Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fc50fe04-187c-3b44-87f2-d231b2d1d33e.roa
File:                     fc50fe04-187c-3b44-87f2-d231b2d1d33e.roa (raw, json)
Hash identifier:          12STQHdRp+De2XtDssoYwun0KlH3WjdbfNkjYqjs2Yo=
Subject key identifier:   FD:67:68:56:58:38:39:F9:72:62:FC:6B:31:98:A2:1D:C0:A0:96:2D
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AE5C681EEA7A15CAEDA5C0974
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fc50fe04-187c-3b44-87f2-d231b2d1d33e.roa
Signing time:             Mon 18 Aug 2025 13:00:41 +0000
ROA not before:           Mon 18 Aug 2025 13:00:41 +0000
ROA not after:            Sun 16 Nov 2025 14:00:41 +0000
asID:                     399156
IP address blocks:        2610:a1:3100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e5:c6:81:ee:a7:a1:5c:ae:da:5c:09:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 18 13:00:41 2025 GMT
            Not After : Nov 16 14:00:41 2025 GMT
        Subject: CN=b2b8322a-78ca-48a0-a2f6-406776f4dd8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3d:da:b7:10:30:c1:fe:b9:e1:22:44:7f:c0:
                    ce:a6:dd:d0:0e:d5:13:c5:ea:76:50:59:ce:44:23:
                    17:41:89:30:87:ba:f7:f5:8a:d4:82:f3:a2:14:87:
                    f1:59:10:93:f9:9f:40:e2:ea:78:f4:e0:0f:e9:9c:
                    9c:6b:27:89:a1:34:6e:35:c8:4e:c0:64:cf:5d:8b:
                    42:cf:29:6b:d2:52:26:a9:c8:e6:05:d3:1a:08:8c:
                    d7:60:b5:21:42:39:b4:65:b3:74:fb:2a:05:e6:4b:
                    72:b7:78:f6:4d:52:e8:90:8c:f9:fd:86:e9:8f:43:
                    d9:55:4e:91:42:41:7b:08:dc:c4:7a:16:63:78:79:
                    e1:d6:83:f2:f0:0f:f6:11:0a:2a:ed:79:42:d7:84:
                    74:5c:a3:43:ed:1c:6d:9c:34:45:ef:fc:e9:99:c2:
                    bd:cf:ae:1b:54:a0:89:c5:cf:8d:f8:00:15:99:61:
                    af:92:fc:bc:38:db:b8:91:72:82:e9:b6:a1:d5:77:
                    62:61:2d:fd:c6:df:ac:ba:c3:38:1a:83:b1:77:6f:
                    df:25:75:ed:ea:cc:00:87:93:38:2a:df:fa:dc:95:
                    61:9c:8a:57:c8:02:6f:99:de:d5:67:68:30:5e:8e:
                    6a:7f:41:02:9a:ab:68:af:f9:b1:eb:33:8a:89:af:
                    9e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:67:68:56:58:38:39:F9:72:62:FC:6B:31:98:A2:1D:C0:A0:96:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fc50fe04-187c-3b44-87f2-d231b2d1d33e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:68:82:54:a8:5b:b7:5a:e4:1a:14:de:2a:22:ca:cb:fc:68:
         a3:1f:64:8a:f7:0e:74:80:09:48:99:a8:2f:57:7b:1d:35:29:
         fb:23:7c:03:66:a5:3a:18:a8:d1:e5:b6:5e:6f:ac:37:41:88:
         b1:3c:57:9f:51:8f:70:45:43:24:c3:dd:4e:22:ca:cf:49:ef:
         a8:4e:e7:1f:e2:6e:4e:58:31:0a:ef:9d:e5:56:a3:70:7c:c0:
         7e:9f:72:16:eb:8a:4b:8a:62:d9:62:ff:4a:c2:6d:81:09:ef:
         a9:e8:8c:cc:f5:6c:4d:5f:20:29:b6:b2:f4:34:52:5d:a0:52:
         76:48:56:d5:8f:af:d2:2f:f8:6f:4d:80:97:6b:6e:4b:64:44:
         d8:56:8c:da:53:16:f7:fa:64:25:0c:59:a7:df:50:cd:71:2a:
         1c:80:d4:3d:60:cd:76:63:ac:4d:75:37:da:ca:8d:46:6e:0f:
         c3:49:23:9e:31:5b:05:bd:65:2a:33:a0:70:22:2c:53:bb:58:
         8d:5f:29:b2:3e:0b:83:8e:8f:d0:73:92:e3:29:99:44:4b:84:
         9f:8e:72:5c:0f:13:4f:4f:df:07:a0:6d:63:6f:f6:29:c8:c3:
         41:3b:00:ae:f0:45:bc:b2:49:3e:8e:e0:cb:8b:eb:e8:b0:a9:
         14:29:a9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:04:31 2025 by rpki-client