Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/67306a7f-1d74-332d-bae7-a0aab88aa0de.roa
File:                     67306a7f-1d74-332d-bae7-a0aab88aa0de.roa (raw, json)
Hash identifier:          aemdnKEJ9yAgrDkJpgMRTjZcfCuNoIDWsUXPUfWeX7U=
Subject key identifier:   37:16:3E:7F:2A:E0:3A:2D:06:C7:26:4A:B0:2E:8C:06:BA:1E:C3:5B
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F1801BDF447C63B2E7C7AE80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/67306a7f-1d74-332d-bae7-a0aab88aa0de.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397229
IP address blocks:        2001:502:ad09::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:1b:df:44:7c:63:b2:e7:c7:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=0ae5a060-668c-4a00-b5f3-0988598b9b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fb:3c:8e:a4:a6:ab:33:47:b1:29:cb:d8:9a:
                    56:d6:ae:7a:ca:80:ed:0b:bc:24:57:9d:4d:75:c5:
                    27:bf:00:ba:0b:94:ba:aa:04:94:45:61:63:bc:10:
                    a3:b9:a5:cd:25:d5:1b:ba:de:03:01:a8:c7:c8:c0:
                    b7:53:be:dd:9f:14:ed:55:94:ad:98:1a:b9:8d:ca:
                    31:b9:2c:91:e1:be:fd:41:39:de:0b:ce:c6:ca:df:
                    da:0d:6f:26:df:e0:96:fb:6c:53:7a:7a:9d:82:47:
                    c7:e8:86:b9:36:9b:d1:67:2d:53:5f:65:c5:86:90:
                    1e:ad:34:44:40:50:cb:35:0a:12:a2:6d:2f:d8:6a:
                    62:38:80:9d:3a:3c:4b:71:02:3d:d9:38:97:6f:44:
                    51:3a:4d:00:77:2d:9b:59:41:8f:cf:bf:0c:bf:05:
                    17:74:e3:30:88:e2:e7:18:f1:1f:30:8b:1e:81:34:
                    15:73:c3:db:93:d9:ce:2c:35:c5:83:3b:ed:fd:91:
                    03:48:28:3e:4e:3a:e2:32:00:af:ff:89:5f:f9:38:
                    97:98:fb:c6:a0:50:20:06:74:51:b0:03:fb:96:5f:
                    4a:fd:e4:a9:0a:16:49:4a:91:7c:b6:f3:16:6f:f9:
                    05:5b:d7:95:c1:db:82:4b:05:86:b4:53:e3:a9:8c:
                    69:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:16:3E:7F:2A:E0:3A:2D:06:C7:26:4A:B0:2E:8C:06:BA:1E:C3:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/67306a7f-1d74-332d-bae7-a0aab88aa0de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:ad09::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:22:ff:40:80:c9:29:51:ef:62:cd:4b:86:24:91:ed:7c:79:
         bb:ee:60:28:60:38:ba:ca:7b:9a:c3:3f:9f:f9:7b:04:4e:59:
         eb:c6:e0:0d:43:55:6e:5f:1d:49:ef:21:0f:9d:98:c8:ae:a0:
         b5:37:4c:98:b7:51:58:47:72:7d:40:42:7b:0a:46:f7:ad:e8:
         20:72:01:e5:ae:f9:de:ca:10:17:cf:c7:b4:a2:77:0d:01:b6:
         87:2e:be:2b:39:62:c0:27:77:43:32:45:f4:d9:f7:60:74:1a:
         1d:63:c9:64:c1:6a:26:17:68:ca:26:62:28:ea:f0:fc:f1:cc:
         43:9f:cb:30:39:6e:b0:c5:b0:39:01:31:75:c5:5c:8e:5c:91:
         a7:88:30:37:3f:4c:01:17:a7:8d:7a:d0:c0:77:c3:b7:64:88:
         65:c1:28:9b:74:4a:25:71:90:c2:20:35:09:cb:23:aa:75:9c:
         30:f2:8b:48:d4:bd:a0:60:80:b2:39:25:a6:a0:db:fc:c9:1b:
         2d:0e:06:59:1b:de:08:10:3e:05:a1:40:90:b0:55:39:6d:f0:
         14:19:65:f0:0e:cd:ae:34:38:9d:5c:4d:3f:23:89:9c:c1:84:
         4f:51:05:2f:dc:de:d1:48:90:25:65:0b:62:78:6c:fa:42:6f:
         d1:e4:5a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:05:34 2025 by rpki-client