Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/88758dac-1644-3cb7-bba8-fd7423d915a7.roa
File:                     88758dac-1644-3cb7-bba8-fd7423d915a7.roa (raw, json)
Hash identifier:          6beIcwMvMDK2LrXQM1AAS8DoY88S9/CUUqUbjzBc7eo=
Subject key identifier:   71:50:0B:89:9D:F3:8E:8D:B2:C8:B7:3B:1F:52:5B:E4:34:07:31:BB
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858491246FEDC8FAA3A14B1B434C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/88758dac-1644-3cb7-bba8-fd7423d915a7.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     397235
IP address blocks:        2610:a1:1000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:fe:dc:8f:aa:3a:14:b1:b4:34:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=f06f5894-321e-4c93-b763-b6e6211e696d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c7:bc:51:28:60:1f:09:42:b2:d0:19:76:d9:
                    ef:fd:5a:cb:18:6b:00:66:65:cf:7c:69:6b:46:59:
                    6c:e3:fc:5e:cf:c9:56:75:4b:d6:1b:97:54:ce:33:
                    28:15:b2:13:d8:70:05:cc:e5:0a:56:65:35:1d:ee:
                    06:a9:4b:3f:0b:6a:42:91:c4:ae:18:d3:84:6e:c7:
                    a5:8f:71:d9:33:90:24:a8:ff:80:0a:41:e3:5c:58:
                    17:a7:e6:81:e1:59:7c:04:3a:13:6c:5a:05:4a:d8:
                    08:c7:48:0f:32:f5:46:f0:f4:44:a0:ba:9a:0b:44:
                    63:7f:35:c8:9a:13:25:e6:8e:93:39:b4:13:f1:e1:
                    18:59:88:bf:bf:b0:ef:ec:66:60:58:d4:9b:e6:2e:
                    4a:75:ec:9e:cf:41:e8:01:42:6f:9c:46:17:bd:8a:
                    27:3d:cf:b0:26:58:9d:7a:c7:35:d0:24:a7:fa:6f:
                    c7:3e:aa:8c:ad:7c:1c:6d:4e:c0:e3:89:3f:34:3e:
                    29:78:63:a2:59:8a:d5:62:a7:a2:58:83:7e:99:7c:
                    3e:93:d7:0b:fc:60:fc:87:34:cd:ea:42:cc:97:9d:
                    14:08:fe:ce:27:d3:2a:1e:0c:a6:36:1c:bf:38:eb:
                    87:c4:99:f9:b7:7c:a7:bf:9a:8b:78:2f:ac:89:18:
                    d7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:50:0B:89:9D:F3:8E:8D:B2:C8:B7:3B:1F:52:5B:E4:34:07:31:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/88758dac-1644-3cb7-bba8-fd7423d915a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:d1:4b:69:5e:10:e0:8f:ed:8b:4e:6d:84:4f:19:83:9e:a7:
         26:13:7c:97:1c:2b:7c:c0:97:40:73:97:70:8a:10:fe:30:b3:
         7e:1f:5f:ac:a7:3e:5e:93:e5:4f:cb:2d:1d:4d:c7:67:58:ac:
         63:ef:0f:d9:a2:fa:9f:9e:af:32:a2:e2:74:d7:b6:7d:a1:f7:
         67:ee:ce:71:54:06:02:d7:e7:dd:c5:c4:44:e5:56:4c:b4:6a:
         32:52:fd:c4:ac:d0:ac:e1:3b:d8:6a:e6:15:6d:ea:43:7e:1b:
         82:5e:cc:36:c1:15:ce:ed:bd:07:7f:ed:df:23:40:7c:87:1f:
         96:ef:03:7b:ed:74:8e:1e:b6:b5:56:84:9c:6f:67:33:ed:c7:
         d9:b6:0f:bb:dd:c9:18:46:54:22:28:5b:16:b8:85:e2:dd:89:
         d4:6c:ec:a5:e4:00:1a:ce:68:99:53:49:80:bd:b1:f1:7a:d0:
         21:55:73:09:c5:b3:59:9b:c6:50:4b:c9:94:41:bb:1a:28:6d:
         bf:bf:88:dc:09:d9:d9:ae:e4:84:ad:45:5b:e9:d1:f7:c0:d8:
         d5:ec:15:b8:5e:50:83:37:7b:c7:8e:80:61:1a:bb:99:bd:ef:
         e5:a7:a2:76:c2:65:d0:cf:9f:fd:41:75:df:79:70:a6:da:b3:
         57:39:c7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:01:56 2025 by rpki-client