Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1de59179-912f-3d21-9e9a-396b4ef9d87a.roa
File:                     1de59179-912f-3d21-9e9a-396b4ef9d87a.roa (raw, json)
Hash identifier:          dXFWkh0mjQlmJoprZO24Of5ajwmoq7NbPq5vvYYNq78=
Subject key identifier:   85:E3:45:E4:6D:01:A0:19:87:0D:37:61:88:55:E2:97:1A:0E:9C:82
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F18014DE89E52B3E925A7380
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1de59179-912f-3d21-9e9a-396b4ef9d87a.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397240
IP address blocks:        2001:500:3682::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:14:de:89:e5:2b:3e:92:5a:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=a0dcc164-3d89-435c-89cd-99aba78bafe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:66:ce:dc:5c:dd:af:ef:04:6a:13:31:2d:48:
                    15:5f:d9:c1:92:1e:3a:47:3f:91:fd:13:08:0d:18:
                    9c:5f:89:91:41:5b:98:3f:69:cf:2d:6c:c3:56:1e:
                    8c:2f:b5:fe:35:ac:4b:8b:f3:ac:aa:94:02:d5:cf:
                    47:5d:cc:e3:8b:2e:76:2d:b2:8f:70:b1:f4:ca:86:
                    6e:39:fe:8b:87:c6:4e:a7:b0:d4:e6:db:94:98:9d:
                    4b:be:ed:43:e5:e5:3b:7a:30:8b:9a:45:bc:fc:a6:
                    f5:f9:d8:63:b0:61:b3:35:01:1b:5a:ed:8f:d4:3b:
                    79:7b:47:b5:0a:e2:5d:65:e9:99:cb:66:f0:c6:32:
                    fd:65:61:b3:8c:64:b0:1f:d2:1c:68:76:07:cc:8a:
                    8c:be:a7:e8:97:ef:5f:3b:bc:90:c0:01:b6:22:81:
                    88:5e:02:c0:9a:22:45:cb:4c:70:6b:81:60:ba:84:
                    35:55:95:8f:5e:ca:b5:74:c7:d3:da:f8:00:a9:b4:
                    b0:c3:c4:a5:11:f3:b2:7c:5e:b4:f2:7e:50:e5:2f:
                    20:11:aa:57:9c:bd:1a:10:0e:ce:14:98:28:63:f7:
                    1f:7e:a5:48:59:a8:53:b0:0d:97:30:e5:3e:b6:a7:
                    d5:28:89:0e:4e:f9:0f:a0:f5:75:59:db:a2:cc:ea:
                    81:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E3:45:E4:6D:01:A0:19:87:0D:37:61:88:55:E2:97:1A:0E:9C:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1de59179-912f-3d21-9e9a-396b4ef9d87a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:3682::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:42:51:7b:55:6d:c4:58:11:2b:d7:b4:bb:b5:99:00:3f:21:
         79:e3:43:d5:b2:ee:9b:09:2d:c5:13:2f:0e:d6:da:6e:f6:ac:
         1a:a2:f8:a0:b2:ed:61:ad:fd:8a:17:bf:aa:54:82:03:fe:f1:
         f1:c8:52:89:3f:b0:1e:0a:66:fb:e3:43:a9:9c:07:da:9f:23:
         5e:f7:e4:5d:75:22:69:d2:e4:e5:d5:80:b2:aa:99:8c:54:24:
         0d:1d:b6:14:48:99:2c:15:e9:a3:df:3a:68:1c:09:73:6b:ba:
         67:dc:ce:1a:7b:d6:80:7f:64:37:96:a9:5f:3f:8c:c2:2c:69:
         36:b5:27:da:01:08:87:ce:12:d9:75:8c:3c:8c:02:47:3c:72:
         4c:59:75:0c:27:45:8c:f6:cf:7f:27:40:4c:08:8a:a7:4b:54:
         ca:fa:15:ac:31:6c:3a:4b:5c:c0:1e:f3:e9:09:a9:42:0f:25:
         b3:7e:2d:74:a8:a2:61:80:ce:65:b2:cf:8d:3e:57:37:bb:c6:
         38:c2:4d:79:ec:ff:0c:88:9b:5e:6a:c8:fb:18:12:97:e6:a5:
         40:1d:8e:c2:05:88:8f:6d:1f:66:bb:41:fd:b2:96:e8:eb:25:
         7a:98:34:66:cf:91:d5:4e:3c:92:ae:77:d8:06:db:36:a8:f9:
         d9:6c:4f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:38:02 2025 by rpki-client