Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3cbb6c73-ebdf-3f32-837b-fc95256ca97a.roa
File:                     3cbb6c73-ebdf-3f32-837b-fc95256ca97a.roa (raw, json)
Hash identifier:          RHblLgE18bVJ+eIjA80j5hN2J9b/vBTOiygglsR/xxk=
Subject key identifier:   50:8F:41:53:21:17:19:D5:18:2B:34:66:8D:7D:93:05:42:D8:2A:39
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A050A86733602F902DE9E2380
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3cbb6c73-ebdf-3f32-837b-fc95256ca97a.roa
Signing time:             Fri 30 May 2025 01:00:48 +0000
ROA not before:           Fri 30 May 2025 01:00:48 +0000
ROA not after:            Thu 28 Aug 2025 01:00:48 +0000
asID:                     399166
IP address blocks:        2610:a1:3300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:05:0a:86:73:36:02:f9:02:de:9e:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 30 01:00:48 2025 GMT
            Not After : Aug 28 01:00:48 2025 GMT
        Subject: CN=9c6dc44c-5834-4b91-b3b3-0ff758ea8afe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ab:74:69:3a:d5:17:72:bc:6f:45:f1:00:06:
                    c5:a0:29:20:6c:d9:d4:1c:0c:56:e6:bf:73:19:d2:
                    08:74:af:ae:30:0e:f5:bd:3f:50:f6:62:80:94:4b:
                    dc:30:7d:a2:af:a8:e7:85:8f:e1:67:73:1b:61:8a:
                    cc:99:83:58:f7:e9:e9:1a:07:df:3e:f6:eb:cc:6d:
                    aa:2f:34:d9:54:2d:60:2b:2e:b4:f7:9d:35:90:6c:
                    76:7e:5d:93:2f:c5:71:02:f3:ef:6c:ae:29:e0:79:
                    d3:e1:4a:f1:d0:36:75:0d:43:33:25:ec:46:bd:2e:
                    4a:e6:54:07:fe:fa:ce:06:18:0f:ec:3a:9d:c3:5a:
                    62:76:86:0f:cf:46:ab:7d:10:2d:99:d8:84:be:4b:
                    4a:ee:c6:a9:d7:7d:1f:14:94:18:cb:a1:80:76:a3:
                    fc:6c:52:54:f7:9a:dc:f6:da:dc:c2:3b:60:68:7b:
                    1b:26:06:41:71:dc:b5:93:1a:a4:ee:48:a6:2a:9f:
                    75:be:ae:b4:e9:e9:57:1c:7f:f7:59:b8:d4:e1:b4:
                    b7:6f:24:5d:d4:55:32:66:db:f6:23:75:57:e4:32:
                    38:71:21:01:44:3e:ae:71:38:53:c6:a4:15:d9:ee:
                    fb:77:cf:fb:11:c4:ae:cd:c5:16:6c:cb:4a:01:22:
                    63:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:8F:41:53:21:17:19:D5:18:2B:34:66:8D:7D:93:05:42:D8:2A:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3cbb6c73-ebdf-3f32-837b-fc95256ca97a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:9d:26:fd:d7:65:52:a8:dc:55:52:39:85:f1:8b:69:8c:37:
         62:3c:88:ba:35:43:6e:1a:af:5f:27:8f:4f:24:c9:4a:4b:81:
         77:ca:58:7e:93:d8:c5:92:8f:47:d6:a2:c5:53:63:11:aa:80:
         f8:b2:52:98:19:80:03:2e:3d:10:ad:80:ad:a1:b8:d7:29:46:
         31:98:85:cb:92:29:a4:9e:3f:8b:24:83:a7:cc:1b:0f:ae:a3:
         6d:2b:19:b3:d7:e6:63:7f:2b:50:cf:ca:e2:b7:a0:af:9c:79:
         7c:f4:39:1a:c0:93:51:9e:b3:56:79:e7:6c:c0:02:28:5c:a2:
         13:12:25:0e:5e:23:23:05:47:4d:59:55:81:8d:a4:a1:90:c6:
         a6:2a:f5:b3:41:58:1e:b6:69:30:3d:d0:86:9b:81:f9:d5:f9:
         2d:9a:5d:1f:f3:37:32:bd:93:73:03:b0:12:e9:36:a4:1a:01:
         96:65:91:e3:66:70:7c:12:da:ba:58:57:66:ea:26:21:5a:2f:
         6f:b5:bd:3c:c5:b9:ba:84:96:78:72:52:2c:56:b1:5c:cb:b3:
         6c:bf:b8:2e:fb:a6:97:8a:d9:9d:45:06:79:e1:1f:16:3f:cb:
         8d:94:9b:7d:b1:7c:ce:74:91:19:19:e1:b8:0d:3a:0f:e2:eb:
         e5:50:80:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:32:07 2025 by rpki-client