Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d6b4c3f9-67a4-3cd6-b40a-41b0507b0b30.roa
File:                     d6b4c3f9-67a4-3cd6-b40a-41b0507b0b30.roa (raw, json)
Hash identifier:          5swozZ3u5v+DgakMoB5w/EWjfS6J4W7ZLePqhAaBTbs=
Subject key identifier:   E7:34:24:F4:ED:FB:3F:FB:6B:10:17:BD:2D:FF:9A:52:1F:73:37:E2
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AE5C685025ACF18ED54662540
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d6b4c3f9-67a4-3cd6-b40a-41b0507b0b30.roa
Signing time:             Mon 18 Aug 2025 13:00:41 +0000
ROA not before:           Mon 18 Aug 2025 13:00:41 +0000
ROA not after:            Sun 16 Nov 2025 14:00:41 +0000
asID:                     397219
IP address blocks:        2610:a1:3300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e5:c6:85:02:5a:cf:18:ed:54:66:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 18 13:00:41 2025 GMT
            Not After : Nov 16 14:00:41 2025 GMT
        Subject: CN=65787be8-f382-4e6e-b518-4439a3f8a280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:5e:dc:75:67:0f:06:26:85:0f:02:7a:3a:3a:
                    18:e9:d4:4e:87:c9:de:5c:8a:78:dc:45:e9:3a:a3:
                    e7:cf:5f:bd:a8:68:1a:39:51:e7:49:d8:e6:2f:1c:
                    a9:6a:44:72:e0:9e:95:09:f3:4a:a3:04:cb:b0:5d:
                    aa:a0:21:5e:d7:f8:57:8c:cc:93:b0:b7:5a:2b:ee:
                    cb:8b:0e:24:19:61:1e:29:c1:c2:2f:e8:ba:d9:0b:
                    2e:34:98:4d:fb:82:71:9b:44:1d:74:be:bf:c8:fc:
                    e7:db:2c:3d:bd:11:ba:11:70:2e:a5:e3:eb:9b:a8:
                    aa:25:6b:3e:02:36:44:27:0f:31:97:52:38:e0:fb:
                    6c:de:ba:55:97:7a:78:79:15:a1:18:4d:a6:3d:82:
                    b9:9b:3b:cc:c0:cf:45:bd:19:65:86:36:cf:d3:b8:
                    1b:2a:87:57:ad:a0:e4:c2:b8:ee:5e:f0:87:8d:d2:
                    ec:0f:3c:f5:f3:54:88:7a:ad:8c:21:c9:ef:0d:b1:
                    83:0c:2e:a8:76:b3:eb:b1:96:fe:0c:73:58:85:3d:
                    08:3c:cf:84:4f:bb:d9:e6:23:bc:c6:c6:fe:f1:33:
                    74:d5:8f:7b:d4:de:63:4e:96:c9:70:d3:e0:b9:e5:
                    40:bc:a3:ac:fd:2b:ec:b2:fe:22:19:e7:8c:99:ab:
                    cc:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:34:24:F4:ED:FB:3F:FB:6B:10:17:BD:2D:FF:9A:52:1F:73:37:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d6b4c3f9-67a4-3cd6-b40a-41b0507b0b30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:e9:58:de:3c:23:72:67:ca:49:d6:d4:f3:18:0f:b6:f0:9b:
         b7:70:55:73:16:f3:37:e0:15:91:4a:37:7b:af:4d:a0:8a:7f:
         cb:f9:7f:a0:f7:23:53:c9:e5:18:39:04:bd:d4:4b:0c:2b:14:
         44:3d:13:c0:cd:3c:96:2f:5c:ac:20:f6:bb:71:68:0b:e0:45:
         c1:e4:2a:af:9e:73:56:8a:57:f5:45:2b:ef:1d:11:f2:70:46:
         6a:6d:3e:88:ba:4d:41:68:74:88:95:42:ab:f8:96:9e:d4:79:
         d8:75:8e:ff:f3:84:3c:35:ca:b5:5a:00:9d:39:d8:f9:e7:7c:
         05:c3:a0:ea:ac:4a:e2:ab:ef:25:d0:c1:72:bb:78:5d:db:72:
         9f:d2:b7:31:26:64:d5:06:ea:48:f9:1c:d2:dd:b6:11:b6:66:
         d0:04:00:bb:ea:0e:19:b6:12:0c:47:8f:2b:b1:8b:84:4c:e3:
         ed:9a:b0:db:ed:0d:53:8d:44:2c:20:bb:0d:14:24:3e:25:13:
         83:22:6b:f6:a6:a8:2d:67:a5:d1:71:06:54:50:6e:3e:06:aa:
         6f:49:a0:85:a7:b6:07:5e:95:dc:4f:e8:f4:26:65:04:e0:75:
         6c:4a:59:3a:91:62:56:f9:8a:35:4d:89:ba:0a:ec:53:68:95:
         90:fc:c0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:56:34 2025 by rpki-client