Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/60a4d00f-89e9-370d-9817-ff4f502cfcfc.roa
File:                     60a4d00f-89e9-370d-9817-ff4f502cfcfc.roa (raw, json)
Hash identifier:          DaV76gAXuuzG50bnKqrjTG9PWr7Lf4wz20JQ4MjazfY=
Subject key identifier:   99:19:64:F0:43:5C:6A:BF:69:CD:E2:87:2D:53:48:96:CE:37:C9:30
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F1801B7E34949CFAF4CF8C00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/60a4d00f-89e9-370d-9817-ff4f502cfcfc.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397223
IP address blocks:        2001:502:ad09::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:1b:7e:34:94:9c:fa:f4:cf:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=30de7211-1050-4820-a7ea-383546453cdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:05:32:72:45:6e:cf:3c:a6:84:e8:72:74:b7:
                    03:5d:1e:e3:97:d3:6c:67:e4:42:05:00:08:d7:29:
                    fa:cd:a2:15:fa:0b:5f:d7:13:80:30:61:3d:16:45:
                    03:a5:88:c5:1f:e2:3e:99:46:c0:3e:50:e1:50:a5:
                    63:19:9e:d8:2b:58:ba:b8:83:91:a0:63:af:fe:b6:
                    f4:be:c8:b4:d1:36:cb:8e:61:a1:0d:0c:5d:d2:ec:
                    2e:0f:e7:00:a3:98:a6:59:b6:92:1a:93:a7:34:a7:
                    76:1d:a6:b6:a1:69:aa:c0:57:58:8a:f0:22:59:64:
                    28:38:cd:fa:8f:49:42:b7:65:fa:e9:e8:25:87:62:
                    4e:81:0f:a8:21:f6:3b:80:9c:6e:8a:c6:46:5c:64:
                    bc:a1:57:a4:d6:db:0b:1a:2c:d5:90:72:64:be:71:
                    10:a0:ab:f0:b5:3d:1b:db:04:96:43:9b:c4:37:f4:
                    f9:91:67:e4:23:1c:94:a6:10:88:84:ef:04:02:77:
                    4f:19:d2:bb:82:50:97:4e:82:ea:75:58:55:90:de:
                    ee:e8:3b:15:d6:62:d3:7b:7e:11:b0:d0:fa:e5:45:
                    7a:c4:34:a8:5d:72:62:3b:0d:de:c6:d8:aa:0d:71:
                    12:b9:d0:ec:51:95:b4:ee:99:e0:cc:59:8a:2c:c4:
                    02:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:19:64:F0:43:5C:6A:BF:69:CD:E2:87:2D:53:48:96:CE:37:C9:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/60a4d00f-89e9-370d-9817-ff4f502cfcfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:ad09::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:7b:74:4b:a2:f6:21:e8:82:73:ea:a9:5e:7c:b0:d9:e7:2c:
         46:8b:7a:a7:75:ed:9d:cc:38:e1:da:38:ce:76:a8:8f:37:cf:
         91:69:36:eb:3f:dd:42:99:1b:ed:a0:ed:43:a6:cc:73:70:33:
         3d:cb:05:c6:a2:4d:ab:3d:fe:1d:d5:b6:ef:c9:77:cc:01:0d:
         70:94:30:02:1d:9d:fb:5b:22:81:8b:1d:1f:0c:10:bc:70:74:
         c7:ce:0b:2a:ab:d2:2d:68:71:4b:53:6d:98:aa:8e:a9:a7:44:
         19:33:e9:f8:c0:1a:49:7c:fa:2a:90:c6:a6:5d:c6:60:19:51:
         7a:12:db:ed:02:8d:3f:a4:31:4c:80:98:ae:13:74:5c:34:cb:
         cd:60:cd:c2:b6:80:63:9a:a7:ab:f8:83:38:80:9d:5f:26:96:
         2e:0d:11:d9:37:9d:26:d8:30:9c:93:f8:4b:15:79:79:25:d1:
         fd:ef:fa:0b:d4:53:eb:d6:46:d2:7c:04:0d:dd:c6:47:df:85:
         ee:38:f2:10:e2:d2:e2:58:aa:1d:8d:73:2b:c9:bf:44:63:de:
         f7:48:00:d0:b3:f3:95:ab:47:75:22:e9:5f:ac:b6:50:f7:8e:
         05:cd:f9:9b:eb:1e:25:4f:ee:6b:e1:83:0c:97:08:6c:1c:a3:
         55:73:57:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:00:24 2025 by rpki-client