Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9ffad9b7-e774-3db4-ad67-e0c56d3594e3.roa
File:                     9ffad9b7-e774-3db4-ad67-e0c56d3594e3.roa (raw, json)
Hash identifier:          TMsXj1k0G1205GsD5paWwDyMgGt4+aWhUuKiSdFxg4k=
Subject key identifier:   98:8D:4D:DB:DE:9C:84:18:25:3A:E3:E5:38:72:05:94:A3:F0:13:90
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AD23C1EDF33A2E3412CC1C080
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9ffad9b7-e774-3db4-ad67-e0c56d3594e3.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     397221
IP address blocks:        2001:502:2eda::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:1e:df:33:a2:e3:41:2c:c1:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=e84f1b06-4634-40ee-9cbd-67d3b6c0e931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ca:3f:10:ef:13:d6:dd:9d:35:a8:b0:a0:79:
                    81:e0:82:14:fc:53:d0:f2:68:b4:b1:89:62:0b:47:
                    01:ab:f8:14:af:59:09:16:ef:57:0f:9a:17:b0:55:
                    47:7d:b6:7f:41:9e:a9:b7:e2:ff:e6:26:31:1a:77:
                    c7:a3:b9:f8:c7:17:dd:26:ba:07:6b:44:31:a2:43:
                    82:83:3f:09:1b:36:6d:d7:4f:db:44:95:0a:25:a8:
                    a9:41:6e:1f:8f:0e:5d:7e:55:c5:a8:da:ec:43:88:
                    9d:8c:6e:5e:9a:ad:8b:1d:be:f6:57:ed:fd:ae:a3:
                    7a:60:ea:01:40:40:43:be:82:37:f9:88:34:7d:89:
                    d3:db:fd:95:13:21:62:b9:95:ef:02:51:61:9c:aa:
                    18:5d:16:ac:fe:c0:2c:61:24:db:b0:fe:d4:99:03:
                    a3:99:fe:33:99:08:30:5b:01:0d:b1:52:22:29:58:
                    26:97:c7:49:6d:67:57:6a:d6:0f:aa:cb:af:4e:c3:
                    f7:2d:2c:ee:8b:40:db:39:31:f7:9e:d8:ab:90:93:
                    ef:67:30:bf:0d:2c:54:0b:c9:89:e9:ff:84:5e:b5:
                    df:04:4f:58:54:92:20:90:f0:86:d4:3c:9c:67:ee:
                    27:cb:21:c9:dd:d1:c5:8c:4b:dc:bf:d9:a5:be:79:
                    d3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:8D:4D:DB:DE:9C:84:18:25:3A:E3:E5:38:72:05:94:A3:F0:13:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9ffad9b7-e774-3db4-ad67-e0c56d3594e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:2eda::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:a9:90:7e:f5:ce:27:6a:bb:e7:6e:73:d6:0f:84:3b:81:05:
         22:ef:37:c9:84:a0:f6:04:75:2f:a3:7c:53:90:37:07:cf:d4:
         47:f9:de:87:0c:4b:5e:43:46:f7:5d:02:da:88:b5:a9:dd:2b:
         bd:3a:1a:79:b7:19:d3:e0:98:85:31:bd:ef:51:53:2a:28:e8:
         15:53:2c:36:bf:c5:1e:54:7b:d2:17:aa:e1:f1:81:6f:79:07:
         47:c3:1e:c7:eb:81:83:63:78:bc:9f:90:68:57:39:15:50:7b:
         46:d6:ba:60:3a:e2:17:86:d0:f9:ec:56:7d:de:91:cf:f7:2f:
         d7:3e:e2:59:c9:da:0b:8b:64:60:68:fb:a7:26:5a:62:2d:00:
         55:3b:7e:9f:b0:78:91:4b:a5:00:73:16:5c:94:84:f6:69:c3:
         2c:b6:f6:16:f6:18:95:3a:3e:9f:94:68:4a:3f:ff:a6:db:78:
         d0:61:ed:82:0f:01:51:78:6c:7f:71:dd:3b:ff:f2:ba:71:e2:
         ac:7c:c7:f9:22:d6:f2:dc:b2:ed:22:d2:c6:8a:99:2f:ca:9d:
         06:a9:e2:25:54:20:4e:41:16:e0:cc:c6:d9:66:c3:d7:0a:71:
         81:f3:2f:3a:65:fe:4d:c1:16:8a:cb:83:bf:9f:11:27:a4:75:
         95:7b:d0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:51:09 2025 by rpki-client