Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/65dce463-d48b-35e6-bea0-bc2b720eb569.roa
File:                     65dce463-d48b-35e6-bea0-bc2b720eb569.roa (raw, json)
Hash identifier:          culTcIsm+doRdEKlxzZKctS7fsuNQTkvvPD9czNOyJ4=
Subject key identifier:   2F:06:63:D5:C6:FD:F8:67:11:9D:D4:E6:27:40:01:40:8C:CF:19:ED
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A050A855FD2BE909DD4BB5280
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/65dce463-d48b-35e6-bea0-bc2b720eb569.roa
Signing time:             Fri 30 May 2025 01:00:48 +0000
ROA not before:           Fri 30 May 2025 01:00:48 +0000
ROA not after:            Thu 28 Aug 2025 01:00:48 +0000
asID:                     397240
IP address blocks:        2610:a1:3300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:05:0a:85:5f:d2:be:90:9d:d4:bb:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 30 01:00:48 2025 GMT
            Not After : Aug 28 01:00:48 2025 GMT
        Subject: CN=5b56533a-6e36-45bd-b6d9-1c2a702b924a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:85:0c:c8:1b:73:1f:ce:6f:a6:98:e6:fc:9b:
                    26:d1:92:3f:3c:a6:1f:0f:b9:73:e2:4f:be:08:a8:
                    80:a6:03:6d:c0:2b:d1:46:54:b7:df:1c:22:99:95:
                    9a:2b:c1:28:40:4d:f6:c8:82:71:47:2a:f1:f0:3c:
                    9d:8d:d2:aa:69:a8:bb:0c:7b:53:f2:73:db:1b:2c:
                    d1:3d:ca:fc:59:95:5b:56:65:5e:36:16:81:10:13:
                    0f:a8:72:8a:a8:da:20:6f:32:ac:bb:eb:cb:25:cb:
                    75:38:4f:2a:3c:19:51:04:65:e9:41:a3:5d:86:bb:
                    d2:3b:b6:ff:5f:49:33:5d:bb:10:aa:e2:d7:ee:ed:
                    4e:a6:ae:68:d5:5d:57:bc:4e:aa:2e:44:5c:4d:ff:
                    0e:75:c6:77:16:cc:37:89:ee:9f:36:ec:cb:46:b7:
                    31:03:3e:dc:e9:9a:82:bb:ea:55:cb:4e:a0:01:7e:
                    07:e9:b3:e9:5c:9b:56:4f:78:7e:72:72:ab:10:c9:
                    18:13:42:4e:d7:13:28:e1:fe:f8:01:4d:0e:0d:05:
                    1a:8f:13:b0:fe:a3:a4:1a:82:cf:c7:65:e3:6c:2f:
                    01:19:73:05:c2:d9:eb:a2:c6:1f:3f:ea:aa:3e:11:
                    3f:4b:72:17:a1:bb:b7:e4:c9:39:72:c5:67:bb:ce:
                    d2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:06:63:D5:C6:FD:F8:67:11:9D:D4:E6:27:40:01:40:8C:CF:19:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/65dce463-d48b-35e6-bea0-bc2b720eb569.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:4e:1e:b2:68:be:81:ef:a9:a8:cc:f8:f6:fe:06:dd:59:7e:
         e4:b7:c1:18:dc:6e:e3:a5:20:84:49:84:de:73:2e:6d:5b:a6:
         ea:7d:e4:91:5e:a8:fa:21:89:a2:bf:24:e2:28:9b:a4:f1:0e:
         82:57:e9:68:27:e2:01:d2:12:d6:fd:5e:79:ea:46:cd:ef:36:
         ca:ad:62:25:c8:dc:1a:b5:ea:31:9e:a9:3e:56:04:ab:3d:45:
         29:4e:67:57:bb:62:e4:d0:aa:85:af:b2:e5:48:c0:fb:3c:79:
         76:1a:8c:88:2a:ac:f2:8f:ca:26:32:2a:5e:d2:2c:97:26:93:
         2b:88:1a:5a:bb:3c:f4:80:f8:6f:30:cd:93:b2:5b:38:68:a1:
         f3:e6:23:d3:59:26:a5:3e:63:3d:ec:b8:de:30:20:08:b9:4f:
         c5:83:b3:c1:5e:86:b4:91:2b:ce:50:5a:1f:8b:7b:60:0e:00:
         98:43:63:1d:9a:c9:53:fb:80:f1:ec:b3:fa:38:07:c1:5a:34:
         12:3a:3a:3e:3d:a1:bd:32:ba:6c:01:73:08:7d:e4:85:50:5c:
         f9:8a:c3:e0:3d:c1:0f:29:f5:cb:b6:24:10:3b:2c:ea:d9:53:
         83:1a:23:67:ed:28:33:ab:aa:2c:64:e2:4f:a9:51:f0:31:90:
         e5:60:2f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:17:48 2025 by rpki-client