Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/92584b74-a8f2-32f1-99da-39addd1442a3.roa
File:                     92584b74-a8f2-32f1-99da-39addd1442a3.roa (raw, json)
Hash identifier:          FA/sOPxT1mMabEWRnmq5LzPUh4IbpcuyBefWmmMQqe4=
Subject key identifier:   FD:C7:FB:29:3B:0E:6B:1E:50:22:59:92:57:B0:FC:9F:8F:61:F7:E8
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A050A83C7144D870CC551EF80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/92584b74-a8f2-32f1-99da-39addd1442a3.roa
Signing time:             Fri 30 May 2025 01:00:48 +0000
ROA not before:           Fri 30 May 2025 01:00:48 +0000
ROA not after:            Thu 28 Aug 2025 01:00:48 +0000
asID:                     397214
IP address blocks:        2610:a1:3300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:05:0a:83:c7:14:4d:87:0c:c5:51:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 30 01:00:48 2025 GMT
            Not After : Aug 28 01:00:48 2025 GMT
        Subject: CN=f36c80bb-9cc0-407b-a29e-77c1a2a91aef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fb:0f:b1:81:26:bd:cd:6f:a2:05:34:6f:0d:
                    ea:8e:9d:30:6d:a0:62:a5:e4:27:38:18:26:d0:25:
                    68:aa:b4:ec:af:6b:d5:9f:7c:ab:f9:eb:5c:2b:7b:
                    19:e6:91:01:d1:5b:4b:fd:e3:28:f3:54:27:8c:a4:
                    ff:d2:f5:09:ef:dd:70:ee:c0:6a:24:6f:80:ca:dc:
                    69:1a:0e:43:fe:e8:04:ba:eb:8a:1a:ac:4a:3b:3c:
                    8e:e1:34:e8:24:4d:b3:5f:0a:75:05:cf:0e:2f:2b:
                    9a:05:71:27:16:ce:c7:fb:11:82:1d:95:dc:fa:89:
                    3b:1d:b8:ab:13:a7:4e:c9:04:af:90:26:bb:20:3a:
                    fd:c9:a8:a9:ae:53:f8:89:65:de:37:42:67:d0:31:
                    ef:55:13:b4:77:bc:5b:25:25:d9:07:36:7c:0a:97:
                    0c:1d:bb:a2:07:32:3b:6f:8b:98:75:a9:4d:b5:5e:
                    17:cd:7e:f8:a1:8e:e3:cf:b9:16:c4:31:c2:18:41:
                    01:99:c9:4b:23:a8:57:30:80:46:59:9a:9b:c7:04:
                    46:21:94:46:25:55:2f:57:33:c4:21:ee:f7:e1:9b:
                    f5:23:00:ad:47:14:e6:36:50:b0:c0:7b:5a:dc:dc:
                    b1:5a:e2:be:62:7d:b9:89:92:30:cf:58:55:ed:ee:
                    77:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C7:FB:29:3B:0E:6B:1E:50:22:59:92:57:B0:FC:9F:8F:61:F7:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/92584b74-a8f2-32f1-99da-39addd1442a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:a9:ff:ec:af:a6:19:db:fc:37:3f:4d:e6:37:7d:69:2a:cf:
         13:18:89:88:5d:8b:1c:e2:1b:74:90:61:2e:9a:52:c6:e9:9e:
         4c:fe:56:9a:3d:7a:6d:7b:fb:70:d1:6b:55:a3:9b:3a:7d:26:
         cc:d2:a5:1e:a2:e2:e6:0d:bd:09:9c:58:c8:43:d7:46:55:0b:
         26:68:e1:1d:34:86:36:1e:ad:50:c6:11:dc:54:26:b0:d8:60:
         5f:06:43:16:c2:22:cc:1b:b2:96:d8:77:b3:59:0d:3e:c0:f8:
         43:00:67:8a:33:4f:e6:97:bb:e4:a6:5b:26:d4:94:f2:fc:8e:
         7c:d5:68:07:6a:b5:1d:1e:df:b3:5c:6b:12:1c:d1:38:48:73:
         1e:02:cb:f9:6d:68:b2:19:37:0f:77:e5:35:52:d2:22:f2:7e:
         ec:9e:c3:a1:24:b5:98:fe:8d:89:c6:8a:94:ee:a7:01:43:6e:
         b8:bb:a9:ba:bd:b3:9d:08:ac:57:42:eb:13:68:9a:02:5e:2c:
         41:f4:93:55:78:17:5e:cc:7c:ca:e7:4e:ad:e5:1e:32:90:f9:
         40:b2:72:52:56:85:c1:3a:97:16:54:8d:91:00:d3:4d:47:eb:
         44:2a:05:d6:37:b0:f6:12:b7:45:a5:57:d8:67:e5:ee:40:69:
         a8:e5:e9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:22:35 2025 by rpki-client