Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/397c2bc6-5f0c-39b7-82fe-b9fdf8e49434.roa
File:                     397c2bc6-5f0c-39b7-82fe-b9fdf8e49434.roa (raw, json)
Hash identifier:          wAXChFz+16lkNXYo3id0ZmmfTrCymG/je+U4BSWuvho=
Subject key identifier:   5D:A0:E5:4B:A1:3A:35:88:31:E1:CE:35:77:69:7F:BC:9C:2C:8C:AA
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AD23C226D5B1DA33DFC407380
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/397c2bc6-5f0c-39b7-82fe-b9fdf8e49434.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     397240
IP address blocks:        2001:502:4612::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:22:6d:5b:1d:a3:3d:fc:40:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=9f8a95c7-6a4c-4e48-9db2-e71136011746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:64:c8:4b:35:d6:71:7a:38:d3:01:37:f5:ce:
                    23:c0:8f:b7:f2:91:d3:b6:94:0f:23:fd:24:26:be:
                    ef:d4:fd:a4:78:bf:98:38:8e:35:5d:e8:6a:be:fd:
                    4b:ca:f8:a3:c0:66:61:1a:b3:61:3d:a8:5a:30:cd:
                    6b:21:77:de:b5:08:7b:d5:f2:01:7d:ff:bd:54:1d:
                    46:c6:cf:b6:e3:f8:d8:2e:32:cd:f7:8b:cc:45:fc:
                    42:5b:a1:21:e1:2d:78:83:89:15:3d:01:8b:c4:10:
                    ea:f5:59:57:82:23:fc:4b:6f:7a:37:f8:ab:c8:59:
                    fd:1b:62:cf:03:63:50:cc:cb:88:13:e9:01:ac:7d:
                    3d:11:b6:3a:97:b2:a0:81:c3:27:b9:b3:27:d0:15:
                    6d:64:8c:d1:48:04:02:fc:c7:71:b3:8f:8d:f3:05:
                    34:05:30:aa:88:2e:d2:85:34:2c:22:d2:1c:d2:b0:
                    73:db:81:61:b5:9e:67:46:b8:21:5c:1a:a1:9d:11:
                    32:c1:c6:de:3d:7e:7b:9e:9d:28:84:1f:50:a9:64:
                    da:2e:84:2c:68:29:67:b3:90:96:ed:ea:59:f6:c2:
                    4b:e6:5d:9e:83:a3:f2:9f:6c:e8:2b:4d:77:58:bc:
                    c0:23:5b:20:f4:1c:1a:8f:41:0f:f3:af:3e:93:b2:
                    49:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A0:E5:4B:A1:3A:35:88:31:E1:CE:35:77:69:7F:BC:9C:2C:8C:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/397c2bc6-5f0c-39b7-82fe-b9fdf8e49434.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:4612::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:f3:cb:2b:3f:e9:79:f7:bb:c5:36:ae:e4:9b:5a:b1:25:39:
         6b:25:99:0b:bf:83:6c:48:a1:c2:43:f6:26:2e:50:ea:7f:29:
         09:89:6f:c0:54:ae:6f:8e:0a:66:88:71:c8:fd:5d:17:fc:f0:
         c8:4e:0b:93:58:ef:f6:70:d3:a7:20:b2:60:51:4c:23:3a:1e:
         a7:69:09:e1:92:a7:59:e4:d0:8e:61:44:1f:8b:53:d3:2a:f3:
         76:4a:54:45:5a:f5:30:ee:b7:dd:e1:5a:ea:ce:4d:27:d0:7c:
         58:2f:39:ce:83:4b:5a:26:24:0c:49:fd:b4:1b:a5:37:85:07:
         7d:8b:a1:89:a6:fb:a8:18:a9:8f:65:1d:72:40:92:c1:fb:97:
         37:23:7a:17:3a:86:89:2a:51:16:73:c2:ef:15:49:50:d9:fb:
         7f:c9:69:23:ae:5c:c6:4e:88:2f:d1:0a:09:b2:81:04:6c:12:
         61:85:06:f7:6c:79:c5:16:fd:1c:2f:db:f4:44:8a:f8:2f:4e:
         7e:b4:94:53:3e:bb:04:4e:65:5b:c5:37:6c:3b:67:14:aa:b9:
         a0:02:6e:90:41:9a:c4:88:e4:1a:54:b3:e2:3d:2b:2e:53:28:
         17:cf:9e:a3:38:8b:95:c2:98:d3:9f:a2:4a:17:5c:b4:17:0f:
         62:ed:9c:0c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErSPCJtWx2jPfxAc4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk
OWY4YTk1YzctNmE0Yy00ZTQ4LTlkYjItZTcxMTM2MDExNzQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGTISzXWcXo40wE39c4jwI+38pHTtpQPI/0k
Jr7v1P2keL+YOI41Xehqvv1LyvijwGZhGrNhPahaMM1rIXfetQh71fIBff+9VB1G
xs+24/jYLjLN94vMRfxCW6Eh4S14g4kVPQGLxBDq9VlXgiP8S296N/iryFn9G2LP
A2NQzMuIE+kBrH09EbY6l7KggcMnubMn0BVtZIzRSAQC/Mdxs4+N8wU0BTCqiC7S
hTQsItIc0rBz24FhtZ5nRrghXBqhnREywcbePX57np0ohB9QqWTaLoQsaClns5CW
7epZ9sJL5l2eg6Pyn2zoK013WLzAI1sg9Bwaj0EP868+k7JJTwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFF2g5UuhOjWIMeHONXdpf7ycLIyqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMzk3YzJiYzYtNWYwYy0z
OWI3LTgyZmUtYjlmZGY4ZTQ5NDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAkYS
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACbzyys/6Xn3u8U2ruSbWrElOWslmQu/g2xIocJD9iYuUOp/KQmJ
b8BUrm+OCmaIccj9XRf88MhOC5NY7/Zw06cgsmBRTCM6HqdpCeGSp1nk0I5hRB+L
U9Mq83ZKVEVa9TDut93hWurOTSfQfFgvOc6DS1omJAxJ/bQbpTeFB32LoYmm+6gY
qY9lHXJAksH7lzcjehc6hokqURZzwu8VSVDZ+3/JaSOuXMZOiC/RCgmygQRsEmGF
BvdsecUW/Rwv2/REivgvTn60lFM+uwROZVvFN2w7ZxSquaACbpBBmsSI5BpUs+I9
Ky5TKBfPnqM4i5XCmNOfokoXXLQXD2LtnAw=
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:03:43 2025 by rpki-client