Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/11d8532d-db3d-3989-b88b-dad5776594a8.roa
File:                     11d8532d-db3d-3989-b88b-dad5776594a8.roa (raw, json)
Hash identifier:          TyFb2xmClStIjMFG1gznONHD+u8zzwyrbq9ZUpy7ARQ=
Subject key identifier:   27:E3:BC:C5:0C:D3:FA:28:7E:1C:A7:78:D8:70:B2:3F:B9:B5:EF:2E
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584BB2F811613CB2351F65CA0B80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/11d8532d-db3d-3989-b88b-dad5776594a8.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     397226
IP address blocks:        2610:a1:1000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f8:11:61:3c:b2:35:1f:65:ca:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=fdacd42b-9f67-448e-961e-011f2563ea0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c5:48:d8:0b:8d:ed:57:10:53:f3:67:6d:a2:
                    b8:f4:5e:36:84:71:f6:43:5f:bc:b9:b5:0c:7a:bf:
                    59:09:c0:cc:ec:a3:b5:4c:4a:57:01:e2:2a:09:7c:
                    e6:dc:bf:ed:ac:f3:c5:57:b9:89:04:e6:e5:04:2a:
                    c0:91:9d:fa:44:31:9d:7c:61:a4:9b:a7:29:f5:50:
                    7b:fa:3d:d4:26:2f:ea:b8:92:35:f6:38:71:8a:a2:
                    42:ca:9c:79:6f:30:1b:a1:f0:37:86:fc:02:af:9b:
                    d4:4e:32:14:48:bb:ad:fd:f3:62:f0:35:ca:ab:42:
                    48:30:0e:b3:c9:b5:57:0d:da:67:55:20:09:2d:94:
                    76:7d:08:c7:85:24:f6:24:4a:fc:8d:71:99:b0:a8:
                    8d:13:58:84:5f:c1:b9:c1:56:31:5a:86:56:ca:ae:
                    8d:0f:f4:67:f8:d5:66:8c:0e:49:81:55:35:89:64:
                    63:88:6d:10:12:0f:37:26:8f:70:a4:90:9c:ac:4a:
                    ae:2c:eb:42:f5:0f:04:3a:e7:87:ca:81:9c:80:ee:
                    2c:7d:09:3e:58:4e:1d:07:3b:95:02:0d:3e:b5:42:
                    47:bf:61:a7:94:0e:62:50:ff:61:5f:35:82:a9:9d:
                    66:be:c5:11:ce:a9:9d:a7:13:23:a3:1d:34:c2:43:
                    a5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E3:BC:C5:0C:D3:FA:28:7E:1C:A7:78:D8:70:B2:3F:B9:B5:EF:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/11d8532d-db3d-3989-b88b-dad5776594a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:c6:1e:dc:ea:87:7f:06:bf:a3:44:d4:42:58:d3:0e:22:b5:
         e2:0f:d8:52:b1:f7:cb:7d:64:23:4a:12:1e:3f:39:69:39:d4:
         05:52:93:92:d3:c1:df:ea:75:9b:1d:21:ca:78:4f:44:e2:ac:
         36:52:df:31:30:89:b5:44:8f:4b:64:c8:4f:44:17:c9:c4:1d:
         5c:07:24:bc:39:49:3a:af:40:9e:9a:4e:18:8a:00:f2:ee:17:
         25:4d:73:69:5e:4a:a4:ce:1b:05:61:06:45:18:07:a0:c3:f9:
         8d:08:fa:c2:c3:a4:7f:2f:d6:f0:05:18:3f:24:ec:91:d1:67:
         56:6a:98:8b:bd:30:65:1b:01:ed:09:1c:1f:8c:44:9e:2e:ed:
         b6:89:13:f3:6d:84:e5:12:92:dd:8a:c7:f0:f4:f0:db:6d:c8:
         44:a3:46:3b:fd:57:1d:a3:f6:1f:e6:7a:cf:8b:9a:4e:e9:c5:
         80:0d:39:b5:d9:7c:d6:e3:ba:36:b3:96:b8:83:c4:03:1e:0a:
         5a:7a:88:4f:8f:17:fa:2b:3c:0c:6f:c9:17:82:25:35:d7:d7:
         ad:02:a1:d0:47:f4:48:1c:f4:35:39:db:9f:c2:64:d7:fe:dc:
         26:ff:df:8b:0d:25:98:41:05:1c:22:37:03:50:30:a4:f5:7e:
         11:41:9a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:04:30 2025 by rpki-client