Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8a927515-e0c2-3fdd-884c-02bd1b65b9fd.roa
File:                     8a927515-e0c2-3fdd-884c-02bd1b65b9fd.roa (raw, json)
Hash identifier:          xGCa/R2B/P+ocCoDU0CVhd30CiBRr6xIz+BXhb+fL+o=
Subject key identifier:   66:CE:96:DC:1F:44:DF:C3:AA:C0:08:69:C6:FA:1C:81:EA:2A:37:5D
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584BB2F81BBE4A700020C20A0000
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8a927515-e0c2-3fdd-884c-02bd1b65b9fd.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     397220
IP address blocks:        2001:502:4612::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f8:1b:be:4a:70:00:20:c2:0a:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=5d31f5f1-e162-401a-aa55-8ba33a300d9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:84:0a:93:55:8f:a5:bf:53:ad:61:ef:21:b3:
                    da:66:7d:bb:e0:17:78:fa:b0:01:3b:2c:80:27:aa:
                    65:60:2b:e1:f1:6b:f1:5b:53:bc:50:c0:28:86:2b:
                    ea:8e:34:f4:26:24:ac:3d:09:4e:ac:f3:08:5a:ed:
                    7b:d1:b4:51:76:1a:d0:33:84:26:2b:67:c4:b0:51:
                    91:bd:6e:eb:7f:0e:e8:a6:c6:c3:e3:38:42:43:3e:
                    aa:48:8e:9c:da:82:b7:32:ee:00:95:6d:68:20:be:
                    7d:8d:bb:c7:fa:12:8a:41:04:e9:a4:78:52:66:0f:
                    62:bc:68:1b:20:79:fb:ae:01:0c:ee:a2:cc:75:dc:
                    e9:c0:6e:ca:91:cb:fc:bd:98:42:b7:c2:6b:30:c2:
                    e0:e1:e9:63:23:45:70:b6:6c:ef:66:2f:7f:46:b7:
                    e6:16:21:5e:a7:f1:e8:09:ae:5b:05:95:a7:da:30:
                    a2:9c:dd:b7:84:02:ff:6a:c8:25:e4:54:41:5f:56:
                    9c:dc:f4:54:b1:13:9d:45:76:60:32:48:4f:c8:a0:
                    34:ac:98:18:92:be:a2:39:ff:c3:da:e0:f5:50:3f:
                    0e:1f:38:3d:48:0d:83:86:79:bf:8c:7a:03:f8:bd:
                    c6:bc:3b:80:98:0b:57:3a:0b:df:f7:e3:7a:38:fc:
                    97:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:CE:96:DC:1F:44:DF:C3:AA:C0:08:69:C6:FA:1C:81:EA:2A:37:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8a927515-e0c2-3fdd-884c-02bd1b65b9fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:4612::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:65:0e:67:02:97:72:94:56:07:23:a6:a4:37:0d:ec:65:37:
         fa:85:30:1d:16:ef:4b:23:23:d5:f9:26:b3:6f:10:5e:79:e9:
         9e:30:57:9e:6f:b0:dd:41:d7:60:01:1e:87:55:31:7a:95:f9:
         fa:17:7f:c4:48:c7:07:aa:95:c1:d0:f1:ea:49:af:3b:45:a3:
         1c:15:c0:38:71:cd:ba:3b:d1:18:11:c3:ea:ce:77:47:27:de:
         57:21:56:83:51:b3:7b:78:46:a6:8c:4e:a2:1b:9e:19:85:b7:
         4d:58:42:d4:4b:29:7e:27:3b:65:f0:e2:de:c8:38:a5:25:df:
         43:84:28:e6:f4:59:b4:fa:67:94:3c:bd:a3:2b:57:6a:de:6b:
         68:7d:1e:ba:5a:a5:76:41:4c:32:a7:ea:6f:27:94:ba:ac:18:
         cf:e3:91:89:c6:bc:13:03:4a:9c:28:94:db:ce:7f:b5:30:0d:
         2e:b1:4c:05:94:c9:fa:93:ea:58:5b:cf:d6:2e:8d:83:35:35:
         e1:f3:50:f7:13:30:e9:17:1e:09:d3:50:8f:7d:5d:02:13:58:
         ab:42:00:61:cf:7d:b7:db:c2:d2:8a:1d:a5:1b:56:32:54:1f:
         98:b8:f3:fb:ad:42:3c:01:39:5f:25:35:c7:b9:e4:10:8d:98:
         dc:46:9b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:10:23 2025 by rpki-client