Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/697011e8-1307-3051-8901-3fcb890a3676.roa
File:                     697011e8-1307-3051-8901-3fcb890a3676.roa (raw, json)
Hash identifier:          mIMfgM7qXW4eDYRDv6vV6q/eP9Q2/5UwtN03S7+MioM=
Subject key identifier:   95:99:A2:98:60:6D:F6:32:8C:9E:97:82:02:CB:71:53:DB:1E:E1:F3
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A050A816AA59EB7AAB5059F80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/697011e8-1307-3051-8901-3fcb890a3676.roa
Signing time:             Fri 30 May 2025 01:00:48 +0000
ROA not before:           Fri 30 May 2025 01:00:48 +0000
ROA not after:            Thu 28 Aug 2025 01:00:48 +0000
asID:                     399155
IP address blocks:        2610:a1:3100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:05:0a:81:6a:a5:9e:b7:aa:b5:05:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 30 01:00:48 2025 GMT
            Not After : Aug 28 01:00:48 2025 GMT
        Subject: CN=77c84237-8567-4288-90e8-36286e235acf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:57:a8:ac:de:d8:43:4c:45:70:0c:cc:32:38:
                    fe:e3:bd:53:b2:43:57:20:c1:dc:ed:e7:99:85:ab:
                    bc:fa:50:36:0d:60:d0:90:ba:e3:55:4e:22:93:00:
                    ac:f3:1c:ca:ea:cc:5a:74:1e:3e:56:cf:b8:34:fa:
                    41:ec:c8:19:1f:1b:20:26:29:fb:5b:1f:91:d9:7b:
                    71:6c:d9:3f:a4:7d:1b:95:a1:b6:77:6a:80:c3:1e:
                    ce:21:74:0f:00:00:d9:73:d8:75:d2:ca:6a:3a:af:
                    2c:f1:3c:69:bf:34:ce:85:a3:f5:eb:c6:60:49:b2:
                    82:bc:8e:45:4f:94:80:53:19:47:6c:e3:cb:74:5b:
                    75:86:87:fb:e4:d3:94:64:2c:38:4a:cc:73:2a:40:
                    49:46:3d:4a:06:7a:4d:2f:8d:41:ef:86:41:21:4f:
                    cd:1a:c7:ec:2e:fa:a3:fb:6b:06:de:ba:41:4a:fb:
                    66:0d:ba:df:b0:99:52:b7:47:5f:f5:d6:1d:ba:b5:
                    0f:10:9c:a2:5c:77:9a:8d:b2:ba:d8:e1:df:9c:19:
                    12:2a:8f:dd:ce:15:97:d6:f9:a6:91:15:47:01:20:
                    61:ca:18:81:5f:83:4a:a6:7d:38:a6:7f:a6:fb:58:
                    72:26:ad:c0:fe:84:7c:b0:7b:d7:0a:2c:5b:d3:e5:
                    81:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:99:A2:98:60:6D:F6:32:8C:9E:97:82:02:CB:71:53:DB:1E:E1:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/697011e8-1307-3051-8901-3fcb890a3676.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:82:6e:94:6f:78:f7:ef:f6:75:ca:a6:ae:16:51:b5:cf:70:
         2d:ef:e6:fb:78:b5:28:2e:e0:46:7a:3a:20:9e:37:4e:e6:6b:
         b9:37:7b:33:42:04:de:63:48:ba:70:ec:5f:6e:cd:3d:d9:5b:
         eb:00:b0:09:ea:c6:1b:2e:2b:c5:46:ec:60:4a:55:6f:5b:eb:
         c1:bf:d0:61:e4:40:e6:fb:f3:b4:be:5c:c3:f7:1b:9a:05:2a:
         6a:f6:47:c1:d0:6c:e7:3b:13:60:1d:47:44:cf:d4:99:a6:43:
         c5:11:68:c0:b9:d6:64:ba:70:7f:62:d3:2b:f8:4e:38:bb:87:
         3a:1b:1e:66:2b:eb:77:f3:10:ba:89:28:4c:8c:ac:54:a0:9d:
         fe:53:d1:78:fa:4b:04:63:f6:5e:e3:42:fd:16:fb:26:6f:e3:
         49:89:eb:6f:5f:11:90:20:12:57:4b:99:05:1e:fa:44:c7:bd:
         76:90:f1:2e:22:65:c9:83:b9:76:e6:d6:0d:06:43:6b:05:e8:
         33:84:f2:98:50:23:35:57:da:1f:cf:32:3c:bc:c4:12:b5:0d:
         9c:46:44:a9:22:de:6f:d2:ac:96:ab:8a:ed:78:b1:72:50:25:
         65:7e:76:5c:a5:29:23:bd:cf:d0:9f:39:51:98:d3:21:e0:7c:
         6b:b5:9d:c2
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEoFCoFqpZ63qrUFn4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDUzMDAxMDA0OFoXDTI1MDgyODAxMDA0OFowLzEtMCsGA1UEAxMk
NzdjODQyMzctODU2Ny00Mjg4LTkwZTgtMzYyODZlMjM1YWNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVeorN7YQ0xFcAzMMjj+471TskNXIMHc7eeZ
hau8+lA2DWDQkLrjVU4ikwCs8xzK6sxadB4+Vs+4NPpB7MgZHxsgJin7Wx+R2Xtx
bNk/pH0blaG2d2qAwx7OIXQPAADZc9h10spqOq8s8TxpvzTOhaP168ZgSbKCvI5F
T5SAUxlHbOPLdFt1hof75NOUZCw4SsxzKkBJRj1KBnpNL41B74ZBIU/NGsfsLvqj
+2sG3rpBSvtmDbrfsJlSt0df9dYdurUPEJyiXHeajbK62OHfnBkSKo/dzhWX1vmm
kRVHASBhyhiBX4NKpn04pn+m+1hyJq3A/oR8sHvXCixb0+WB4wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJWZophgbfYyjJ6XggLLcVPbHuHzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNjk3MDExZTgtMTMwNy0z
MDUxLTg5MDEtM2ZjYjg5MGEzNjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJhAAoTEw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAf4JulG949+/2dcqmrhZRtc9wLe/m+3i1KC7gRno6IJ43TuZruTd7
M0IE3mNIunDsX27NPdlb6wCwCerGGy4rxUbsYEpVb1vrwb/QYeRA5vvztL5cw/cb
mgUqavZHwdBs5zsTYB1HRM/UmaZDxRFowLnWZLpwf2LTK/hOOLuHOhseZivrd/MQ
uokoTIysVKCd/lPRePpLBGP2XuNC/Rb7Jm/jSYnrb18RkCASV0uZBR76RMe9dpDx
LiJlyYO5dubWDQZDawXoM4TymFAjNVfaH88yPLzEErUNnEZEqSLeb9KslquK7Xix
clAlZX52XKUpI73P0J85UZjTIeB8a7Wdwg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 14:45:44 2025 by rpki-client