Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dd823fc1-82b5-3983-91b2-10333dc15e0f.roa
File:                     dd823fc1-82b5-3983-91b2-10333dc15e0f.roa (raw, json)
Hash identifier:          QRvHVB9PylnmlS4WKOZd1GiJWYE6NHt6av3SH8ZUxcw=
Subject key identifier:   5B:6A:B2:58:F4:9D:94:89:0D:F9:C3:B4:82:FE:32:88:67:5A:83:70
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584BB2F811C46CC5BA116B59F800
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dd823fc1-82b5-3983-91b2-10333dc15e0f.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     397232
IP address blocks:        2610:a1:1000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f8:11:c4:6c:c5:ba:11:6b:59:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=0cb73cfc-7801-4220-ade1-474017e9c5a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:41:e4:02:63:84:e6:75:6a:07:aa:5a:35:e1:
                    b5:bb:b7:7f:35:a5:cc:69:00:8a:04:ec:73:26:09:
                    4c:68:32:ad:cc:fd:18:89:5c:ec:87:49:c5:1b:b7:
                    81:62:7f:70:51:98:ac:99:6a:cb:e7:5f:2c:99:ab:
                    f0:19:03:47:2a:9a:b3:88:0d:ce:55:d3:ae:c5:28:
                    81:ca:51:3b:e3:f0:1d:a1:dd:43:76:da:c0:c0:ce:
                    e3:cc:28:dc:df:c1:3a:48:cf:10:00:8b:b7:aa:1d:
                    89:a6:0e:04:ea:36:c4:84:69:8e:d1:74:67:d9:b2:
                    84:bc:14:a2:e7:ce:dc:a5:b5:9a:0d:48:0b:a8:f0:
                    62:e9:26:37:af:fb:df:7c:81:2b:15:67:52:dd:27:
                    75:30:55:0a:07:ac:a2:60:59:da:16:6d:4f:d8:a3:
                    61:cd:9f:6c:7c:12:7b:1a:df:2f:45:1c:99:ba:00:
                    83:d3:ab:24:eb:b4:aa:6a:dc:8e:b5:2d:40:bb:c7:
                    a1:06:1a:3a:d9:34:59:b3:06:ef:f6:a0:60:b3:d7:
                    31:45:b4:09:25:79:7e:f0:65:47:08:96:36:0f:ed:
                    09:58:8e:90:93:7e:47:36:95:4d:46:b2:a7:4c:7e:
                    f4:1b:e8:98:53:4c:10:24:55:1a:b8:bc:f3:cb:22:
                    82:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:6A:B2:58:F4:9D:94:89:0D:F9:C3:B4:82:FE:32:88:67:5A:83:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dd823fc1-82b5-3983-91b2-10333dc15e0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:4f:bd:d9:41:55:f6:91:5c:a9:a4:db:6c:1f:9a:57:e5:38:
         41:64:ef:84:ab:01:32:c3:0c:73:ff:92:7b:07:44:11:eb:05:
         7a:0c:d8:e7:73:42:d7:c0:b1:99:3f:b8:1e:4e:a9:68:74:ef:
         08:71:0c:5b:5f:da:b3:9c:cf:b2:82:9f:f0:22:93:94:b6:ff:
         ae:71:25:ce:9c:5e:83:c9:19:46:eb:4e:a4:c5:ab:61:53:40:
         d3:0d:dd:e6:71:0b:ec:21:ce:3c:1b:03:38:bf:a3:d8:58:d2:
         93:64:a0:c1:5e:3a:3b:39:55:f4:2b:b6:d4:3c:26:bb:eb:d1:
         03:a5:73:4c:0d:24:bb:61:08:33:6e:58:3c:90:cd:4f:28:d3:
         fa:4a:f3:3f:15:63:f2:22:6b:dc:8b:0d:d2:ef:33:af:3c:bb:
         78:71:7e:90:95:3f:c3:ce:a4:56:1c:d3:fb:b3:20:d7:13:f4:
         2c:f5:f6:16:f7:79:09:7f:4e:b4:af:f9:9e:f5:53:27:54:32:
         1c:fe:52:6a:55:05:66:95:09:61:a2:b6:16:38:53:e2:e0:37:
         ec:e4:66:ad:9d:4a:9a:54:ae:70:5e:14:b2:f6:a0:d9:51:11:
         7b:95:57:01:84:18:bf:36:2f:35:9a:7d:77:ec:bf:67:6b:de:
         f9:23:98:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:03:50 2025 by rpki-client