Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e7f946aa-e67c-3f6e-b4f4-d85a2e45985e.roa
File:                     e7f946aa-e67c-3f6e-b4f4-d85a2e45985e.roa (raw, json)
Hash identifier:          8h4eb49TuZGmNgkR8Ko3g1oS30SANPlHBQt9H7+NcIA=
Subject key identifier:   BC:24:B7:D2:A3:05:07:FE:59:AF:FB:E9:2C:1D:FF:C8:DE:63:D9:15
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AD23C21F95BDF1FB5A7D69000
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e7f946aa-e67c-3f6e-b4f4-d85a2e45985e.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     397233
IP address blocks:        2001:502:4612::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:21:f9:5b:df:1f:b5:a7:d6:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=2348d173-1849-4a62-8041-dd2936fccdcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a6:2e:a6:2a:9b:bc:ee:bf:a6:ee:9c:7c:3f:
                    2b:6d:87:4c:58:9b:96:6d:26:01:89:40:af:98:79:
                    9d:22:34:3c:7b:f7:43:97:f0:72:12:6f:e9:9d:50:
                    17:ff:0e:d1:2b:d8:20:c4:13:d2:63:27:d7:bb:ff:
                    1c:ea:e5:c1:e0:14:84:59:46:da:41:5e:a8:b7:56:
                    7e:5d:9d:c9:e0:5d:62:1a:bf:f3:fc:c3:f8:c3:e3:
                    b9:29:ce:e4:1e:f5:ad:6d:db:31:86:48:11:bd:c1:
                    6d:9c:86:69:bc:14:de:73:d9:09:bf:7b:47:2c:22:
                    4e:d1:38:43:e5:26:9f:6d:66:4b:c3:a2:9d:5f:76:
                    c9:e5:8b:37:9a:53:3e:7e:a9:a5:09:67:11:53:ee:
                    b4:cc:3b:46:25:99:93:08:ba:20:4c:25:01:bf:f8:
                    a1:f4:2f:05:85:4c:85:98:5e:06:99:74:b3:53:e6:
                    e2:fe:32:89:ce:2e:e9:d6:01:f6:62:c0:ba:bf:2b:
                    8e:6d:cd:2f:9d:bf:7e:ae:cb:c2:22:19:a7:b9:53:
                    c4:36:8c:5e:01:b9:67:9f:22:9d:e9:13:3d:d4:21:
                    07:2a:02:56:b0:48:ce:7e:89:88:fc:ad:55:a6:b1:
                    01:03:af:03:0d:80:29:b4:ca:d2:5f:c2:5a:ca:de:
                    ff:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:24:B7:D2:A3:05:07:FE:59:AF:FB:E9:2C:1D:FF:C8:DE:63:D9:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e7f946aa-e67c-3f6e-b4f4-d85a2e45985e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:4612::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:4d:38:06:68:79:00:1e:32:4f:ef:38:f7:9c:a3:f4:4b:99:
         f2:d5:68:99:2e:a2:0b:fc:af:7c:68:cb:e7:8c:fa:96:e5:36:
         f1:ff:37:d2:6d:cf:90:37:6f:7b:b0:ef:5b:16:0a:1d:c8:59:
         21:0e:3a:0e:fe:56:e8:f2:dd:c9:97:81:5f:ff:e5:cc:62:2d:
         d2:95:77:eb:8d:fb:c3:49:58:f5:66:ee:48:12:1f:78:86:cb:
         35:b3:97:7e:10:3f:83:53:83:39:c5:2b:6c:97:ab:6c:7e:60:
         b1:54:6a:03:9d:39:7a:ea:d2:20:fb:c7:ca:f1:2a:f2:87:78:
         2b:45:80:40:7f:c3:a2:48:ab:06:80:fa:64:ad:2b:26:83:1f:
         30:95:69:c3:78:0a:a7:1c:26:3b:37:4e:46:1f:c2:11:16:15:
         e0:95:7f:38:02:8d:f5:18:62:e9:2c:d4:a3:de:f5:39:92:5c:
         23:42:b2:14:96:89:1a:46:89:f3:99:79:3c:6b:1a:68:47:9d:
         92:6e:07:cf:23:85:44:04:d2:17:cd:84:95:00:60:b4:80:84:
         1f:c7:dc:8e:42:eb:9c:78:42:92:21:25:d1:fb:62:9b:6e:20:
         eb:59:a6:e4:94:32:39:85:a3:7c:44:25:bf:e8:62:43:c8:76:
         49:04:1c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:53:57 2025 by rpki-client