Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f1e6e30a-a029-3c26-862b-e2424aa0fa3d.roa
File:                     f1e6e30a-a029-3c26-862b-e2424aa0fa3d.roa (raw, json)
Hash identifier:          pYwybjBxkHjkGIrt1FePJ92J6ZzbKdFCLhQ5oZJSJ84=
Subject key identifier:   13:FC:90:39:DF:47:64:01:4D:13:FE:5A:FB:58:C5:18:0A:BF:C1:13
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F18011330779A0E0D53709C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f1e6e30a-a029-3c26-862b-e2424aa0fa3d.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397243
IP address blocks:        2610:a1:1000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:11:33:07:79:a0:e0:d5:37:09:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=ac3dd47e-9b78-432e-b71d-176128fafcda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0e:aa:07:9d:ae:04:ac:a2:62:d8:a6:e9:b0:
                    5f:42:42:6e:dd:65:77:bc:85:b7:89:b9:66:21:8f:
                    b4:d2:ed:68:75:f5:08:3d:f2:a7:c2:2e:05:9c:53:
                    c5:1f:f0:90:a7:b7:e0:a5:55:5e:8e:19:b7:c8:8a:
                    7f:8d:3c:b6:b2:c4:29:fa:f3:1a:50:c6:74:30:ba:
                    14:91:a6:2f:1b:3f:cb:ba:f6:66:a1:79:59:a5:fa:
                    a9:27:59:25:24:5d:8b:0b:c3:c6:f4:91:4c:2f:46:
                    d7:8d:54:8d:7e:12:8c:f0:25:16:42:7a:b7:28:a9:
                    23:0b:b2:bc:6b:54:01:cc:b3:b4:f7:e7:a1:0e:02:
                    50:86:9b:d7:3c:82:88:d2:66:ca:92:03:ec:c7:61:
                    47:ff:b7:57:da:88:a8:c8:e8:66:4e:34:75:a4:7e:
                    5d:e7:a3:12:d2:52:18:20:d6:26:af:4b:43:16:7e:
                    6a:77:96:7b:fb:37:f7:14:e2:38:6a:44:1b:e1:9c:
                    6c:b3:c1:5e:e1:de:54:f6:78:d6:94:21:c9:2f:ef:
                    c2:4a:8f:fb:df:88:fd:ca:e8:c2:c1:e0:3e:b9:d7:
                    ab:fe:6c:74:bf:47:b3:af:20:ac:ad:0a:3a:9b:c3:
                    35:01:9d:d9:b8:3b:5a:86:b1:32:fe:a4:75:8c:fd:
                    df:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FC:90:39:DF:47:64:01:4D:13:FE:5A:FB:58:C5:18:0A:BF:C1:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f1e6e30a-a029-3c26-862b-e2424aa0fa3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:7f:da:be:14:f5:59:b2:d0:82:ce:c9:a5:0f:59:5b:67:1a:
         b9:ad:c6:5d:ca:da:20:1b:33:d3:22:e3:dc:e9:86:6b:6b:b1:
         df:53:d6:fd:70:35:5a:fa:59:4e:a8:02:d3:1e:50:8c:9a:92:
         21:85:9f:83:25:a5:03:65:69:d6:0d:5b:41:19:7c:10:37:12:
         5a:2f:9d:6e:4d:d2:20:8c:4b:16:b0:47:fe:2d:41:82:ff:53:
         7f:ae:b8:40:fa:8a:6a:54:e4:c0:21:aa:33:1a:b3:8c:9c:bb:
         2a:76:32:00:0a:d8:b8:30:a4:27:bd:e8:6c:eb:81:06:32:94:
         31:a1:07:cb:20:21:3c:7a:e2:ff:68:48:f5:05:f2:4a:a3:2b:
         95:7c:ee:36:e0:8a:e9:22:70:59:7f:c0:3d:91:cd:c6:83:71:
         ac:df:a0:96:c9:e4:41:92:25:b7:65:ed:2c:d8:67:0d:16:db:
         26:33:88:e1:68:ff:bc:bc:c1:e5:06:72:ea:d6:4b:24:86:1e:
         74:c8:6d:f9:07:af:e6:45:76:4b:de:45:d9:93:6a:80:8d:df:
         a6:fe:6b:67:42:2a:df:74:ed:ca:0c:76:17:f1:4b:08:d7:d3:
         cf:b2:f3:32:37:dc:8f:b3:e5:f8:87:b2:b5:ef:a3:0c:75:57:
         6c:32:94:c5
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEnxgBEzB3mg4NU3CcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk
YWMzZGQ0N2UtOWI3OC00MzJlLWI3MWQtMTc2MTI4ZmFmY2RhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiw6qB52uBKyiYtim6bBfQkJu3WV3vIW3iblm
IY+00u1odfUIPfKnwi4FnFPFH/CQp7fgpVVejhm3yIp/jTy2ssQp+vMaUMZ0MLoU
kaYvGz/LuvZmoXlZpfqpJ1klJF2LC8PG9JFML0bXjVSNfhKM8CUWQnq3KKkjC7K8
a1QBzLO09+ehDgJQhpvXPIKI0mbKkgPsx2FH/7dX2oioyOhmTjR1pH5d56MS0lIY
INYmr0tDFn5qd5Z7+zf3FOI4akQb4Zxss8Fe4d5U9njWlCHJL+/CSo/734j9yujC
weA+uder/mx0v0ezryCsrQo6m8M1AZ3ZuDtahrEy/qR1jP3fzwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFBP8kDnfR2QBTRP+WvtYxRgKv8ETMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjFlNmUzMGEtYTAyOS0z
YzI2LTg2MmItZTI0MjRhYTBmYTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJhAAoRAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAOX/avhT1WbLQgs7JpQ9ZW2caua3GXcraIBsz0yLj3OmGa2ux31PW
/XA1WvpZTqgC0x5QjJqSIYWfgyWlA2Vp1g1bQRl8EDcSWi+dbk3SIIxLFrBH/i1B
gv9Tf664QPqKalTkwCGqMxqzjJy7KnYyAArYuDCkJ73obOuBBjKUMaEHyyAhPHri
/2hI9QXySqMrlXzuNuCK6SJwWX/APZHNxoNxrN+glsnkQZIlt2XtLNhnDRbbJjOI
4Wj/vLzB5QZy6tZLJIYedMht+Qev5kV2S95F2ZNqgI3fpv5rZ0Iq33Ttygx2F/FL
CNfTz7LzMjfcj7Pl+Ieyte+jDHVXbDKUxQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:06:10 2025 by rpki-client