Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f2d71818-c79d-3099-bbef-15605bef4960.roa
File:                     f2d71818-c79d-3099-bbef-15605bef4960.roa (raw, json)
Hash identifier:          ac/YK1SO5PQ4uEVlWvdGMPHqFXW7QUo3W2vMW+c7pr8=
Subject key identifier:   77:D7:08:F9:F8:21:7C:6A:59:06:87:8E:4D:F7:95:B1:E9:2A:6D:37
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AD23C1C8C79B47EE3E305A900
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f2d71818-c79d-3099-bbef-15605bef4960.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     397221
IP address blocks:        2001:502:100e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:1c:8c:79:b4:7e:e3:e3:05:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=e0a8114c-f942-48ed-8704-517dcb8d053b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fa:15:f8:cc:d2:6f:da:73:66:9a:83:57:b7:
                    a3:aa:ef:9d:01:79:f7:10:2f:fd:95:d0:64:f2:e8:
                    df:a6:a0:20:be:e6:28:d8:65:44:f6:24:cf:4f:30:
                    ba:32:60:49:c6:6a:ad:0b:4e:2d:7e:9b:13:25:d6:
                    94:70:29:04:63:b6:b8:06:25:6d:54:b6:b1:7e:fd:
                    11:bc:1e:f4:88:b8:75:e9:78:2d:98:0a:be:37:44:
                    89:81:14:ce:c4:b9:64:63:4f:60:4f:14:08:f0:a1:
                    1e:ae:f3:ec:b9:ed:3d:49:d8:84:3f:46:28:87:4c:
                    42:cf:81:80:d6:5d:b0:c5:7d:7c:ea:17:7d:d5:e9:
                    58:16:bf:d6:f3:2d:4f:43:e7:4b:fa:d0:02:d7:46:
                    ef:5b:15:35:48:c7:73:32:5b:78:7b:21:e5:ca:d9:
                    21:b6:03:9e:c6:fa:a5:2f:4e:2e:28:0d:06:62:88:
                    dc:8d:6a:4f:d5:28:a4:f4:b1:19:a9:4e:2a:e8:12:
                    87:53:d6:4d:a5:88:02:f7:10:08:d4:d2:3f:08:bb:
                    3d:a8:5d:80:d9:5c:fe:47:2d:6d:65:cd:55:c0:c7:
                    6a:74:70:2f:b7:8f:e8:ef:da:18:10:3f:c7:f7:d8:
                    b5:31:88:34:af:f9:c3:d5:ef:62:4f:1c:89:aa:c0:
                    1a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D7:08:F9:F8:21:7C:6A:59:06:87:8E:4D:F7:95:B1:E9:2A:6D:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f2d71818-c79d-3099-bbef-15605bef4960.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:100e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:d6:e1:ac:0d:49:54:f9:f7:18:40:0a:60:93:d4:c7:72:b1:
         6a:41:6e:f9:4a:e4:e9:b4:52:5c:7d:1f:02:bd:fa:06:a7:30:
         4a:ba:18:7e:52:d5:b8:07:16:89:c7:7a:51:1f:ca:8a:06:e0:
         bc:bb:d9:37:70:cf:7f:55:b9:77:95:17:c2:cc:ff:72:ee:9f:
         fb:15:8d:77:58:43:b7:9e:93:2e:66:ea:57:df:7e:fc:70:b0:
         03:80:39:71:28:5f:ad:10:7f:45:4f:76:59:db:86:33:a1:93:
         84:30:aa:a0:68:ae:07:30:ab:78:66:b2:93:c7:92:1b:94:ac:
         e4:3f:e1:7c:b4:67:ed:2b:9a:fc:5f:a6:2d:ca:44:4a:80:4a:
         7d:43:ca:bd:17:36:eb:b3:4a:09:63:bc:c0:a7:bb:4b:4b:e8:
         cb:95:78:0d:b9:79:f4:72:70:e5:23:bd:8c:c4:87:69:6d:17:
         4e:98:f3:2d:39:8c:3e:22:79:7d:97:1a:f1:54:e2:57:d0:e3:
         18:d6:1a:05:f2:62:48:84:2c:96:97:30:52:c7:38:a5:76:88:
         5a:7d:9e:40:5c:35:ca:94:92:d1:de:ac:9e:b0:e1:73:1a:37:
         1c:28:51:7e:98:06:d1:c2:27:04:5f:cf:63:48:5a:83:e2:24:
         66:d4:a8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:46:14 2025 by rpki-client