Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/11d8532d-db3d-3989-b88b-dad5776594a8.roa
File:                     11d8532d-db3d-3989-b88b-dad5776594a8.roa (raw, json)
Hash identifier:          7C4fT7dUAsUXKA+CP0sEjSp+kYWIjtmplcOHQ/Pqxaw=
Subject key identifier:   54:92:56:FC:88:84:A9:3F:EB:74:F7:9F:E6:CD:F8:43:0E:FA:F6:B1
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F180103FAB38B54CA7E73280
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/11d8532d-db3d-3989-b88b-dad5776594a8.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397226
IP address blocks:        2610:a1:1000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:10:3f:ab:38:b5:4c:a7:e7:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=3d09e546-5437-4036-be82-6b2384fa47af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:36:46:f8:30:64:4a:87:74:f2:37:ce:fc:b8:
                    4f:f0:ec:03:ae:33:54:0d:e3:38:48:54:f3:15:25:
                    1d:4b:78:30:62:2e:35:97:b8:be:74:49:89:bf:90:
                    60:8b:49:80:1f:ba:7f:cd:62:f1:75:d8:b7:9a:9c:
                    08:da:0d:26:b9:3e:4b:1f:26:13:f4:5b:bf:9b:00:
                    cd:f2:9f:01:f0:3e:e7:f6:3f:8d:ec:d2:54:a1:ec:
                    ad:9e:38:ad:e7:49:06:2d:2b:d1:a0:f7:43:b4:e8:
                    86:a3:f2:12:45:98:0c:ef:f4:16:cf:02:58:95:7c:
                    75:b2:1c:7c:87:96:6a:b8:d1:77:92:5e:c2:3d:ab:
                    32:18:60:6c:22:09:94:25:cd:2b:d0:0e:b6:f2:9c:
                    16:f1:41:20:ce:94:59:d5:42:cb:00:4b:b1:78:8a:
                    69:e7:b2:9f:d0:30:4f:78:d1:d1:2b:ec:99:e1:94:
                    93:7a:50:6b:93:14:d9:a4:bc:84:c8:3b:7e:85:34:
                    c6:05:90:e2:71:4d:19:ff:5f:aa:a3:09:62:8d:fb:
                    b8:85:23:be:80:f7:b2:77:fe:86:a0:47:62:fd:de:
                    c3:20:f5:17:15:c2:27:8b:67:7e:2d:81:78:4c:5e:
                    ca:73:aa:9e:2f:6a:a5:cb:61:83:3b:65:b2:06:7a:
                    b8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:92:56:FC:88:84:A9:3F:EB:74:F7:9F:E6:CD:F8:43:0E:FA:F6:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/11d8532d-db3d-3989-b88b-dad5776594a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:7c:e5:ef:78:83:89:13:45:a9:29:96:50:25:fc:ff:1b:00:
         3a:a5:04:ea:55:7b:48:d2:b4:5a:33:3d:2f:b6:a6:7d:2e:70:
         0f:73:49:e0:e9:5d:11:78:19:84:8c:f1:76:f0:fa:44:4f:24:
         16:ad:61:c6:d9:07:aa:35:68:17:cf:40:49:59:fa:ec:b5:6f:
         96:11:3f:ab:a3:0e:5e:f9:dc:aa:93:0d:04:de:c6:1c:c8:a4:
         0a:ed:cd:49:16:98:a1:c7:51:8b:d3:7d:27:e8:cf:0e:4d:fa:
         98:1b:be:9e:b9:46:c9:3e:e2:e9:fc:56:e0:c4:a9:74:67:a1:
         a7:d5:3f:7c:4f:9c:b0:d1:64:b5:1a:76:c8:6f:7f:ad:ae:74:
         8d:2e:b4:e9:5f:2c:de:24:04:72:87:26:23:7a:0c:5b:65:9e:
         9a:60:05:aa:bc:2e:64:0c:8e:2b:a0:02:25:3e:83:f5:b6:c7:
         c3:a2:cc:12:27:a5:ab:f7:80:a9:9a:78:73:4a:23:86:fe:d4:
         82:ad:c7:ce:ea:36:87:5f:6a:44:30:16:fe:79:93:17:9f:af:
         4c:0f:d7:5b:38:9b:06:e7:ce:c7:a1:92:4c:ad:fb:3a:e3:37:
         9f:d0:ae:1f:c4:24:99:93:7c:58:e8:13:8f:cc:c7:07:6d:e4:
         0b:e2:3d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:09:13 2025 by rpki-client