Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ab7ca5e0-fca5-381f-bd0b-0eda3a648683.roa
File:                     ab7ca5e0-fca5-381f-bd0b-0eda3a648683.roa (raw, json)
Hash identifier:          U7ZsaMyBnhoXVuEtKwtaqn7zMR6wvVz2b4jI3DxyTLI=
Subject key identifier:   2C:96:49:96:0A:CA:DA:66:35:6F:4D:C0:D0:03:01:87:CC:CA:AD:97
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F1801A467879A01DD0AAD084
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ab7ca5e0-fca5-381f-bd0b-0eda3a648683.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397235
IP address blocks:        2001:502:4612::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:1a:46:78:79:a0:1d:d0:aa:d0:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=dde1b2a8-d6a8-491e-a786-545ec30f83f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:10:58:44:02:98:3e:52:3f:b5:ce:05:eb:7f:
                    6f:b3:eb:fe:d6:cd:97:d4:c4:6a:83:fe:1d:4a:9f:
                    39:3b:e0:3f:30:fd:44:1f:fb:80:34:e7:f7:24:2e:
                    10:45:94:26:af:07:e3:a2:36:2f:ff:23:ed:f8:d9:
                    45:2a:2e:b4:f6:29:68:30:2f:50:f1:d1:98:2b:37:
                    2c:3b:3a:22:69:79:68:05:46:11:38:bb:ef:63:46:
                    cf:25:3e:dd:8c:08:bb:ba:be:bd:8e:91:bd:1a:51:
                    cd:0e:58:d7:09:13:ac:ff:2f:09:43:af:61:1c:b0:
                    f6:78:f0:48:db:49:19:59:15:e5:be:d2:e7:47:df:
                    23:9c:2d:04:51:31:c9:58:76:a6:b5:c0:86:ae:d9:
                    09:16:f7:30:1e:e2:6b:38:57:05:2d:b6:d8:4c:43:
                    b6:ac:98:1f:59:1f:01:4e:08:d2:fc:2a:38:2a:af:
                    07:36:0d:8f:34:92:43:14:c6:5b:c8:b4:a9:f0:59:
                    fc:26:8b:fb:3b:ec:9e:b9:e9:58:30:60:13:cf:a2:
                    1b:88:35:0b:87:81:e6:10:70:74:43:8a:7e:9a:29:
                    b4:e1:d2:f0:fa:cd:6c:0e:7c:b9:44:87:e1:c4:09:
                    73:5e:86:02:7e:b4:9a:47:97:b7:f1:c0:73:4d:11:
                    fb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:96:49:96:0A:CA:DA:66:35:6F:4D:C0:D0:03:01:87:CC:CA:AD:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ab7ca5e0-fca5-381f-bd0b-0eda3a648683.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:4612::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:aa:36:48:4e:90:33:19:a7:04:30:5c:03:61:c2:29:80:d5:
         28:c1:e7:66:c9:b9:0c:22:3e:de:e8:52:be:e6:9b:41:1d:9d:
         c1:7a:18:4f:94:ed:35:8b:cd:cc:cf:bc:ad:5e:10:83:15:82:
         77:7c:b4:69:c6:a2:fb:3e:4c:0b:d5:47:20:7d:2e:b5:c6:28:
         3a:ef:50:fa:ef:ea:28:3b:b3:65:33:42:61:62:f6:6f:16:f4:
         4e:1e:71:c0:4a:23:a2:80:83:ec:bb:3c:18:f4:14:a7:8e:ae:
         f8:72:d8:57:15:39:1e:37:47:62:6e:14:92:3e:06:91:69:2b:
         2b:7b:a6:b4:3c:88:d9:d9:ee:6f:78:8b:fd:5b:00:88:f0:11:
         e4:9a:d6:01:f4:a0:f9:66:17:53:71:11:1c:ef:2c:49:10:a4:
         bf:31:30:72:62:e4:54:c2:23:b2:95:91:9c:4e:23:50:45:77:
         18:78:ef:6b:22:45:5e:24:56:a3:a3:72:b0:7f:3c:bb:ac:6d:
         c1:fe:18:1f:e4:1a:92:2f:38:1c:34:96:37:11:0a:0c:fd:8c:
         c7:98:ae:d3:55:37:a0:58:6b:e3:83:41:2c:f2:26:e3:aa:0b:
         29:5b:29:06:00:f6:c8:ee:72:14:72:37:2d:57:67:94:38:61:
         f7:43:80:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:13:25 2025 by rpki-client