:97:73:80:50:1B:26:5B:0C:31:26
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AD23C22AF7C83207FCA037CC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/02926569-f229-3c38-a5b9-babb7a6f76bd.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     12008
IP address blocks:        2001:502:ad09::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:22:af:7c:83:20:7f:ca:03:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=57c40713-f569-42bf-b3a8-21c374ad6825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:59:59:7e:e3:a7:34:82:fe:9d:80:ea:1d:a7:
                    24:b8:48:23:19:71:36:f3:1a:6f:75:69:92:30:bd:
                    2d:06:7e:4d:fb:9f:c9:a0:d2:17:6c:35:ec:0c:70:
                    22:67:0e:09:e6:dc:5e:69:c5:96:f9:36:e5:33:fa:
                    f8:69:bc:e3:81:9e:8f:76:c4:80:63:e1:01:2d:66:
                    78:ec:db:34:79:71:d3:6c:23:de:fb:5b:c3:70:83:
                    f0:81:37:a2:c2:0d:ae:ca:79:e0:20:aa:99:e4:e5:
                    38:6b:04:02:67:37:38:27:e9:c8:31:b8:17:60:bc:
                    06:61:2c:c9:11:aa:19:4c:39:d3:38:74:89:f1:68:
                    d7:f4:fe:9e:eb:64:62:cf:09:9d:2c:40:14:ea:c5:
                    38:95:f0:63:3e:f6:ee:8b:d5:61:66:39:1a:80:35:
                    4d:f7:4a:aa:41:60:1c:46:dd:11:2b:3b:7f:fc:28:
                    77:4d:2e:ab:bb:d5:cf:b8:a4:31:ab:f5:3a:bc:73:
                    b9:0b:1c:95:70:0b:4d:6c:f1:fb:61:9a:ef:e5:da:
                    38:45:34:60:1d:94:25:57:11:c5:e7:6c:f8:df:4a:
                    c2:b7:00:11:78:e4:1d:3a:96:18:6e:24:63:bd:ba:
                    5e:db:a8:71:7f:34:fe:13:cb:83:20:ff:4b:6d:f4:
                    6d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E5:CF:A7:18:A5:9D:8E:8C:5C:97:73:80:50:1B:26:5B:0C:31:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/02926569-f229-3c38-a5b9-babb7a6f76bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:ad09::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:40:c9:53:b2:c1:18:89:65:10:e7:3f:6a:ed:54:21:a2:22:
         8e:29:e7:1d:d3:51:78:bf:21:47:3e:99:3e:8d:ce:16:84:87:
         85:2a:08:49:7a:18:35:3f:fa:09:c6:95:6d:46:d6:6e:27:c2:
         5e:56:dc:c1:4c:e9:99:40:60:bb:5b:03:b4:3d:79:61:19:03:
         90:8e:2c:5f:9e:c7:e2:1c:cb:64:86:6c:bf:1a:4e:9a:da:49:
         ad:5b:38:84:79:74:bf:02:17:17:39:50:f7:9f:dd:3b:59:62:
         3e:8d:ac:b7:a0:69:a5:8e:cc:21:78:6d:7d:4a:49:29:99:ac:
         af:c4:e3:68:dd:75:77:a2:2d:97:0a:0b:e8:84:30:c9:82:20:
         65:a9:a8:08:28:3e:7e:da:94:74:b4:f2:23:c9:ff:fa:bb:ea:
         ea:ad:5c:10:c8:8e:49:8c:7b:57:47:f5:ee:8b:71:d4:26:45:
         20:db:4a:43:ea:fc:c3:61:44:ef:21:f6:30:18:52:22:5f:77:
         b7:58:66:0b:29:1f:43:e1:23:76:46:7b:1c:56:8c:91:f1:b8:
         4c:13:e3:07:e3:b2:e3:24:25:1c:ec:59:96:f3:42:3e:a0:cd:
         6c:fb:70:54:16:6a:43:e9:67:ef:0b:75:32:d4:08:6b:c7:8d:
         c6:d5:70:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:36:41 2025 by rpki-client