Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/92d5709f-1f1e-3d78-9eb2-b953953f82ea.roa
File:                     92d5709f-1f1e-3d78-9eb2-b953953f82ea.roa (raw, json)
Hash identifier:          m5lMrnMB+KDvzBAIiDUeLA0bDbwNISneVHir4OtGE8w=
Subject key identifier:   D3:A2:A7:A8:01:46:BE:92:AD:47:22:05:52:B2:96:63:02:EC:16:90
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AD23C1D055BC4A34F684E6F40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/92d5709f-1f1e-3d78-9eb2-b953953f82ea.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     397228
IP address blocks:        2001:502:100e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:1d:05:5b:c4:a3:4f:68:4e:6f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=3cce20be-300e-4580-99cc-390c64d00f9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:bd:19:41:80:47:aa:13:d3:fa:85:aa:6d:38:
                    82:5e:6d:d1:d8:20:62:06:5d:b1:b3:a6:ba:3b:fd:
                    3c:69:0b:52:30:23:cc:5f:d4:a0:8f:a2:03:9f:2d:
                    5f:3a:cb:8e:dd:f5:d3:3a:42:58:a1:47:1a:19:6f:
                    66:d3:cc:d9:cf:16:db:84:6f:f9:69:29:0f:5d:22:
                    95:ae:10:75:83:85:86:7f:97:22:e2:c7:0d:f6:2c:
                    73:d9:cb:6a:b5:f2:c4:cd:26:53:60:f4:27:83:b6:
                    5b:ee:a9:cf:77:82:38:1a:d7:aa:b2:61:67:76:99:
                    e4:9d:6e:3a:f1:43:36:67:b0:82:7f:ea:69:1e:e1:
                    52:39:6e:cd:94:5d:c2:90:73:05:25:c4:fa:64:0d:
                    fe:9f:a6:9c:30:a9:70:4d:fd:b2:30:6b:e3:3a:f6:
                    ac:a2:b2:68:ff:97:cc:ef:32:b7:13:4b:29:01:5b:
                    f6:96:45:b8:a7:ee:b7:2d:8b:8e:f5:9c:8c:15:98:
                    92:5c:19:e7:a6:fc:cc:c0:45:2e:92:e7:22:07:55:
                    7a:b3:3c:2c:d6:14:43:7f:20:1d:d5:ba:22:db:74:
                    30:ba:28:01:8d:63:3e:e5:0c:3f:de:9d:62:e3:7e:
                    84:db:13:4d:bf:34:73:ae:31:86:63:94:3d:e9:f6:
                    c6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A2:A7:A8:01:46:BE:92:AD:47:22:05:52:B2:96:63:02:EC:16:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/92d5709f-1f1e-3d78-9eb2-b953953f82ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:100e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:30:b7:75:f8:67:26:8f:04:93:32:e3:8d:9f:76:21:62:cb:
         05:67:20:b6:ff:b7:09:c4:84:21:7c:75:dd:04:7d:8e:b0:78:
         98:5b:fe:f9:82:85:2d:0f:c9:9f:36:f9:9f:b1:06:ee:5f:92:
         da:81:8f:e1:a8:0d:72:4b:73:e2:7a:96:ae:2a:95:46:fb:f0:
         5d:bd:b6:2f:c4:fa:4f:67:df:66:31:0f:27:5b:b8:68:5e:6c:
         40:46:60:27:9d:36:3d:77:4e:92:6d:a2:9b:f2:78:35:55:60:
         58:8d:4f:e8:46:0a:3f:c2:d9:56:9f:a6:52:e6:7d:fa:59:e2:
         7e:54:6f:3e:13:84:bf:fd:d7:e4:06:4b:91:e8:84:b7:1a:35:
         3e:9e:d8:15:4a:0a:40:1d:99:f1:a8:ab:e4:95:90:dd:fb:d7:
         99:1d:4a:5b:74:1e:1f:05:33:bf:0c:72:bd:d0:a6:82:6d:60:
         e8:80:3a:89:a7:00:b4:3d:15:09:6b:77:40:5d:36:16:fb:37:
         2b:a4:67:3e:b3:d8:2c:09:4c:90:c1:29:9c:76:de:26:ee:72:
         bd:8b:63:d5:2a:4d:7a:e2:45:4d:8f:f5:8b:9a:cf:7d:1b:57:
         2c:54:91:c1:ab:08:f7:0c:86:ff:55:e8:07:bd:00:3a:1e:45:
         e2:c7:b6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:45:21 2025 by rpki-client