Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1013a374-175a-35f4-8914-bd8b238c6d88.roa
File:                     1013a374-175a-35f4-8914-bd8b238c6d88.roa (raw, json)
Hash identifier:          LEtV0MV/kAWips8mmE6+sjzvydaiPkSodWtwY7EPEKI=
Subject key identifier:   54:14:85:AE:DF:58:BD:8E:1C:A5:FC:21:FF:5A:8F:3B:16:8F:14:B2
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F1801CCB0B0D8910CA532F80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1013a374-175a-35f4-8914-bd8b238c6d88.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     12008
IP address blocks:        2001:502:d399::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:1c:cb:0b:0d:89:10:ca:53:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=4964827e-3133-44aa-804f-1a10b304a195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ad:85:11:66:97:7e:df:1b:05:d5:ef:a5:be:
                    06:7d:03:3c:a3:3c:ed:21:9a:ef:c4:88:ae:1a:b3:
                    34:d5:b1:41:77:c9:af:8d:f9:7c:ce:ae:59:cb:fc:
                    e3:88:cc:69:9d:33:8b:05:53:31:d1:21:87:58:fc:
                    d1:97:c8:0e:95:21:16:aa:c0:51:b8:48:16:d1:09:
                    24:d7:b6:8e:34:99:b4:17:6e:58:85:ef:bd:ee:32:
                    ca:dd:8e:94:94:2b:e2:35:61:59:db:e0:ec:45:8c:
                    1a:13:c3:41:aa:a2:c4:6b:28:c3:ae:30:af:49:79:
                    39:36:5a:df:39:4a:c5:e2:52:c0:85:82:00:90:90:
                    05:a6:2b:da:8c:ac:cb:64:f8:d2:80:5a:24:ff:28:
                    c6:22:1c:48:40:72:d6:20:83:7f:9a:9a:54:87:84:
                    79:11:69:35:3c:10:30:a6:1b:e4:92:67:c9:9b:4d:
                    bc:71:cc:b5:f2:5a:27:61:38:25:03:94:f5:15:c7:
                    72:b3:3d:1f:24:65:eb:8f:5d:c4:9e:13:62:c0:fd:
                    00:95:a6:94:d6:7c:fb:5a:c7:e8:ce:fa:80:01:92:
                    fc:e7:05:1f:57:59:98:22:d0:81:57:c6:30:ec:36:
                    b1:58:2e:b0:f4:cc:a2:5c:6f:c7:1a:7c:d0:55:13:
                    9f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:14:85:AE:DF:58:BD:8E:1C:A5:FC:21:FF:5A:8F:3B:16:8F:14:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1013a374-175a-35f4-8914-bd8b238c6d88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:d399::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:5d:0a:f9:29:8f:93:bf:9f:d1:2e:11:36:45:99:c4:83:dd:
         6b:3f:d7:03:a0:0d:dc:48:7a:c1:2d:1e:3b:04:d2:77:4a:38:
         5a:b6:35:53:84:2b:61:47:6f:b4:33:4d:90:69:d7:92:bd:87:
         d9:e5:d0:ec:1d:b2:79:00:e6:d0:31:95:76:ca:71:98:d7:b7:
         da:9c:6a:b0:4c:ff:ba:bc:e1:fe:d8:09:e6:b9:ee:4d:2d:45:
         55:57:bf:c4:e2:73:0d:4e:91:01:73:49:9d:53:a0:c4:30:29:
         f2:23:bc:7f:7d:27:fa:ed:56:e8:11:d6:1f:f6:19:ff:ef:8c:
         b6:30:12:38:8d:68:bb:83:07:9a:4f:84:1c:ca:fc:0b:c4:7a:
         ae:e4:39:43:45:70:63:3e:c3:4f:96:ec:90:4a:9d:97:b9:6f:
         7b:d6:1c:96:d7:83:a6:4d:3e:88:2e:47:b3:ed:df:21:0b:7a:
         68:d1:43:d4:11:3e:90:13:34:2c:63:73:bd:d1:20:96:70:0b:
         b4:fb:4d:b0:de:ba:e7:34:00:4c:c0:8a:17:0a:3e:c8:4f:f4:
         25:7d:3e:43:9c:be:22:a2:7d:30:1d:7b:1f:af:a9:37:91:34:
         dd:10:13:0a:dd:f2:1e:07:94:ab:5a:9e:e4:86:62:f9:61:c9:
         2a:74:d3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 16:17:41 2025 by rpki-client