Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/67d886af-0cc6-3a9d-b6e9-d2eceb51d0de.roa
File:                     67d886af-0cc6-3a9d-b6e9-d2eceb51d0de.roa (raw, json)
Hash identifier:          /uRzEblNyslz+va5KcuVex62t5e2NzwPRz++KIla3SQ=
Subject key identifier:   E0:1B:80:B1:86:AD:A4:C2:6D:E0:3A:B7:F8:6C:00:72:D8:A9:A7:4A
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F1801AAE996C3A973BC79F80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/67d886af-0cc6-3a9d-b6e9-d2eceb51d0de.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397242
IP address blocks:        2001:502:4612::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:1a:ae:99:6c:3a:97:3b:c7:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=fd854eb0-6b4e-490d-be87-005f9fac9d13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:18:f7:6f:c3:be:14:3e:d0:5e:41:3f:83:70:
                    76:03:0e:58:83:2a:bc:ca:42:24:55:e4:fa:98:b8:
                    4d:92:25:42:2b:a3:16:41:1b:25:cf:1b:9e:1f:51:
                    e5:ed:10:5c:a6:0a:70:a4:01:82:b9:f0:9f:7f:56:
                    6a:07:24:77:f9:6e:0e:90:20:c8:fa:86:62:6d:a1:
                    14:fc:1a:a1:82:ff:9f:3e:b7:2f:02:2d:8b:21:95:
                    94:d7:4e:c9:91:0d:8d:45:6b:92:ac:50:07:d7:86:
                    4a:18:60:05:02:cd:31:f2:2c:08:0b:58:5c:13:d3:
                    af:d7:31:1b:cf:a3:93:c9:d4:79:c0:fb:d9:4b:6f:
                    01:7c:a9:f1:73:a4:3e:a3:82:4a:05:2f:bd:1d:93:
                    05:45:7d:a5:3a:81:3c:c6:37:f5:d1:9c:83:51:13:
                    d2:22:0c:53:aa:8f:bb:06:a3:d0:e1:ce:48:23:f1:
                    89:e1:7c:ef:85:f5:1f:3a:a6:25:c3:bb:5e:6f:83:
                    91:bf:aa:d3:29:54:69:4d:c7:82:ba:13:f5:03:39:
                    25:5b:25:00:70:59:19:8a:a3:ca:b0:71:35:a2:0a:
                    4d:85:06:d7:a2:bb:ba:97:49:b4:c8:6b:44:26:50:
                    10:98:d3:f9:55:3e:9a:47:38:46:ce:10:41:df:95:
                    db:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:1B:80:B1:86:AD:A4:C2:6D:E0:3A:B7:F8:6C:00:72:D8:A9:A7:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/67d886af-0cc6-3a9d-b6e9-d2eceb51d0de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:4612::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:f6:59:06:b7:e0:67:54:ad:5e:1e:d5:73:d8:3e:a0:6c:0a:
         60:9b:cd:24:e4:86:5b:04:db:bc:b4:05:7b:e5:cb:81:c5:18:
         38:d6:8d:be:c7:ac:ba:85:90:23:c0:f4:c2:f1:f5:10:06:59:
         b8:a6:e9:6b:f7:b8:e2:52:bd:02:7b:ce:59:86:06:58:36:13:
         40:43:30:6e:b4:3e:d5:fc:ea:12:ad:98:31:d2:d2:ac:14:be:
         b1:f8:8e:7d:10:70:64:b2:08:27:14:cc:4c:11:8c:d3:3d:34:
         25:23:0f:bc:23:59:a7:3b:82:33:bc:a5:b0:51:ee:e2:61:a6:
         36:ae:9a:59:8f:cd:62:c5:fc:f3:dd:d7:b2:b3:44:b4:56:3b:
         03:d3:34:c3:09:2b:d5:be:d6:03:62:c1:c4:91:12:f4:5e:ac:
         06:ec:7a:f0:04:3a:b9:e5:ce:85:da:ce:f6:ad:0b:f8:52:25:
         89:fa:18:92:17:a9:17:fb:9f:69:47:3e:29:12:b1:8f:c4:c8:
         89:f3:0e:b2:a0:75:7a:7c:7b:24:fe:b5:80:59:b2:b6:af:1f:
         f4:a6:d5:1e:b2:ca:aa:1c:2f:10:59:9e:da:52:2d:5c:8c:a9:
         c6:0c:41:55:e6:de:11:67:f5:fe:7f:91:ce:14:40:08:4b:89:
         48:9a:4a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:30:31 2025 by rpki-client