Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/92584b74-a8f2-32f1-99da-39addd1442a3.roa
File:                     92584b74-a8f2-32f1-99da-39addd1442a3.roa (raw, json)
Hash identifier:          DptE6+WlTsOekX6Z6HdiydA6c+h0Xk4wVHCtLu5OiM0=
Subject key identifier:   25:13:AA:CD:C7:2B:8E:F3:AD:03:78:52:8A:CB:ED:7E:20:72:96:B0
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AE5C6849D887C888A6A17AB00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/92584b74-a8f2-32f1-99da-39addd1442a3.roa
Signing time:             Mon 18 Aug 2025 13:00:41 +0000
ROA not before:           Mon 18 Aug 2025 13:00:41 +0000
ROA not after:            Sun 16 Nov 2025 14:00:41 +0000
asID:                     397214
IP address blocks:        2610:a1:3300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e5:c6:84:9d:88:7c:88:8a:6a:17:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 18 13:00:41 2025 GMT
            Not After : Nov 16 14:00:41 2025 GMT
        Subject: CN=5daaba12-d8ca-436c-9e5b-eb99e5d1648a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7b:5c:be:5e:6b:1e:13:7a:f1:2f:a4:d1:73:
                    95:25:ef:39:0c:0d:30:4b:08:3d:d1:41:5a:c5:72:
                    22:6e:bd:9c:d9:16:24:3c:8b:1e:04:ea:1a:f2:c4:
                    d8:f4:d5:79:e9:8a:21:38:13:73:fd:51:da:e1:71:
                    60:c6:c5:e0:cd:ed:d0:5d:0a:28:4b:13:7e:6d:d2:
                    3e:ed:c3:5e:1d:4f:1e:10:12:27:1c:01:d6:48:e9:
                    39:10:a4:8e:b2:96:02:bb:3a:1c:dc:96:e7:03:b3:
                    9b:61:54:bb:59:ad:50:63:24:9f:57:4c:ca:a6:68:
                    82:43:c7:f2:13:4a:b7:2e:65:6d:4d:27:f6:56:5f:
                    80:2d:65:7d:33:fe:84:6d:01:7e:b6:45:73:8e:37:
                    7f:dd:fb:5c:c3:b1:bb:fa:f0:5b:33:0c:62:4e:27:
                    82:32:22:57:f5:76:f5:bb:96:3f:6f:78:fe:57:b2:
                    3f:cf:4e:d2:05:04:bb:74:da:82:49:31:f3:e7:dc:
                    b0:d3:7a:0e:da:68:ba:06:a8:e5:c0:8f:3a:1e:7c:
                    c3:fa:01:cf:8b:b7:eb:5c:1b:cb:2c:8e:3c:0c:d3:
                    b6:31:f5:d1:06:43:33:91:e0:32:56:3f:d6:ef:c2:
                    d6:27:33:68:88:90:69:05:1d:c1:dd:9d:86:bd:7b:
                    53:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:13:AA:CD:C7:2B:8E:F3:AD:03:78:52:8A:CB:ED:7E:20:72:96:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/92584b74-a8f2-32f1-99da-39addd1442a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:c0:f4:a6:75:f8:23:70:20:a9:a2:66:3f:54:d0:ec:5f:68:
         4e:7c:12:de:80:63:cb:e9:a3:a7:70:7f:56:91:ff:11:5b:21:
         da:7b:83:3e:61:3c:b6:19:88:77:82:75:eb:3c:49:35:bb:33:
         bc:29:a0:1c:84:b1:10:5b:ec:c9:80:26:4d:e0:ff:14:0c:c7:
         19:6b:b8:4b:d5:1d:e9:28:96:68:fe:23:1e:00:aa:05:41:a5:
         21:81:d7:d0:b7:1a:1b:08:89:58:c1:fe:68:4a:4f:49:d8:77:
         a0:5f:8e:c9:78:c3:33:38:2c:88:41:ff:aa:23:bc:b0:8e:ab:
         59:04:74:03:29:8d:91:dc:52:01:4b:09:e6:d3:f8:22:c6:d3:
         1f:cb:06:b3:91:c6:e3:e9:51:be:f5:fb:d4:21:e3:ac:08:43:
         7a:9e:43:39:d6:e7:79:0e:69:39:1e:f6:73:b8:d7:11:7d:63:
         01:0b:d8:c3:ea:14:9c:78:dd:79:5b:77:87:8d:d1:0d:c0:ca:
         4d:44:b0:19:15:cc:22:cb:16:c8:4a:8e:25:ed:80:99:50:10:
         2e:d0:c9:6f:42:e9:19:49:5f:f0:33:38:e8:f6:7a:30:c8:c9:
         e8:e8:8c:9f:3f:4b:e9:06:8a:4e:bd:7e:f4:d4:e3:92:2d:6c:
         5d:a1:ac:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:35:31 2025 by rpki-client