Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f38cb7c4-7703-3277-b555-cc580fd5565a.roa
File:                     f38cb7c4-7703-3277-b555-cc580fd5565a.roa (raw, json)
Hash identifier:          BkV/K0hvGAVFqDihKnDk2ly6CGpKihWeAXQiV2CmilA=
Subject key identifier:   28:DD:0A:B4:87:1B:AC:30:82:8D:A6:6F:CA:02:05:C4:53:17:9D:B7
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AE5C684C408B431DB178E8F80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f38cb7c4-7703-3277-b555-cc580fd5565a.roa
Signing time:             Mon 18 Aug 2025 13:00:41 +0000
ROA not before:           Mon 18 Aug 2025 13:00:41 +0000
ROA not after:            Sun 16 Nov 2025 14:00:41 +0000
asID:                     397216
IP address blocks:        2610:a1:3300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e5:c6:84:c4:08:b4:31:db:17:8e:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 18 13:00:41 2025 GMT
            Not After : Nov 16 14:00:41 2025 GMT
        Subject: CN=2a5ded04-7dea-48ab-bb07-072a9fb15423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:1d:67:6e:58:f0:26:dc:e5:b4:11:ca:88:
                    2f:8b:b6:80:e6:8d:4a:b6:86:76:80:95:c0:7d:0e:
                    88:e1:3b:8c:e2:57:4c:28:57:d4:09:cb:ae:e0:dd:
                    2a:7f:c0:da:48:d1:50:56:4d:9c:61:35:26:f9:a4:
                    aa:7c:a4:df:75:73:97:7a:24:86:4a:b0:ae:3e:f8:
                    ef:da:18:ee:4f:49:71:75:59:86:a6:c2:7d:10:5e:
                    cb:41:43:4e:71:37:7a:5a:07:db:61:9f:77:a8:1f:
                    04:87:d8:6a:12:f8:6a:97:ba:7e:ee:e3:eb:c8:e9:
                    f3:b3:df:8a:85:05:26:16:d2:f5:c6:a9:04:62:77:
                    c3:0e:a8:83:78:9e:cb:00:79:0d:7e:43:12:ec:9c:
                    ed:10:dc:2d:25:31:98:5d:97:41:98:32:3f:d5:d7:
                    44:1c:40:53:0b:7b:8f:40:0e:7c:8b:65:b9:23:06:
                    22:7d:e4:42:5d:a9:bd:40:d0:80:e9:cd:38:55:3e:
                    dd:52:e5:91:9c:ab:a1:ab:6c:13:dc:16:e2:c4:15:
                    87:10:35:2b:91:11:af:60:27:64:63:26:26:4f:4d:
                    03:53:de:fa:c9:63:c2:45:75:0e:6f:58:81:fa:49:
                    21:08:31:d3:7c:0b:25:de:88:ce:a0:07:0b:32:c0:
                    0d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:DD:0A:B4:87:1B:AC:30:82:8D:A6:6F:CA:02:05:C4:53:17:9D:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f38cb7c4-7703-3277-b555-cc580fd5565a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:38:a5:d8:8b:05:22:5e:53:56:66:e9:84:c2:7c:22:70:c7:
         89:e5:a0:05:46:f3:e0:8e:f7:47:ee:49:b4:ad:24:b1:70:ff:
         4a:53:25:5c:db:fc:a4:36:94:67:ea:d9:00:43:8f:63:bb:6d:
         e3:e6:d7:8a:2b:76:1b:9e:1a:82:92:49:1d:2a:83:a1:f1:48:
         20:ae:9f:a3:23:f5:b5:4b:70:e5:63:30:26:dd:97:a9:f1:04:
         d2:64:40:f8:ea:49:72:c2:65:77:84:ac:9e:76:96:df:22:54:
         12:7b:98:40:47:d6:97:c1:bc:3d:5e:64:cb:a6:2d:46:ec:8a:
         81:e3:f8:d0:d9:90:05:e8:a8:ff:43:70:58:50:4f:88:7d:35:
         62:8e:0d:a0:ba:29:ca:7b:4e:d9:3c:2b:49:6d:e6:2a:d5:09:
         e2:31:a3:2d:f8:86:7b:15:93:17:71:18:22:8e:cf:6e:56:be:
         3f:b8:38:45:84:70:07:c2:2f:85:c0:bd:37:4e:a1:7a:c6:d3:
         eb:c3:ed:71:97:75:d8:65:e8:6e:c6:ed:6c:bf:9a:80:7c:84:
         6c:4d:48:2e:98:e6:92:6a:cc:1e:4d:25:ce:58:c2:4f:d9:99:
         97:1d:ca:14:75:87:76:3c:9b:79:a0:d9:96:9b:28:81:da:ae:
         7b:42:05:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:19:18 2025 by rpki-client