Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/81ec4313-2a12-32dc-bcaa-9a736928311b.roa
File:                     81ec4313-2a12-32dc-bcaa-9a736928311b.roa (raw, json)
Hash identifier:          LWXTD7xx5KzlJc1z7h6oR1h7H9UKrKkOaZ981yEuwa8=
Subject key identifier:   FC:4B:FC:87:21:BF:1A:45:60:1A:0D:01:50:4B:AE:D8:9D:A6:7D:0D
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AD23C28A0A9330FC99A879F00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/81ec4313-2a12-32dc-bcaa-9a736928311b.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     397231
IP address blocks:        2001:502:f3ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:28:a0:a9:33:0f:c9:9a:87:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=05b88102-5a5d-4810-a31f-7a9477f4d509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c8:85:e4:de:b9:9a:c6:ac:28:70:93:2b:5f:
                    21:72:c2:88:b3:8d:22:43:c6:3b:83:59:d7:eb:71:
                    55:7f:5c:68:55:f8:53:98:d4:a0:d3:cd:ad:ee:a4:
                    26:5a:8b:d6:31:77:27:0e:fe:a9:d1:34:08:de:0d:
                    b2:0f:57:4b:84:fe:15:95:4b:57:0d:69:00:1e:b1:
                    c7:48:5f:50:89:f1:b9:47:a5:57:6f:a2:4d:b9:98:
                    4f:47:32:f6:41:c1:db:5a:85:a4:75:6c:87:4f:b6:
                    40:5f:68:8d:91:e5:db:0e:45:7c:19:62:b1:64:b6:
                    6e:22:3f:77:d3:b2:db:22:67:7c:37:cb:76:b7:a2:
                    c7:6e:2e:78:98:30:07:60:e4:6c:b1:78:cb:c5:c9:
                    5e:d1:06:b4:1b:85:23:a4:3a:8a:5f:54:95:05:b4:
                    76:84:c5:51:2a:c7:8e:41:d0:a6:57:4a:91:93:93:
                    fe:3c:ed:9b:6c:f3:55:e3:bf:de:d6:1b:16:a5:47:
                    d7:59:df:58:f4:e8:e1:8b:51:9e:29:8b:bc:64:be:
                    ae:fe:fb:c2:66:e1:72:6f:15:47:b3:fc:f1:1c:b1:
                    1e:54:01:21:ac:68:50:5a:c0:83:6e:37:a4:e5:08:
                    b9:69:db:40:7e:e7:ce:4b:86:02:82:20:ae:32:c3:
                    c8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:4B:FC:87:21:BF:1A:45:60:1A:0D:01:50:4B:AE:D8:9D:A6:7D:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/81ec4313-2a12-32dc-bcaa-9a736928311b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:f3ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:74:0f:99:60:a6:f5:1c:46:a6:78:3c:b6:01:56:b3:2c:44:
         c4:7b:e7:02:46:d2:4b:4d:58:4a:2f:86:c2:78:75:86:b1:06:
         2c:e8:15:72:ae:12:20:85:68:0f:08:2a:98:39:8d:4e:a0:71:
         1e:07:c0:74:95:a9:0f:98:34:6d:9c:c5:d1:18:b6:0a:e2:03:
         9a:26:44:43:83:f5:76:d0:8e:3a:19:94:34:cf:30:79:44:c9:
         ee:b8:23:e6:34:56:3a:75:24:26:42:1d:7e:96:52:e7:e0:70:
         60:80:b4:52:b8:e6:c8:44:77:37:49:e6:03:2c:ec:4d:b1:68:
         dd:c0:f4:17:4f:9d:05:a9:38:08:4b:6c:1e:05:c6:e6:2c:0e:
         9a:d2:6a:eb:44:c1:4d:40:07:31:80:dc:16:f5:ce:5a:94:ac:
         df:dc:7e:b9:ce:66:c7:27:fc:11:3f:7f:a6:b2:68:a7:a2:21:
         ec:e7:ba:39:a9:62:88:3f:4d:9e:d9:f4:b4:28:a4:bf:ea:0a:
         6b:55:66:71:eb:25:e2:36:1b:d4:75:a5:8d:1b:03:bf:17:09:
         c4:f7:a4:86:ea:7b:1e:3a:b4:c7:ee:8c:27:5b:f8:4f:8a:4a:
         30:3c:ed:4e:18:13:40:ee:48:da:a3:5c:bd:7a:ac:af:f4:6f:
         aa:6c:34:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:56:39 2025 by rpki-client