Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f891dfa0-0b24-3209-9152-896b3fa40735.roa
File:                     f891dfa0-0b24-3209-9152-896b3fa40735.roa (raw, json)
Hash identifier:          iGG4SdyihDI7vkUWhwxNIzxiZsA58WZZSvX6NGPCnhs=
Subject key identifier:   3B:E0:22:4B:FC:C5:27:4E:E1:4D:0A:BF:96:47:49:50:6D:CB:30:36
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AD23C15C98A1228AA5F3C7668
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f891dfa0-0b24-3209-9152-896b3fa40735.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     397219
IP address blocks:        2610:a1:1000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:15:c9:8a:12:28:aa:5f:3c:76:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=449a2790-20e3-4909-b452-73d781323d1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:35:02:07:b3:df:35:0e:b1:13:60:30:b1:80:
                    82:2e:ad:c1:7b:db:f7:c6:77:b9:c3:e3:70:87:dd:
                    a0:b8:88:83:83:19:61:bd:fe:c0:bd:25:82:66:0d:
                    9a:3e:30:00:e6:e3:b8:e2:28:42:7c:da:94:f7:42:
                    1c:6e:fa:47:35:04:0b:37:ce:22:82:5b:2a:be:43:
                    6c:0d:d1:8f:0a:e2:67:80:5e:36:2b:cd:cf:3a:b0:
                    b8:9c:51:e3:35:85:b1:13:4d:19:67:8b:df:1b:d6:
                    2a:05:33:ad:4c:4a:60:50:8b:ec:f5:0a:63:67:f6:
                    1f:d7:4f:32:2d:16:58:b6:3a:72:93:03:ee:fb:af:
                    a2:86:5d:c7:8b:1d:3b:3a:6e:97:e6:8b:7a:50:b2:
                    64:01:f1:69:3b:ff:2e:78:85:07:2c:a6:97:ad:77:
                    65:0d:81:81:fc:93:5e:7a:f4:16:84:96:ad:3d:4c:
                    be:c1:c2:88:71:a0:cb:bd:c4:f5:f4:2a:df:37:fe:
                    12:9e:a3:c6:4b:6c:1c:d1:a4:f8:24:e4:55:96:cd:
                    ae:b5:6a:6d:d7:5c:9e:33:6f:17:df:c4:a6:bc:f4:
                    75:b4:bb:95:39:6b:7f:4c:06:c5:30:a7:20:fb:4f:
                    dc:48:c8:a1:48:16:39:ab:f8:ab:b7:39:da:7f:40:
                    97:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E0:22:4B:FC:C5:27:4E:E1:4D:0A:BF:96:47:49:50:6D:CB:30:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f891dfa0-0b24-3209-9152-896b3fa40735.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:3d:c4:cf:8b:2e:7e:67:08:89:fe:c3:4d:c0:12:aa:6f:10:
         b1:54:45:4e:ac:6e:bc:f0:ff:30:fd:09:a8:08:03:e2:e8:d0:
         e4:27:c6:4e:29:5f:b6:9c:29:bc:5f:22:07:a8:b1:d5:d1:18:
         41:cd:a0:b1:75:43:05:cf:64:64:97:7f:2b:bd:16:ff:03:5a:
         29:89:f4:22:a6:76:8b:bd:7f:4a:71:82:c6:eb:13:5a:1b:55:
         89:e2:e9:04:45:80:c5:3c:53:21:48:b0:fb:31:f4:26:7c:ce:
         37:e7:2f:53:53:80:4b:98:68:dd:6d:10:b7:98:95:f8:cc:81:
         df:62:7b:02:c7:ac:8f:36:ca:7f:2e:05:87:cd:65:e0:de:85:
         19:08:e1:36:4f:f7:9d:13:b9:3c:73:ad:bd:00:54:8a:3a:7a:
         8e:93:bc:6a:a2:0a:13:1c:53:39:95:da:e9:77:09:9b:f3:e0:
         cb:e7:ad:58:13:89:f4:b3:81:86:f5:8d:d4:50:06:07:8f:6f:
         e7:47:e5:e3:18:18:1f:3b:32:1d:f6:2d:4f:8b:2d:fe:d9:df:
         64:82:44:b7:ae:24:27:36:a9:8c:a7:cc:e1:54:4b:31:30:ee:
         56:8b:db:2e:3b:bc:f9:63:6c:71:d9:75:f5:c9:2d:28:38:99:
         9a:56:c6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:45:57 2025 by rpki-client