Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/71ab0c27-f798-3a55-a229-41afc8abf75a.roa
File:                     71ab0c27-f798-3a55-a229-41afc8abf75a.roa (raw, json)
Hash identifier:          9yn4XcokRX10aDoJQIpsMm+bvwTwyhmWWQm79N1P8Os=
Subject key identifier:   26:2E:92:00:2B:14:AC:24:F7:B1:82:49:7E:B0:2B:74:19:9D:81:D0
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AE5C68709A9C6049D5B0FB6A8
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/71ab0c27-f798-3a55-a229-41afc8abf75a.roa
Signing time:             Mon 18 Aug 2025 13:00:41 +0000
ROA not before:           Mon 18 Aug 2025 13:00:41 +0000
ROA not after:            Sun 16 Nov 2025 14:00:41 +0000
asID:                     399155
IP address blocks:        2610:a1:3300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e5:c6:87:09:a9:c6:04:9d:5b:0f:b6:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 18 13:00:41 2025 GMT
            Not After : Nov 16 14:00:41 2025 GMT
        Subject: CN=efb6e7bb-136e-4b53-9523-5cefaa91b66a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ea:5f:a8:2f:f9:c1:ac:f8:27:cc:5b:13:5b:
                    ff:13:02:52:cd:62:6f:c0:4b:01:6a:94:64:16:59:
                    ce:e1:c2:ab:94:23:8b:f3:b8:7c:72:f5:b6:9d:70:
                    ba:89:58:a9:69:25:12:98:42:f5:82:86:8f:66:79:
                    70:73:45:3c:03:6d:6c:95:7d:33:1a:08:11:94:aa:
                    6d:39:74:3a:3f:b3:a3:8a:b3:d0:40:7a:35:44:15:
                    59:de:b4:da:48:b5:4a:4c:73:2c:e5:dd:c0:05:32:
                    a7:2c:00:9a:43:ac:5c:37:30:e3:56:b7:b2:1e:cf:
                    12:4e:6a:cc:03:62:0b:b2:1c:ce:3f:d0:a9:cf:d0:
                    b6:2b:43:cc:29:ec:aa:59:4a:b1:bd:a9:82:80:1b:
                    55:df:34:87:73:d6:d1:f8:d4:9b:a7:dc:06:71:2f:
                    74:e3:62:cb:e1:48:88:aa:42:e0:5a:37:d6:7e:4d:
                    1c:77:92:ff:3b:aa:ab:bb:b5:b1:90:e1:53:7d:13:
                    c0:7e:1c:fc:15:69:d7:1e:32:54:b6:2b:aa:43:6e:
                    64:53:b3:dc:87:7b:ee:d7:cd:58:4d:24:ed:f7:20:
                    5c:f2:d9:26:a3:d1:be:13:78:06:eb:27:ab:d0:9c:
                    2f:b8:5e:24:7d:88:82:0e:0b:e6:70:4e:d1:d0:51:
                    7c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:2E:92:00:2B:14:AC:24:F7:B1:82:49:7E:B0:2B:74:19:9D:81:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/71ab0c27-f798-3a55-a229-41afc8abf75a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:72:05:53:7b:e8:58:17:9d:51:bb:4e:48:ee:e6:4d:aa:88:
         4c:0d:a0:03:ec:f7:9b:06:48:fa:30:94:ce:9d:28:ee:1d:43:
         67:25:e1:83:ce:24:9c:74:39:75:d2:ac:59:d8:74:f9:92:fa:
         be:7e:25:bc:bb:80:29:e0:80:88:8b:3d:9c:f5:2b:72:cf:56:
         0f:05:75:c2:83:23:ad:9a:29:e1:42:09:f9:10:0d:48:db:b7:
         78:f7:fa:83:48:44:4a:ca:24:8f:df:7e:3f:29:ee:db:2a:15:
         8b:ab:4b:60:8b:c7:ed:5b:7c:2b:e9:0a:e6:70:77:68:37:08:
         cb:25:f9:a2:cf:62:58:63:68:8c:59:1b:00:65:71:ba:bf:93:
         e4:2e:69:af:d5:9b:e2:44:5a:4f:f1:44:be:06:51:9c:c3:66:
         76:9a:d0:a8:c4:f4:c3:f7:4b:30:39:14:17:37:52:36:89:4a:
         07:ce:e2:9f:7b:a0:c4:b5:02:47:46:f5:a4:4e:b2:19:a8:a4:
         db:3a:fc:81:39:70:0a:51:cf:af:2f:9b:90:40:a2:d8:cf:6c:
         1b:c0:4f:20:ac:1c:57:e6:dc:0e:d7:76:6b:85:e2:1d:76:30:
         a8:39:b9:cd:95:c7:5f:d0:0b:28:80:da:59:0a:c4:53:cf:9e:
         26:87:a9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:00:42 2025 by rpki-client