Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/38038dcb-67bd-3a83-a87a-911214d393a4.roa
File:                     38038dcb-67bd-3a83-a87a-911214d393a4.roa (raw, json)
Hash identifier:          RpRtx3SPlCfsUTtiKm6CQe1XGfALR+lqXqCwe3VvA1g=
Subject key identifier:   D6:BD:50:4D:20:14:51:A6:16:E3:22:53:44:A2:E2:B1:83:45:6E:A6
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AD23C247C4FA4D26E9A747D80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/38038dcb-67bd-3a83-a87a-911214d393a4.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     397237
IP address blocks:        2001:502:ad09::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:24:7c:4f:a4:d2:6e:9a:74:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=6549f4a3-568c-4a2b-96fd-41540321cd10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:cc:e4:32:a6:84:07:4f:ec:98:e6:14:16:33:
                    59:9c:d6:26:b3:81:3d:f9:4e:17:8f:c1:29:db:93:
                    19:0c:dc:86:5c:70:c5:35:16:8d:00:e1:b1:46:59:
                    ff:4e:4a:6a:d4:a5:a8:c1:3f:0d:27:39:ef:cd:69:
                    91:d9:86:97:26:5e:21:5f:2e:a0:a0:37:b3:11:d7:
                    33:4c:a7:a1:d9:05:ab:68:4a:3d:89:c3:95:05:cd:
                    e8:cd:dd:0d:12:ee:cb:07:c9:12:5c:51:72:e3:46:
                    ca:df:70:11:09:65:70:4e:76:68:fc:37:40:d4:54:
                    5a:7c:d5:93:45:eb:6a:e6:b9:93:9a:d4:b4:f1:95:
                    c4:c7:1d:f9:0a:39:99:10:d7:d3:6b:7d:ff:4e:e6:
                    2a:41:3b:91:93:37:42:f3:25:b7:7a:02:fa:07:17:
                    72:82:04:56:29:fe:25:49:86:00:4c:74:7d:6e:06:
                    a2:56:e2:8e:e2:63:27:23:6c:58:7f:9e:57:cb:dd:
                    6d:bf:d0:29:f1:aa:47:96:7e:5f:b7:ae:79:d1:51:
                    dd:39:7c:02:6c:21:56:55:47:ab:fe:c3:89:81:70:
                    cf:5d:88:70:f9:b8:ff:55:57:09:60:63:5c:1a:2c:
                    f0:d8:64:d6:13:ae:cc:8b:5a:08:62:df:9d:c6:ac:
                    be:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:BD:50:4D:20:14:51:A6:16:E3:22:53:44:A2:E2:B1:83:45:6E:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/38038dcb-67bd-3a83-a87a-911214d393a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:ad09::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:ed:5e:79:cb:81:f0:72:2a:72:d8:9c:21:f6:ec:b4:6d:10:
         47:88:0b:73:84:9d:d3:c9:fd:db:6a:12:91:6b:ad:71:a5:55:
         75:0e:cf:7a:e0:26:f7:f1:a2:44:3b:90:4a:18:1f:9a:7f:e3:
         db:10:6c:61:3c:68:01:77:8d:4f:d4:69:69:39:6e:04:e7:44:
         d6:b0:31:0e:39:97:e6:cb:0e:e6:9a:7b:1d:67:ee:4d:8f:89:
         84:e6:58:74:d6:85:42:0c:0b:be:b0:a9:4d:0e:64:19:0e:b3:
         44:cb:bc:da:06:2d:61:6e:69:48:52:e1:f2:12:b1:27:b1:76:
         ab:79:06:0d:6b:68:6c:6b:12:0b:63:b9:db:0c:08:07:b7:dd:
         0d:b9:f5:d4:12:99:57:6d:2d:68:77:1c:aa:0f:9d:7e:7b:1c:
         e3:b2:15:3e:ae:d2:98:c6:e4:8d:32:53:d1:1d:74:7d:09:f5:
         06:74:69:3d:20:71:f7:37:28:e5:e1:5e:b6:c9:bd:93:02:08:
         0f:8a:d6:11:c2:8b:fd:03:1e:f6:cd:64:7b:99:43:3c:2d:a8:
         6e:9e:ab:91:6f:61:ce:a5:bf:8c:fd:07:92:a7:a5:98:6c:b5:
         3e:ec:d9:48:c5:f0:50:08:d6:8a:1c:c6:f2:1b:25:b6:f8:36:
         37:c9:75:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:32:08 2025 by rpki-client