Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d728d115-fca1-3807-938b-c542d636f2d6.roa
File:                     d728d115-fca1-3807-938b-c542d636f2d6.roa (raw, json)
Hash identifier:          X/pV4gS3lis/oYuym67uh6t6LEgEyGvtBtvlZGJS0wo=
Subject key identifier:   0D:AC:B7:43:AB:61:EF:C6:4F:20:F0:62:51:4F:C2:3E:27:C4:A4:AA
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AD23C184008E6420534331400
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d728d115-fca1-3807-938b-c542d636f2d6.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     397223
IP address blocks:        2610:a1:3000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:18:40:08:e6:42:05:34:33:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=5c953e91-4e3f-4da5-98fd-3e54b0c6a0ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b1:15:73:54:2f:0a:c7:ed:59:50:84:29:b5:
                    4b:87:57:3b:46:7c:22:6a:63:42:55:cf:dd:29:f8:
                    79:e4:01:ee:16:5c:4e:94:92:27:1b:18:77:49:d1:
                    8b:f7:01:c7:03:57:53:1e:f8:26:11:f2:52:e1:91:
                    ec:11:66:7a:bd:45:da:a7:7d:51:4d:d9:15:af:6b:
                    35:36:bb:a1:5b:f7:46:6e:14:ad:bf:0b:46:01:7c:
                    a1:55:07:ad:da:3a:89:c2:d7:97:43:28:42:74:19:
                    fa:1d:ea:61:82:5c:46:01:36:c8:1f:4d:fa:5c:d2:
                    c0:5f:be:bd:ac:1c:b5:1b:fa:3c:58:50:9d:32:44:
                    cc:15:87:e8:60:f1:7c:ef:6b:7b:cf:14:c6:78:ea:
                    58:fa:0f:12:6d:7e:69:8b:e0:71:83:2c:66:c6:86:
                    50:ee:00:8c:72:52:0c:c0:e6:29:82:ca:bb:68:56:
                    5b:29:d7:22:28:a0:80:9d:fc:a6:53:ed:79:61:18:
                    9a:97:6e:04:27:76:ea:19:fa:ae:55:9e:dd:4a:f0:
                    4b:7b:61:e3:43:17:b3:43:3e:3b:f7:77:e7:c8:ac:
                    a1:1f:46:cf:d9:fb:c6:d8:b0:04:50:e0:63:3e:4f:
                    78:40:dd:ff:a9:51:f4:cc:7b:d5:d9:cc:c0:86:cd:
                    9c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:AC:B7:43:AB:61:EF:C6:4F:20:F0:62:51:4F:C2:3E:27:C4:A4:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d728d115-fca1-3807-938b-c542d636f2d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:6b:a8:da:1d:50:31:56:29:96:45:c4:7f:39:5a:80:44:97:
         7c:b3:fd:7c:00:36:d0:a9:1a:b9:98:08:05:04:df:7f:d3:e3:
         77:2f:38:33:0e:dd:9a:74:10:08:0d:57:7c:4a:cb:48:53:74:
         81:36:93:a8:5d:e8:dd:5e:05:72:56:63:c1:39:e6:48:ad:7d:
         7d:09:4d:2a:fb:4e:5b:38:29:43:36:da:14:5b:de:2c:9f:e1:
         d0:99:5d:38:61:a1:50:7c:6e:1e:35:98:dc:c3:5e:d4:49:a9:
         80:a0:36:2c:cc:61:30:de:61:00:6f:5e:61:16:98:59:78:bf:
         7a:81:bb:43:98:62:b1:3c:74:c9:1b:36:15:81:74:75:51:45:
         b2:a4:00:dd:80:a5:08:2a:5a:81:ef:20:30:84:92:c6:1e:c7:
         7f:84:af:b2:24:95:28:ba:2a:e6:fb:b4:26:bd:95:a2:5b:60:
         80:6a:5d:f8:48:c8:67:c3:ac:93:5d:93:a2:0e:da:15:e5:a6:
         d8:ab:c4:c6:89:d6:6e:63:ad:4d:00:e3:7d:0b:8e:ab:3e:55:
         3f:d3:e3:79:e9:22:be:09:c8:91:09:f1:8a:bf:a7:e3:d3:7f:
         25:42:5f:09:ac:13:eb:6b:18:89:dd:af:dc:23:d5:47:f5:47:
         1c:89:78:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:04:21 2025 by rpki-client