Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b331d400-0d77-3704-a4fb-79e12575def2.roa
File:                     b331d400-0d77-3704-a4fb-79e12575def2.roa (raw, json)
Hash identifier:          s9s83CTs+Z/tJO0IBcRBMRsWMNli0M28BeGFQfwF0u0=
Subject key identifier:   F6:36:26:E5:EA:FE:7A:62:A9:F8:79:C7:99:F8:4A:6C:4F:0B:B5:22
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AD23C17D537F25E4726EC68A0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b331d400-0d77-3704-a4fb-79e12575def2.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     397217
IP address blocks:        2610:a1:3000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:17:d5:37:f2:5e:47:26:ec:68:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=afda8b7f-58d8-461a-b913-5b33ed295543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:86:14:99:81:54:a3:e9:5d:17:a9:5b:01:c1:
                    08:4b:52:5c:41:88:dc:f0:b5:04:5a:32:f3:04:40:
                    23:46:25:ae:e4:31:1c:1d:06:3f:ed:db:13:0c:71:
                    53:b8:4b:36:10:a6:91:f9:6c:cc:77:ce:be:be:eb:
                    25:60:9a:51:81:2f:5c:b1:b3:5d:24:16:c1:8e:87:
                    d7:a8:18:d6:87:6d:6d:24:e1:33:d3:bb:c1:b4:77:
                    a1:cd:94:35:78:b4:09:a1:c0:f9:7f:2a:bf:b9:75:
                    d6:f1:7e:14:ba:34:22:67:fc:1a:57:78:e0:bf:9c:
                    65:84:60:34:3f:8e:01:d7:64:be:40:d0:30:95:24:
                    79:78:65:5d:f0:5c:f4:19:f2:af:53:cb:3e:28:35:
                    c3:6f:ac:0c:dd:a1:8f:19:87:36:10:fa:f1:c1:6b:
                    6c:c4:0e:59:a7:2d:54:54:e3:59:b9:f1:32:7e:2a:
                    18:67:c5:68:02:e3:98:32:47:34:0e:3f:b4:cf:43:
                    be:c1:10:7b:3c:81:a6:8a:15:d3:9e:e3:4c:b8:e6:
                    ae:dd:4e:e5:8e:2c:84:c5:67:a9:84:7f:b0:84:18:
                    69:1a:5c:a9:c5:63:a2:4f:21:a2:dd:43:d3:92:44:
                    ab:38:14:18:0d:a4:53:4b:b5:e4:f7:7c:dc:dc:21:
                    b3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:36:26:E5:EA:FE:7A:62:A9:F8:79:C7:99:F8:4A:6C:4F:0B:B5:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b331d400-0d77-3704-a4fb-79e12575def2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:47:a8:7b:91:b7:63:7b:3a:94:67:79:6e:23:e2:8e:2d:81:
         da:e0:48:a5:40:02:55:3a:76:f6:0b:54:23:ab:4b:e6:94:80:
         23:36:72:96:a9:10:f1:4f:08:f4:5c:1e:48:56:b0:a6:c4:97:
         d9:bc:6e:7d:50:08:48:87:fc:42:c2:01:27:1d:51:cd:14:4d:
         4c:b9:e2:da:2c:a1:7a:8a:be:67:8b:a7:24:15:64:96:4e:ba:
         3d:3b:83:00:3d:f4:62:28:9b:49:a8:c3:68:3a:62:33:92:86:
         01:81:53:f1:f9:2a:5a:ec:d4:2f:64:db:fb:e0:40:c4:67:18:
         44:93:38:dc:9e:ac:34:24:cc:3a:da:43:e5:65:74:bb:d1:5e:
         4c:60:a1:c5:9a:87:59:de:d1:a4:92:74:c9:d9:20:01:ea:12:
         4b:14:98:25:23:ba:19:e6:1c:1e:45:24:f5:c7:96:fc:48:eb:
         ee:a7:2f:79:61:73:8d:cd:92:36:d2:2d:4b:8e:fc:48:ea:d0:
         3e:1d:bf:81:05:41:03:94:80:b2:44:6d:50:a8:8c:b5:0d:f2:
         28:3d:5e:4f:d7:71:7c:5f:89:cb:ac:da:bc:3a:e9:42:f0:42:
         24:41:62:97:fb:99:11:40:3a:fd:5b:c8:f5:20:ca:ac:4e:39:
         8c:5b:ad:58
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErSPBfVN/JeRybsaKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk
YWZkYThiN2YtNThkOC00NjFhLWI5MTMtNWIzM2VkMjk1NTQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoYUmYFUo+ldF6lbAcEIS1JcQYjc8LUEWjLz
BEAjRiWu5DEcHQY/7dsTDHFTuEs2EKaR+WzMd86+vuslYJpRgS9csbNdJBbBjofX
qBjWh21tJOEz07vBtHehzZQ1eLQJocD5fyq/uXXW8X4UujQiZ/waV3jgv5xlhGA0
P44B12S+QNAwlSR5eGVd8Fz0GfKvU8s+KDXDb6wM3aGPGYc2EPrxwWtsxA5Zpy1U
VONZufEyfioYZ8VoAuOYMkc0Dj+0z0O+wRB7PIGmihXTnuNMuOau3U7ljiyExWep
hH+whBhpGlypxWOiTyGi3UPTkkSrOBQYDaRTS7Xk93zc3CGzMQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPY2JuXq/npiqfh5x5n4SmxPC7UiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYjMzMWQ0MDAtMGQ3Ny0z
NzA0LWE0ZmItNzllMTI1NzVkZWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJhAAoTAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEATEeoe5G3Y3s6lGd5biPiji2B2uBIpUACVTp29gtUI6tL5pSAIzZy
lqkQ8U8I9FweSFawpsSX2bxufVAISIf8QsIBJx1RzRRNTLni2iyheoq+Z4unJBVk
lk66PTuDAD30YiibSajDaDpiM5KGAYFT8fkqWuzUL2Tb++BAxGcYRJM43J6sNCTM
OtpD5WV0u9FeTGChxZqHWd7RpJJ0ydkgAeoSSxSYJSO6GeYcHkUk9ceW/Ejr7qcv
eWFzjc2SNtItS478SOrQPh2/gQVBA5SAskRtUKiMtQ3yKD1eT9dxfF+Jy6zavDrp
QvBCJEFil/uZEUA6/VvI9SDKrE45jFutWA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:48:45 2025 by rpki-client