Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bb8da82c-647c-38de-ae79-badf24ce35fb.roa
File:                     bb8da82c-647c-38de-ae79-badf24ce35fb.roa (raw, json)
Hash identifier:          QeY7kwszTa26VBCyePF69o7abulhPXFLI8k5onfIdnY=
Subject key identifier:   BA:4B:0E:18:EE:48:6D:0E:14:4F:30:B9:ED:ED:74:68:B9:41:EC:80
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AD23C1DFDA9BB211F1B93D3C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bb8da82c-647c-38de-ae79-badf24ce35fb.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     397242
IP address blocks:        2001:502:100e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:1d:fd:a9:bb:21:1f:1b:93:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=8f195a88-869b-4005-a234-7f0d402c2e8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f2:29:9f:b4:28:c3:1b:6a:c3:72:04:64:24:
                    27:fa:21:63:4a:04:49:4e:e2:a3:6d:7f:f2:33:ef:
                    a1:d8:d4:7d:bd:ef:41:53:76:30:34:4d:18:c1:3e:
                    48:a8:16:5a:9c:78:76:3b:2c:89:8f:11:94:71:9f:
                    6c:03:94:72:85:a6:45:dd:ad:a8:aa:a2:6c:e5:3a:
                    a5:d0:43:d9:81:3b:eb:35:0a:7a:70:a8:a2:b8:de:
                    69:6d:34:ec:b5:76:54:91:70:74:03:9c:36:e6:80:
                    87:9b:23:02:0d:71:9f:38:a8:f4:1e:bb:8b:98:3c:
                    12:90:0b:35:7f:99:fb:7e:13:32:4e:37:49:50:2b:
                    9f:a4:c4:1c:d8:82:ee:e2:1e:ac:20:95:ef:04:20:
                    6b:ed:b8:6c:21:6d:13:ab:af:67:1f:33:f4:f2:62:
                    3a:76:fe:dd:f2:d8:de:96:c1:c1:56:3e:f5:e2:52:
                    eb:52:2e:50:bb:79:43:90:21:0c:60:e3:52:dd:68:
                    14:a7:3c:a3:19:d7:4c:99:61:25:54:6f:18:97:4c:
                    a5:66:6c:66:26:c0:74:15:be:f7:72:15:08:83:96:
                    08:39:de:5e:5e:ef:7e:e6:76:f5:a9:bb:55:20:9b:
                    dd:91:d7:f4:ee:17:74:93:58:59:0f:c4:2a:98:ab:
                    16:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:4B:0E:18:EE:48:6D:0E:14:4F:30:B9:ED:ED:74:68:B9:41:EC:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bb8da82c-647c-38de-ae79-badf24ce35fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:100e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:5a:6c:f1:e6:27:cf:2a:e8:e1:d5:ce:95:b2:54:bf:85:f8:
         32:40:a1:c1:e8:9f:92:71:39:fb:62:2f:ab:85:4f:62:b8:17:
         c7:bf:93:6b:b3:25:ce:fe:ae:03:dd:bc:0a:44:0d:05:8c:98:
         43:ff:cc:dc:ef:cd:4a:e2:2b:c0:a7:2f:b5:64:b2:ba:0e:3c:
         8e:1f:7f:15:ad:48:56:3a:e6:9c:19:05:20:5a:ef:eb:36:08:
         77:ac:a7:19:ef:aa:3e:fc:8a:d0:5c:df:a7:fd:e8:9d:6a:a5:
         b8:c1:9c:e4:c5:cc:68:78:8d:e4:e1:f2:3f:22:17:07:67:95:
         4d:b0:41:af:f0:ce:89:c9:70:2f:bf:c0:1c:b8:46:78:cd:9d:
         a1:c8:6c:29:89:59:bf:28:bc:0f:42:cc:a5:cb:a0:7d:3d:62:
         42:30:1e:83:1b:46:1d:31:f5:84:bb:8e:cf:41:d8:39:fd:bf:
         86:a6:15:43:e5:18:72:32:15:a5:cb:8e:f2:59:d8:07:0c:b7:
         7a:4e:a5:53:74:68:89:2f:cc:26:f8:ca:79:ad:cb:40:40:36:
         17:8b:b7:6a:3a:a1:1c:0b:f3:3d:38:64:4b:f6:cf:d2:9a:a6:
         29:57:e9:90:5f:b3:71:28:dd:ea:6d:93:ea:13:98:81:f1:b6:
         db:a8:78:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:55:31 2025 by rpki-client