Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5591f9ec-b5ac-3ba8-82ea-e05a9d81dc39.roa
File:                     5591f9ec-b5ac-3ba8-82ea-e05a9d81dc39.roa (raw, json)
Hash identifier:          ft8aGbYDNZT4IPqXtdrGTadZUqW7cjSoqr+fk28+ZEo=
Subject key identifier:   65:6F:6B:A2:5B:4D:9D:42:6D:A2:DA:6A:DF:3E:A1:78:84:05:EE:F3
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A050A8281D06F778E7D90BD00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5591f9ec-b5ac-3ba8-82ea-e05a9d81dc39.roa
Signing time:             Fri 30 May 2025 01:00:48 +0000
ROA not before:           Fri 30 May 2025 01:00:48 +0000
ROA not after:            Thu 28 Aug 2025 01:00:48 +0000
asID:                     399153
IP address blocks:        2610:a1:3200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:05:0a:82:81:d0:6f:77:8e:7d:90:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 30 01:00:48 2025 GMT
            Not After : Aug 28 01:00:48 2025 GMT
        Subject: CN=9d603e8f-0816-4fa3-a34a-1f371c4c53ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:54:52:aa:b6:96:5c:58:7d:c6:27:34:69:a5:
                    e8:b6:6a:20:e8:97:2b:63:41:61:bf:78:21:81:ed:
                    15:10:1c:a2:d7:6c:25:9c:c9:77:ac:28:7e:de:2b:
                    bd:04:2b:87:8e:5f:58:3d:44:6b:25:a6:e9:c6:fb:
                    0a:82:89:e0:15:ef:ff:76:a6:ca:4e:af:a4:7e:ff:
                    ef:aa:e8:41:ae:50:93:bb:d3:c5:f5:f3:ad:ba:be:
                    81:86:41:3b:e7:37:aa:90:85:20:ef:9c:a5:ad:79:
                    b0:14:c9:44:ac:13:38:97:b5:ee:1b:b5:20:86:a2:
                    15:b9:37:a6:66:56:94:79:d6:0d:2c:c8:a4:e2:44:
                    28:bc:c7:de:20:17:f7:15:47:59:32:3c:c0:03:84:
                    6b:76:64:d8:95:64:1d:f7:80:ba:73:75:4d:54:d0:
                    bc:8d:be:3d:38:c1:79:3d:69:86:30:fd:27:6f:f9:
                    1c:3a:bf:e8:1f:7c:b3:53:df:a1:20:a6:9f:97:58:
                    2c:08:cb:52:5c:6d:5f:89:57:bd:76:46:4c:6b:13:
                    ee:1e:38:e7:d1:db:26:28:59:95:60:42:df:10:90:
                    14:a4:56:04:f4:2b:02:f4:75:02:a7:89:b3:02:62:
                    75:9b:00:79:63:5e:89:ff:a1:fb:4a:5a:a5:0a:53:
                    4f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:6F:6B:A2:5B:4D:9D:42:6D:A2:DA:6A:DF:3E:A1:78:84:05:EE:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5591f9ec-b5ac-3ba8-82ea-e05a9d81dc39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:06:71:27:4e:62:97:1b:ef:6e:32:ed:93:13:14:70:c6:50:
         57:04:79:2f:b0:86:0c:ce:46:e2:35:b2:50:59:70:c2:b9:7c:
         dd:ef:10:51:b5:2f:cb:1e:82:a3:35:94:8d:c0:56:2a:43:f0:
         6a:0c:47:e8:38:c4:31:6d:53:80:47:7e:bf:e4:dc:b7:8a:77:
         b9:b2:b7:54:26:a1:f7:13:22:ed:eb:77:67:a3:26:72:08:db:
         3f:26:83:f5:ae:6b:b6:e0:8c:db:ca:08:01:23:8f:46:c4:f3:
         7c:90:af:53:58:88:b8:b9:1e:89:f1:32:b4:7c:35:21:1f:f1:
         d8:a6:e4:1f:50:ef:18:30:cc:84:0d:c5:5f:7e:cb:be:4a:80:
         06:de:71:27:a6:3a:9c:22:5d:83:1d:02:33:da:c7:2d:d3:f6:
         e8:86:5c:7e:47:23:27:6e:be:ca:10:d9:cc:7f:f7:df:b6:65:
         26:ad:0c:86:32:0e:34:88:17:44:3f:f5:10:04:03:31:b2:6a:
         ec:49:01:01:b7:b9:61:fe:5a:27:2e:f3:2f:ab:af:55:43:20:
         89:3d:85:61:58:3e:ff:6f:0d:01:bb:d6:04:9b:bb:39:a2:7f:
         2d:30:6e:91:df:55:1b:8f:2d:5a:32:a6:8a:89:b6:9d:ea:fa:
         ab:f9:e6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:14:15 2025 by rpki-client