Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/de6155b8-0c63-3c6f-b054-840f151c1629.roa
File:                     de6155b8-0c63-3c6f-b054-840f151c1629.roa (raw, json)
Hash identifier:          05yBSQKDhVHjfxHnmMkHhUmzvO2Zt1+skF/CEC7Hpw4=
Subject key identifier:   B2:43:11:17:B8:55:09:F3:5A:75:AE:B3:03:B8:B8:00:F8:BF:EA:56
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AD23C1DB9E49C1493C9F53880
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/de6155b8-0c63-3c6f-b054-840f151c1629.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     397238
IP address blocks:        2001:502:100e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:1d:b9:e4:9c:14:93:c9:f5:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=9feae631-2764-4266-9a14-cd55eb3a5dc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ef:c9:73:d3:b8:fc:1e:16:af:a7:36:ed:da:
                    81:9c:c3:4b:92:cd:4c:58:5c:f5:c1:c0:01:04:cf:
                    61:56:93:f6:4c:39:4f:00:db:d7:55:6e:01:00:7d:
                    e5:d5:75:13:46:75:92:df:79:7f:11:24:73:0c:fb:
                    6c:ba:11:d2:e6:42:f9:c1:22:a5:61:88:5c:1e:16:
                    05:f6:f1:06:a7:04:33:10:23:0d:ee:34:79:40:59:
                    7e:85:cd:05:37:8d:53:7d:34:11:63:fe:c3:7b:dd:
                    c8:e7:29:0a:ab:2e:ff:12:90:74:66:23:81:90:1f:
                    f5:f5:e2:21:18:bb:c3:14:b1:5f:56:9b:b8:c3:75:
                    55:3b:89:a8:f9:d3:0b:0b:06:a5:73:5a:da:50:42:
                    30:a0:5f:6f:75:f0:21:06:7e:69:a6:79:9d:86:c1:
                    3b:a0:f5:9c:fd:88:c7:22:42:2c:1e:0b:d7:23:23:
                    fc:63:06:2a:b4:75:3d:ed:3d:f9:22:84:a4:35:49:
                    c0:63:c0:d6:07:ed:a9:cc:98:32:d5:d8:d5:33:9b:
                    ad:a0:df:df:4f:72:2d:59:7b:31:03:ae:bb:cf:68:
                    d3:a2:09:78:4b:b2:d6:f6:e3:bf:da:75:55:94:68:
                    16:44:45:47:e0:83:11:22:20:56:9a:6b:61:b9:59:
                    cd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:43:11:17:B8:55:09:F3:5A:75:AE:B3:03:B8:B8:00:F8:BF:EA:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/de6155b8-0c63-3c6f-b054-840f151c1629.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:100e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:ac:e5:7a:1e:20:f1:a1:a3:d8:d5:62:9e:63:df:d6:06:c6:
         d2:1a:10:ba:7c:a9:8a:59:2f:94:24:5c:e6:19:e8:6c:d5:f0:
         8d:5b:cb:dc:73:42:c4:89:04:6d:7b:e8:76:cd:91:5d:95:3d:
         28:a1:f3:09:20:c8:3a:82:36:3a:d3:a9:46:0f:9c:88:f3:85:
         07:ce:20:94:98:92:0e:9e:a8:96:af:38:62:fb:c3:c0:ce:18:
         73:41:f7:7a:f5:dd:a1:69:fd:1b:57:92:2c:08:17:c1:9d:22:
         d0:3e:c8:68:62:15:34:86:9c:cc:3f:38:7d:cd:36:4c:a3:9a:
         70:8e:1f:51:82:ba:a9:8d:06:ab:a4:16:59:24:f2:c5:0f:95:
         e0:20:23:56:61:cc:04:07:65:39:6f:95:ea:91:62:d1:cb:c4:
         c8:68:07:35:68:e0:14:77:ec:aa:76:80:50:ea:8f:52:80:d3:
         33:3c:fc:6b:5c:18:84:e7:78:67:5c:b6:25:ff:cb:a5:0d:b9:
         52:65:a1:6d:ae:83:5f:ee:05:c4:19:ee:63:35:61:6a:af:99:
         dc:f3:96:40:a8:50:7c:3c:ab:0d:d2:0a:9c:c9:2c:20:e2:d5:
         90:b1:55:33:e1:66:5e:63:74:dc:9c:82:61:d5:2a:17:b1:9d:
         3e:58:fb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:11:24 2025 by rpki-client