Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c1e4aca2-8c35-3a91-ab51-9e7dec79824e.roa
File:                     c1e4aca2-8c35-3a91-ab51-9e7dec79824e.roa (raw, json)
Hash identifier:          2ZqEBWTh1Lew7iiY/+blT5KwymSWcpRmxm4n7LSL9Wk=
Subject key identifier:   90:05:B0:C7:2F:EE:FB:AF:03:4F:EE:B5:DF:29:AF:92:B1:25:54:12
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F180138DD9D5883D0F0B7200
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c1e4aca2-8c35-3a91-ab51-9e7dec79824e.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397218
IP address blocks:        2001:500:3682::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:13:8d:d9:d5:88:3d:0f:0b:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=ae3ef322-cd15-462f-b53f-6aa333a390de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fc:cd:0a:a7:ca:4b:fa:99:e2:36:37:b5:3a:
                    fe:6e:f5:c4:ab:fb:a5:8c:6b:33:71:74:be:68:7a:
                    08:77:bd:d7:d2:69:1b:a5:69:78:54:c1:59:aa:17:
                    b0:ef:c8:61:f2:e2:fd:30:47:03:2d:47:c1:b8:03:
                    c2:e2:9b:a1:dc:bd:96:df:82:0c:af:48:f0:72:90:
                    b2:f4:bc:7a:f5:54:ef:c6:ef:d4:f0:de:a3:a0:4a:
                    73:9a:4c:06:18:ad:b3:39:b5:7c:6b:bd:bd:1d:1f:
                    ae:1d:c7:15:9d:8f:c1:18:92:8e:f6:f4:38:60:7b:
                    fe:cc:7b:00:4c:e6:cd:df:6b:e9:ca:ce:0d:5b:ff:
                    44:08:d8:e1:ee:6d:ac:04:02:54:75:61:17:fe:ab:
                    d1:ec:6a:0a:aa:81:b7:dd:54:66:5c:fd:80:7e:f6:
                    c8:7a:b6:c1:a0:5e:ae:97:7c:d7:d5:f9:31:5e:cc:
                    75:44:2b:5f:a3:38:0c:97:d1:98:37:8a:34:fc:8b:
                    15:46:51:e4:88:c4:7b:ee:41:ff:70:14:17:57:1a:
                    60:14:8a:21:fb:a4:8c:0c:fa:47:7b:04:c3:49:a1:
                    cd:58:bc:6c:f4:68:fc:fb:71:73:2c:f1:5f:cc:5b:
                    50:28:9c:a1:60:36:9d:26:c7:a2:6a:fa:ec:88:df:
                    ec:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:05:B0:C7:2F:EE:FB:AF:03:4F:EE:B5:DF:29:AF:92:B1:25:54:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c1e4aca2-8c35-3a91-ab51-9e7dec79824e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:3682::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:c0:de:a2:a2:40:1c:b5:bd:e1:50:7d:52:a3:5d:5c:96:f3:
         f1:cd:72:d6:2e:64:be:2f:f0:1d:c5:1f:f5:b6:1e:3b:a4:ae:
         ab:9a:7e:90:09:2a:a7:25:f1:83:eb:9a:df:8e:fd:0d:84:df:
         b3:7d:af:11:a2:53:a1:5d:b5:df:2c:cd:29:bb:e7:ad:6d:60:
         00:98:44:57:d6:ad:bd:e1:2a:4b:50:67:ef:a6:e8:83:5f:65:
         5c:21:df:cc:a5:13:47:46:66:ff:ed:de:bf:9a:b2:e3:a4:b7:
         f5:86:4d:54:a3:cb:71:14:25:c2:4f:32:3a:db:3c:52:47:6b:
         df:65:0d:47:5c:af:fd:26:c7:bd:a0:2b:0f:ac:54:1c:e9:b3:
         76:21:4d:6f:07:44:3e:aa:e6:d1:68:a4:a4:6f:e7:57:76:ef:
         e1:d5:de:eb:0a:dd:ad:77:fb:14:39:22:77:de:55:d0:b8:5b:
         b7:5f:cf:7f:90:9c:cb:e4:3c:24:fe:b8:31:d8:94:2b:b2:fd:
         21:44:00:d4:7c:5b:96:c7:c9:95:91:29:ba:87:25:68:f6:c5:
         d9:c6:43:0f:b4:d0:21:40:27:ee:32:d3:56:6c:25:80:60:ea:
         ee:9e:b7:de:76:d1:73:13:fc:7d:0e:bd:62:03:2b:d5:9a:d7:
         92:eb:5c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 09:18:39 2025 by rpki-client