Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/890d9c4a-3c30-3e1b-b295-4ae4a30a1a0f.roa
File:                     890d9c4a-3c30-3e1b-b295-4ae4a30a1a0f.roa (raw, json)
Hash identifier:          uLKR/HPyu0EpfPLVz1bli0mqpQJFpbQ1bYFuZV9G9ro=
Subject key identifier:   CB:C3:AD:08:C3:98:E8:78:F3:43:F5:1B:92:F7:B7:5D:D1:CC:89:00
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F180180D50A460DBB0CD2400
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/890d9c4a-3c30-3e1b-b295-4ae4a30a1a0f.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397230
IP address blocks:        2001:502:2eda::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:18:0d:50:a4:60:db:b0:cd:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=6ef86496-2292-44e6-9295-7d6036d714aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4b:47:fb:69:25:d1:eb:05:08:75:f1:32:d9:
                    50:57:5d:64:1e:4e:cb:63:46:dc:2f:c2:7b:ec:7b:
                    38:4c:55:57:a0:f2:6e:75:e8:81:88:4c:62:f7:06:
                    d0:53:97:5e:12:14:8b:66:9d:e4:dc:12:ee:09:7f:
                    7b:eb:4b:f6:93:30:5d:be:a6:ed:4d:bb:d6:02:6d:
                    bf:ff:24:fa:66:39:d4:0a:60:3d:cf:f4:23:d0:89:
                    72:29:75:5b:2d:63:5a:18:3f:d4:96:52:6f:e5:d8:
                    d2:87:5a:37:ce:1b:a3:fd:8a:ad:0c:ab:b2:f1:6d:
                    75:90:d6:70:a6:11:d6:7d:9a:e0:61:0f:01:7b:83:
                    d8:db:00:f4:75:4b:47:4c:a6:9b:9f:04:70:17:a8:
                    8e:59:c1:ca:30:1d:db:f2:da:15:97:04:fe:66:ae:
                    9d:01:14:db:c4:b4:7c:36:9c:48:7f:8c:37:80:e6:
                    00:8e:aa:8a:5a:32:ac:00:7c:d9:48:04:b8:ca:f5:
                    88:62:27:64:c4:bf:af:e4:95:bd:74:70:d8:da:0d:
                    bc:89:e5:24:a3:7e:f1:41:29:22:1e:cf:e6:94:ef:
                    62:2f:dd:50:e5:ff:b7:ee:66:ee:d6:2d:9d:f0:32:
                    a0:e5:90:cf:fb:35:b8:ac:68:de:3a:c5:d9:27:59:
                    84:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C3:AD:08:C3:98:E8:78:F3:43:F5:1B:92:F7:B7:5D:D1:CC:89:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/890d9c4a-3c30-3e1b-b295-4ae4a30a1a0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:2eda::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:6b:cf:46:cf:bc:8a:03:04:29:88:d5:6f:f7:ec:f1:52:e2:
         bf:b3:56:24:52:7d:34:f0:b1:81:e5:b7:56:f4:3a:92:46:c8:
         72:62:3e:f3:80:21:23:a6:92:b0:2b:ca:7a:76:e2:28:a4:fa:
         21:a1:6b:f8:f6:99:a3:ce:d4:87:65:08:be:45:be:4d:83:bf:
         f2:bb:09:a4:de:5d:b0:43:d3:57:ee:1d:15:9b:10:e5:a7:28:
         92:8b:68:68:09:02:e8:c5:8e:68:03:d3:4f:89:72:c8:25:88:
         35:b7:e5:81:a4:81:bf:35:ad:9c:85:80:c4:df:b0:b4:4d:38:
         ac:5a:d4:5b:d3:3d:b9:38:26:dd:47:cb:c9:4a:c0:92:59:af:
         6d:27:69:c6:76:0a:d9:e0:39:a7:fc:27:07:3c:d3:c9:22:ec:
         19:13:08:cd:bd:de:6d:d0:f9:7e:5b:2e:6b:2f:e6:4a:22:68:
         f0:79:bb:68:d7:d9:55:91:31:80:10:40:e4:e1:d0:b3:67:01:
         80:fe:ca:e4:9a:43:b5:65:d4:20:2c:fd:31:d6:b5:e3:29:bc:
         69:09:68:83:3a:82:ec:7f:0f:8e:cb:74:aa:07:a4:86:0e:0c:
         2d:10:08:56:05:e3:56:f7:b6:17:ee:70:a1:42:07:20:ad:da:
         7b:0f:af:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:11:47 2025 by rpki-client