Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0fac24ae-1fe7-31e2-9767-5be83b4f5955.roa
File:                     0fac24ae-1fe7-31e2-9767-5be83b4f5955.roa (raw, json)
Hash identifier:          XoghVj4PxUIiF9PKD3NwzFalt8Xx9L6/J/5oJgVXSXM=
Subject key identifier:   97:0F:14:D2:25:A3:CB:31:DA:DD:1A:2A:2F:2D:00:75:2C:AF:FA:CF
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F1801669B11D11077AE87780
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0fac24ae-1fe7-31e2-9767-5be83b4f5955.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397234
IP address blocks:        2001:502:100e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:16:69:b1:1d:11:07:7a:e8:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=2b0221fe-037d-415a-8d3f-6502b75f8918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3e:e1:98:ee:9a:b4:26:ed:8b:fa:f2:78:92:
                    53:de:cc:4d:f9:1c:99:51:06:d9:d3:10:31:fa:88:
                    9c:c4:55:cb:a9:49:7d:ce:21:79:9e:d0:c4:26:b2:
                    70:d1:75:20:7d:ff:48:97:86:dc:33:9d:82:3b:cb:
                    ab:e4:10:ae:4a:0c:46:73:d0:2b:62:89:af:13:76:
                    00:b0:da:bd:9b:1a:08:94:b5:3c:5a:b0:f5:cc:d2:
                    99:bd:31:66:ac:87:e6:79:90:5e:f2:0a:7a:98:65:
                    ac:ec:81:3b:e5:44:b6:45:bc:1f:52:82:58:b0:dd:
                    61:9f:e7:40:37:02:75:65:68:cb:41:af:07:b9:9e:
                    fc:d3:61:90:8f:63:da:b2:cc:22:34:00:0a:13:e8:
                    0c:d7:c1:e6:9a:c9:43:ae:40:07:0e:be:74:9c:44:
                    ff:72:aa:c6:1a:82:4f:15:01:68:ef:52:ba:e5:0d:
                    3b:23:bd:19:cc:cd:85:c3:d7:7f:df:64:fa:f4:e0:
                    7f:21:ba:2d:84:f8:58:55:0e:6d:dd:1d:0b:7b:ce:
                    39:08:2f:4a:c6:95:25:fa:e6:c1:14:ef:f3:94:63:
                    d2:74:41:3e:1b:6b:fe:31:f8:14:f6:a0:61:fa:b6:
                    2d:e7:e8:8b:7e:ad:dd:cf:4f:bc:1d:75:03:d2:bb:
                    29:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:0F:14:D2:25:A3:CB:31:DA:DD:1A:2A:2F:2D:00:75:2C:AF:FA:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0fac24ae-1fe7-31e2-9767-5be83b4f5955.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:100e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:56:c8:fe:97:0e:14:64:60:cc:2f:aa:31:03:34:fc:12:55:
         ae:d2:c8:66:a7:ce:81:66:ca:35:39:fe:e8:b2:bf:aa:2a:37:
         7b:b3:c2:5f:b1:ff:b2:e9:a3:a0:99:cd:2d:cb:3d:0e:8f:85:
         46:2e:25:92:60:96:93:88:08:68:7a:b3:be:2e:69:40:fd:e8:
         fd:98:74:3b:d5:81:01:88:06:bc:bf:aa:3c:0c:55:1e:28:16:
         b2:6c:a4:b8:2b:28:72:71:6f:fb:1c:99:9b:1e:dc:51:12:ae:
         31:81:71:9d:57:02:5d:b9:7b:58:0a:a6:c8:97:27:f0:35:ee:
         b6:68:3b:b0:12:e0:af:2f:95:84:00:08:95:35:b6:13:f4:34:
         c3:03:b3:cd:1d:68:35:b0:ec:0a:91:c5:f3:19:19:05:22:ce:
         13:14:db:73:50:3d:5b:bc:0d:25:aa:73:06:ef:c8:4f:36:21:
         98:fe:22:a4:17:ab:e1:e8:0a:82:62:8b:c2:99:25:75:e4:12:
         e8:1d:7a:5f:1f:78:7d:a5:8b:c3:fb:d0:b7:c7:95:6e:da:8b:
         65:63:87:57:a7:5c:bf:66:cd:08:18:a9:ae:24:bf:e5:11:ad:
         c3:3c:bf:84:4e:bb:f8:7f:96:c9:e6:9e:07:c7:97:2f:b3:7f:
         27:b4:25:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:12:47 2025 by rpki-client