Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8cdf7e74-2091-3b0e-a650-3ebe2b9f6c4b.roa
File:                     8cdf7e74-2091-3b0e-a650-3ebe2b9f6c4b.roa (raw, json)
Hash identifier:          6TkaXSPaOB0BVCABwnOqR8yqJB/t97/bzaD/HnjBqX8=
Subject key identifier:   09:80:10:7F:22:E0:C5:41:06:EA:DC:30:F5:42:0C:F0:BB:6A:16:20
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AD23C23A59E4BD0FD2A4193C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8cdf7e74-2091-3b0e-a650-3ebe2b9f6c4b.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     397225
IP address blocks:        2001:502:ad09::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:23:a5:9e:4b:d0:fd:2a:41:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=031a26c0-ce79-4b60-b981-7b5e9da750d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:05:7e:3a:57:24:67:2e:19:3c:4e:c9:79:7b:
                    9f:db:e5:bf:35:49:cd:d2:7a:f0:ba:83:51:a7:b2:
                    58:46:19:f5:d7:c5:8b:52:6f:20:70:be:e1:02:c9:
                    68:bd:0f:7d:01:20:00:7d:c3:73:82:73:3e:e6:15:
                    7d:b8:62:24:e2:a5:c0:e7:9d:9e:15:50:1c:72:fd:
                    aa:48:2b:a0:71:60:54:0f:2d:c0:61:f6:a2:e3:b8:
                    86:ef:a3:11:55:9a:5d:77:8d:3b:63:5a:60:8b:cc:
                    3d:37:ab:bd:92:50:ad:41:bf:49:0c:58:72:19:98:
                    a7:d4:19:24:50:64:ae:fb:b9:5d:6e:16:85:b5:b1:
                    19:bb:36:1b:8c:59:62:93:fe:7c:f1:75:04:f9:b5:
                    90:06:e4:20:48:b6:bc:18:44:1c:3b:40:ee:81:a4:
                    31:a5:0f:1c:d6:4d:a1:12:f8:be:59:86:8c:fa:54:
                    7a:97:44:a3:c1:ff:a4:17:5c:a6:66:36:5b:7e:eb:
                    4d:76:0b:b6:36:32:db:36:74:12:50:44:87:2f:c3:
                    49:37:3c:74:d4:50:32:b8:5f:3e:26:67:1d:1c:25:
                    b4:eb:d7:54:cb:0a:2b:79:e8:8b:7d:0b:17:63:b3:
                    5b:81:ee:bf:60:0a:a3:1e:64:36:a5:50:50:55:b7:
                    30:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:80:10:7F:22:E0:C5:41:06:EA:DC:30:F5:42:0C:F0:BB:6A:16:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8cdf7e74-2091-3b0e-a650-3ebe2b9f6c4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:ad09::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:6d:30:7c:c2:55:54:0a:ea:a0:f4:06:be:ad:50:bc:ee:14:
         f0:ac:dd:bb:b6:a8:59:ad:9e:ab:89:e5:f3:b6:65:32:98:f2:
         90:0f:bb:e5:5b:08:91:f4:57:4f:e7:a2:ff:fe:e3:2a:e0:ec:
         a1:66:52:3d:27:c4:23:76:24:da:69:15:1d:fc:87:c3:95:4f:
         fe:29:3a:d1:ac:7a:16:ea:8d:6b:a4:d3:c2:cf:6a:13:96:40:
         a2:55:ae:62:61:02:79:34:5d:81:06:e0:98:6d:80:7e:30:6c:
         41:a5:00:51:a1:00:74:0f:3a:da:62:9a:f8:a2:1b:a3:d7:8d:
         73:6d:b8:3d:09:0e:62:fc:e0:a1:3d:bc:5b:aa:3d:4d:04:2b:
         fd:6e:4d:be:56:4b:c3:61:38:b7:6a:6c:99:d8:cb:3a:5f:2f:
         1a:42:b6:e2:14:a0:2e:c5:04:b9:30:6f:31:58:32:c4:e5:20:
         e0:e1:d3:d0:b5:47:9c:ba:68:c8:0c:14:91:9b:f9:77:c3:49:
         ca:c8:97:46:b9:63:76:cd:a3:41:d8:dd:1a:1c:6d:18:10:73:
         08:0c:a2:40:e4:05:22:5f:6c:9c:fa:0a:b8:92:81:ff:2f:3e:
         b1:0e:2b:dc:f9:35:29:1e:fc:63:4f:df:22:99:56:af:1f:eb:
         5e:bb:fd:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:59:34 2025 by rpki-client