Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/28fee74a-a495-3352-a13d-3ca8a75d9ec0.roa
File:                     28fee74a-a495-3352-a13d-3ca8a75d9ec0.roa (raw, json)
Hash identifier:          j0SsjJ368AwY7yfx2SktukmOu2hSWbbOq6a322FZZ4E=
Subject key identifier:   D5:26:3D:2D:12:2B:BB:A6:B2:52:FF:B4:50:13:3B:5D:8A:74:38:FF
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F1801ABD38983780C1B33800
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/28fee74a-a495-3352-a13d-3ca8a75d9ec0.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397243
IP address blocks:        2001:502:4612::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:1a:bd:38:98:37:80:c1:b3:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=dc40e457-34b6-4a01-ac1c-5888c3a1ffa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:aa:e0:cb:68:3b:1d:e7:85:96:65:a0:0e:0d:
                    1e:0c:fd:22:63:72:b2:e5:95:c5:5b:c8:a2:a4:82:
                    b3:ed:c8:e9:76:da:bf:22:08:d0:a7:35:bd:62:9b:
                    e2:b3:12:25:03:57:d9:b5:28:e7:ae:39:95:08:a2:
                    0c:3d:11:86:2b:bc:67:ad:19:fe:7a:aa:91:46:9b:
                    f0:fe:d7:5a:3c:6e:d3:b6:35:b8:b8:a9:5b:d7:da:
                    54:4d:94:03:fc:a1:04:4a:33:67:97:16:b3:12:78:
                    ac:7e:2c:a9:8d:b2:89:1c:e6:15:8d:9e:f6:95:9f:
                    fa:99:03:a7:a7:a8:f4:c1:c0:00:cc:c6:b3:62:c5:
                    f9:02:c5:7e:b7:da:40:9b:92:5a:bb:2e:c8:d5:62:
                    13:47:ea:e9:5b:73:74:21:fa:29:4f:57:1a:11:e2:
                    94:cc:b6:73:b0:0f:56:5f:d1:c8:36:d8:4a:d4:95:
                    ac:94:da:a7:79:6e:f1:2a:6c:be:3b:38:33:68:0c:
                    ae:8a:98:19:49:ff:e7:46:7b:e4:b2:f1:2e:9a:04:
                    ae:32:33:57:6e:ca:98:39:ec:e6:75:e2:eb:65:5d:
                    4c:2c:f0:45:b9:99:63:77:0c:26:95:dd:b7:75:6d:
                    2d:a7:ae:2c:4e:7b:5b:b7:a6:e2:74:85:d1:f2:a4:
                    4a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:26:3D:2D:12:2B:BB:A6:B2:52:FF:B4:50:13:3B:5D:8A:74:38:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/28fee74a-a495-3352-a13d-3ca8a75d9ec0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:4612::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:f8:87:82:87:c0:3e:c9:a1:92:67:9f:d1:92:ee:58:d4:b7:
         bd:d4:47:45:6c:48:6c:c2:d0:ab:84:80:35:76:36:b4:77:24:
         ea:d9:d4:b9:ef:b5:d4:48:9a:67:c2:08:8d:90:70:7c:26:02:
         ee:4e:b7:34:19:6d:23:aa:93:88:04:25:ef:d7:a1:2c:31:d4:
         58:58:ff:a8:23:4f:b0:53:e6:61:b5:39:34:3c:68:3b:64:8d:
         2b:f0:94:f6:42:44:a5:68:05:ac:e2:3e:39:50:db:d6:1b:e4:
         82:ba:11:c9:c0:3f:cc:1e:ac:3d:03:ad:80:ab:4d:2b:f4:b2:
         5a:26:d9:89:14:0c:7f:44:f1:3c:e1:18:c9:ed:cf:ef:b6:4a:
         d5:d2:16:da:fc:75:c9:ee:b9:81:72:32:31:5a:32:16:15:3a:
         fc:0f:fe:ca:4f:b3:14:fe:0d:c2:2d:28:68:d0:d9:f6:45:e1:
         f9:d1:39:9a:09:9f:2d:e4:b5:05:10:26:4d:cb:af:ae:ba:cb:
         ea:0b:01:2f:e0:59:ae:d5:d3:fb:e6:8f:5d:d7:e0:5c:db:02:
         c5:98:c4:a1:a2:7f:a2:e5:c4:c7:61:7d:8c:6a:4f:91:27:0c:
         16:00:a6:4a:91:81:61:c5:85:16:aa:47:f4:f9:f7:3d:b9:52:
         21:91:14:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:10:13 2025 by rpki-client