Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/605c2916-7f76-3504-b8f2-fa120bc35b65.roa
File:                     605c2916-7f76-3504-b8f2-fa120bc35b65.roa (raw, json)
Hash identifier:          ayFiCA5DcSdwbbGoBNHCXxmmziuCAzya/ZhHdqVb2Tg=
Subject key identifier:   B9:AD:BF:66:67:C8:33:15:92:84:69:03:86:3F:EC:35:E7:EC:30:C4
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849124707B34825AD42BEE00FC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/605c2916-7f76-3504-b8f2-fa120bc35b65.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     397231
IP address blocks:        2001:502:4612::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:47:07:b3:48:25:ad:42:be:e0:0f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=0ddc4b42-bbc0-4fd3-972b-728fbad1cc42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:76:83:1e:65:56:5d:f7:3a:02:3c:86:d1:10:
                    0f:b9:dd:7a:5b:12:cd:c3:28:19:ea:c2:4a:83:79:
                    70:8e:84:07:4e:73:3e:57:61:dd:9c:70:3c:b4:9c:
                    e1:14:91:a8:6c:ff:27:65:63:7b:cf:87:81:3c:b6:
                    ff:c8:e3:37:d9:27:be:8b:37:27:fd:c1:57:b8:f4:
                    01:c2:36:7e:2b:13:e8:de:d3:6b:c1:91:b7:ea:82:
                    ed:b3:c5:3f:4c:6f:0f:1a:28:e5:53:cd:b8:f4:cc:
                    b9:d3:94:df:ad:9c:8a:7e:13:53:91:1e:92:56:44:
                    7c:a2:41:15:5b:3b:a9:3e:f5:b3:6a:18:26:1f:f2:
                    5c:47:e4:e8:ea:e5:0c:04:e8:20:33:61:b5:40:dc:
                    0d:d7:1a:65:3e:82:f2:2d:0d:81:8b:1e:b3:ae:ca:
                    18:e1:5f:1d:b7:3b:db:79:92:c3:5f:cf:5c:87:ee:
                    46:3f:1a:29:40:d0:4f:49:3c:91:66:d2:1c:31:9a:
                    e1:09:24:b5:c2:ee:c0:94:f0:20:94:66:82:55:db:
                    17:7d:e3:ba:f9:08:78:6e:da:1b:5f:7d:d7:70:4f:
                    43:df:cb:50:c1:94:07:b5:76:70:f5:0a:5e:da:d9:
                    e6:16:f7:1e:06:42:38:56:09:e8:21:17:0d:c0:2e:
                    9b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:AD:BF:66:67:C8:33:15:92:84:69:03:86:3F:EC:35:E7:EC:30:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/605c2916-7f76-3504-b8f2-fa120bc35b65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:4612::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:a9:2e:5f:af:3c:58:7a:91:3d:fe:92:56:21:02:07:b8:5a:
         84:5f:2e:38:26:29:c2:0c:7e:3b:cf:63:36:e3:83:d1:fc:b9:
         15:e5:44:81:66:70:6d:da:c4:cb:05:0f:a0:e7:67:6a:4b:2c:
         f1:b0:5c:ce:53:d0:6e:7a:72:ef:d6:74:02:5f:9f:c5:42:88:
         45:79:d8:4e:73:e3:21:d3:a7:a2:11:84:f8:0e:fb:3d:d1:ab:
         60:08:06:82:5f:27:17:8e:55:a3:84:8e:4f:d7:9a:fc:2a:54:
         3b:26:2d:5c:64:ff:1c:0f:42:86:b5:e6:a0:9d:a3:31:ac:98:
         f3:42:f1:d7:74:6c:df:e2:ae:f9:f8:17:dd:da:2d:3b:7e:78:
         b2:b7:76:69:cf:79:62:4a:93:4f:da:e1:9a:61:0d:83:3b:71:
         23:15:b1:5b:8b:32:0a:e3:0c:ab:55:66:fa:26:af:f2:f6:b8:
         eb:60:32:b3:d4:52:5e:eb:59:e2:73:aa:3f:0d:f5:10:98:88:
         f2:57:52:18:86:03:bb:93:0e:c3:40:cc:18:64:d7:74:ec:a2:
         ca:04:41:86:5b:5f:71:50:36:43:a7:95:f3:b5:95:6a:48:fb:
         46:8f:29:09:a6:70:07:a9:1f:70:80:f9:25:10:9c:cb:cb:d8:
         0b:6f:27:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:33:55 2025 by rpki-client