Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/68b06a59-7573-3d86-88a8-a202841b76ed.roa
File:                     68b06a59-7573-3d86-88a8-a202841b76ed.roa (raw, json)
Hash identifier:          EBy6J48a3zy/qSB7OP95uAzi01gfihKQEJvpFkFidqY=
Subject key identifier:   10:20:B5:A1:DE:76:7B:57:04:EC:DC:1A:BC:05:6F:D7:24:E3:E3:F6
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AD23C222BCC2AEA35B469A300
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/68b06a59-7573-3d86-88a8-a202841b76ed.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     397236
IP address blocks:        2001:502:4612::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:22:2b:cc:2a:ea:35:b4:69:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=6c795cb9-f977-45fa-a2b7-49c3c55c1cd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8c:5b:58:25:43:8a:59:5d:9e:1d:9f:b4:05:
                    d1:9d:b4:3d:85:56:74:91:a5:4f:01:3f:cf:ca:75:
                    03:59:47:7a:b0:02:be:2d:aa:a4:87:b2:15:a8:a8:
                    8f:70:df:1a:39:d3:00:1e:f9:42:c9:ab:8c:73:7d:
                    63:c1:11:1c:7a:f2:8c:fb:c9:5c:da:a2:b5:21:d1:
                    52:dd:5b:1b:63:2d:9b:44:97:23:9c:75:9c:10:a1:
                    e2:44:13:73:8a:b5:51:aa:46:0e:b6:98:12:97:74:
                    64:71:c5:65:49:61:62:1c:92:72:b3:57:41:d5:6f:
                    08:ef:01:89:88:82:63:a4:fe:c8:00:0d:87:ae:75:
                    4f:28:12:a3:20:6b:9f:49:77:af:27:85:76:83:f5:
                    b0:ef:fc:5d:2f:2a:c5:3e:cd:1e:d8:ca:fa:a8:03:
                    b2:e4:84:f3:dc:5d:1e:84:0d:07:96:36:a3:ff:df:
                    55:bb:86:75:c9:79:82:7c:92:16:40:16:c4:7f:90:
                    41:5f:07:5f:8f:57:25:6e:5e:20:a5:69:42:6d:1b:
                    f1:3e:a5:ca:68:7d:56:5f:f6:3b:a0:a2:81:a8:1c:
                    8f:13:a6:ed:0a:9f:f7:49:2f:02:b4:cf:09:fe:a6:
                    2a:9a:eb:c1:ff:4a:36:20:69:27:c9:bc:51:bb:70:
                    5f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:20:B5:A1:DE:76:7B:57:04:EC:DC:1A:BC:05:6F:D7:24:E3:E3:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/68b06a59-7573-3d86-88a8-a202841b76ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:4612::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:8c:d4:6f:97:db:50:c6:d7:d3:ad:8e:b1:57:94:ba:f7:e6:
         50:6e:15:65:76:bc:38:23:e4:6e:ac:f5:31:6c:3d:c0:6a:52:
         e9:5c:f8:c7:65:ec:62:0c:20:db:47:29:c3:e6:f3:8e:2b:04:
         ad:3c:1b:71:7d:80:e4:41:e3:1a:86:67:4c:92:fc:43:7b:74:
         d6:c0:6e:e5:15:46:ce:80:c2:68:b6:0b:c6:43:18:5c:42:9d:
         d2:cc:61:3c:3e:0a:37:f0:19:04:88:8f:74:13:ba:80:39:de:
         c3:13:5b:09:ab:49:56:90:d6:ce:dd:f2:87:bb:38:1b:ad:b2:
         04:38:87:25:05:2e:58:e1:92:dd:c5:b6:3e:b6:ee:83:fc:31:
         41:f8:2a:93:67:70:3e:fd:de:2c:e2:b8:e4:0c:0f:3a:fa:ed:
         2e:6e:18:f1:97:81:71:79:c3:e7:a3:b6:e6:cd:f0:bf:73:d2:
         c6:d2:de:93:42:e1:07:9b:02:c5:29:e6:26:df:aa:ce:2e:fb:
         63:ff:b1:ee:96:78:ee:71:22:06:b4:52:03:5b:98:4a:f3:27:
         f6:7d:23:11:a1:00:f4:87:43:e2:10:c6:39:0b:c7:ef:b5:dc:
         7a:38:ae:c9:a8:3c:75:af:55:18:b3:e3:95:56:bb:11:16:6d:
         d8:6f:ef:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:51:51 2025 by rpki-client