Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ad928355-953e-3a34-8d42-d167cac190ac.roa
File:                     ad928355-953e-3a34-8d42-d167cac190ac.roa (raw, json)
Hash identifier:          fgqEUL+wRttf33FCx3hzFgYLJmsI6xatOMhuZ+99O/o=
Subject key identifier:   6D:D9:51:6A:AB:AC:04:80:29:8A:BD:DE:66:6D:8C:77:46:B0:EC:E2
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F1802622D3B01D4D7AD01E00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ad928355-953e-3a34-8d42-d167cac190ac.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397242
IP address blocks:        2620:74:1c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:26:22:d3:b0:1d:4d:7a:d0:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=ac77cd81-d167-406e-9846-fe1669cd00f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:68:e1:e4:49:24:d3:8c:cb:9b:c6:6a:16:06:
                    7c:17:44:79:15:95:f0:00:40:0f:1b:d4:5f:2d:ea:
                    db:82:b6:f6:64:c0:b2:93:3c:05:4e:a1:8f:95:0d:
                    94:07:20:d0:bb:bb:d1:24:13:ec:88:49:7a:df:1f:
                    3b:41:cc:1e:1c:74:f3:96:d2:15:a4:35:84:9a:9e:
                    62:67:3c:ad:29:d4:88:ed:7d:43:6d:3e:2c:77:9b:
                    81:fb:e9:26:5b:8e:e4:8a:e1:d0:ba:35:9e:74:21:
                    fa:38:0d:ed:aa:b5:b1:26:c9:72:a5:9e:31:d6:f0:
                    c5:12:a5:d6:3b:6f:75:4e:f7:26:de:c6:73:0e:5d:
                    d7:29:bc:d1:a5:2c:00:e7:82:8b:db:fd:9b:e6:75:
                    f5:52:73:27:75:70:9f:e1:93:09:af:83:01:16:75:
                    a2:8a:06:5d:3a:6e:f6:ea:2c:98:2e:f1:cf:b3:6e:
                    24:fe:6f:b6:2c:be:4a:fb:d6:35:5b:ad:0d:db:5e:
                    3f:83:55:20:dd:87:20:9c:99:38:8b:5a:4e:38:8b:
                    0d:e1:af:71:81:8e:ad:1a:4b:ab:4b:d1:fe:4c:e1:
                    b4:a5:fb:b0:22:bc:66:89:fd:c2:70:fb:67:f5:f5:
                    4f:55:5c:d6:0c:4c:0b:a7:1d:e6:9b:1a:10:68:01:
                    a9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D9:51:6A:AB:AC:04:80:29:8A:BD:DE:66:6D:8C:77:46:B0:EC:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ad928355-953e-3a34-8d42-d167cac190ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:1c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:3f:7e:e4:9a:70:7b:d5:0b:8d:5b:85:42:1c:e3:f1:87:39:
         9e:11:de:7d:fa:f2:d1:f4:88:2f:5e:2c:c1:87:24:8d:9c:76:
         50:44:04:5a:b4:14:8e:54:a1:b6:22:2a:8a:f4:34:17:c5:e7:
         f0:89:a3:98:1e:93:43:1b:d3:e1:9e:e6:35:fa:f9:09:65:f3:
         34:65:f9:c8:6b:9e:eb:97:c4:a4:56:fd:58:b1:0e:b8:59:73:
         2b:d4:7d:77:3e:99:c9:e6:1b:07:dc:11:d8:18:f1:f4:03:93:
         a2:00:14:a3:b4:88:bc:e3:5d:78:04:3b:ad:ac:84:ca:e8:d6:
         9e:52:ea:16:5a:24:78:5c:df:13:0a:88:a7:bb:fc:31:84:81:
         79:fe:90:42:1e:35:88:8b:e9:7d:42:5b:f0:76:69:39:54:7c:
         d8:f0:3d:de:8d:56:26:29:e4:bc:7f:c8:30:ea:3e:d9:b8:24:
         3c:e9:94:90:1a:f8:16:03:24:6b:5a:73:f3:1d:37:66:3e:ea:
         9f:75:da:7d:06:b0:c6:b3:be:b7:f3:33:1f:f1:23:90:6d:ec:
         13:cd:2a:33:39:88:6b:76:56:1d:90:f2:a9:71:b6:59:b7:40:
         e2:44:1f:81:cd:32:75:2c:87:8c:41:60:ab:9a:48:eb:86:41:
         d7:74:dd:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 04:23:54 2025 by rpki-client