Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/04f69985-20b1-3d15-8e6e-5c30880d251e.roa
File:                     04f69985-20b1-3d15-8e6e-5c30880d251e.roa (raw, json)
Hash identifier:          /IzIambMiKtcf+ell9OQyNxH0qbB0KvMjf6W/0V5Ef4=
Subject key identifier:   C4:24:44:36:C1:3F:21:24:E8:AC:C0:50:E2:8E:F5:4B:BD:CA:4C:2F
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AE5C6858502E5F97C17B3F200
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/04f69985-20b1-3d15-8e6e-5c30880d251e.roa
Signing time:             Mon 18 Aug 2025 13:00:41 +0000
ROA not before:           Mon 18 Aug 2025 13:00:41 +0000
ROA not after:            Sun 16 Nov 2025 14:00:41 +0000
asID:                     397225
IP address blocks:        2610:a1:3300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e5:c6:85:85:02:e5:f9:7c:17:b3:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 18 13:00:41 2025 GMT
            Not After : Nov 16 14:00:41 2025 GMT
        Subject: CN=eb564a20-b0d1-4adc-955f-ff0e04ca373c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:78:31:16:9d:21:d4:83:c5:82:74:bb:74:b3:
                    7a:66:97:09:b9:92:39:3b:bc:79:4f:c8:d4:f4:02:
                    47:d8:3e:bb:d4:a3:1c:41:21:4a:05:c9:ac:93:4b:
                    73:91:5f:50:43:5f:6b:04:e9:ac:5b:1f:be:52:e4:
                    35:98:92:53:46:38:53:71:d7:39:50:8d:93:f0:58:
                    59:f8:ec:c1:a3:79:37:47:aa:e9:db:18:50:10:96:
                    e4:5f:a6:92:03:70:93:51:7f:22:5a:5e:fa:33:10:
                    91:5a:08:63:e3:85:63:a7:ac:91:83:1e:fe:b5:e6:
                    38:45:13:9b:b5:e1:64:1e:e0:bc:83:0c:78:59:f5:
                    eb:5c:67:b3:9b:dc:67:7e:be:ac:eb:88:75:67:3d:
                    3f:89:5f:b6:2b:87:a7:dd:03:98:6e:47:8a:dd:40:
                    e2:6b:7b:8d:f5:4f:72:12:f2:a9:7f:b9:9f:41:64:
                    83:63:19:62:92:08:d6:e8:b2:1d:9e:7c:f5:4a:fe:
                    72:06:34:e3:2f:43:e2:a5:d3:17:4f:27:48:53:a2:
                    28:0c:83:fc:d2:e6:2a:b6:fd:4b:b3:63:00:a6:dd:
                    ce:3c:dd:63:7f:ac:22:aa:83:c8:e3:e5:d0:af:a4:
                    52:f9:0f:1e:f3:a4:41:5a:86:02:8b:69:0b:1c:0c:
                    41:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:24:44:36:C1:3F:21:24:E8:AC:C0:50:E2:8E:F5:4B:BD:CA:4C:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/04f69985-20b1-3d15-8e6e-5c30880d251e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:5b:3d:61:df:45:3e:dc:c9:c5:a5:85:53:08:98:73:d2:ff:
         bb:28:39:6d:09:8b:a4:28:dc:19:78:2e:9e:e8:a3:b6:f0:0e:
         2b:fe:14:89:85:b9:07:6e:31:c7:1a:9e:9d:3b:bd:17:39:40:
         6a:57:22:1f:42:7d:ec:be:b5:89:01:fe:b7:a7:03:c4:f5:c6:
         57:6b:07:38:75:9a:f9:db:79:5d:95:b2:4a:41:c8:a7:16:d1:
         c0:25:31:0e:15:97:84:5c:d2:64:a1:bd:18:fb:a5:5e:4e:56:
         d0:45:bd:67:9d:57:00:5f:b4:82:61:c5:5d:bd:b9:1b:ea:24:
         e3:d4:84:7f:7d:c1:85:76:b4:0f:4e:5e:ed:c3:8b:11:90:32:
         22:06:0f:e0:4a:1e:be:e1:2b:d8:95:67:10:a7:4c:21:75:06:
         b1:7d:4e:1c:a6:14:19:13:c0:2d:71:3b:72:3f:75:4d:9f:5f:
         17:3a:4a:81:5b:40:59:9c:af:89:a8:83:be:72:1a:9b:b7:58:
         43:fb:74:ad:1d:45:6c:36:da:66:70:c5:52:16:99:de:16:f2:
         d3:32:0b:f0:de:01:55:12:25:d4:86:c2:cb:4a:49:85:98:12:
         20:5c:b1:2e:54:25:7d:7b:08:b1:f3:72:71:13:f6:65:17:5a:
         bf:7b:b0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:48:59 2025 by rpki-client