Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c1c434a6-c3af-321d-b524-ca2e308aadb9.roa
File:                     c1c434a6-c3af-321d-b524-ca2e308aadb9.roa (raw, json)
Hash identifier:          UrmUsYcpfs6EJI9ziO71SbGvGtRhSAmV1Ann8jzfngU=
Subject key identifier:   82:6B:DE:DC:4F:22:23:49:B4:8D:09:FD:C9:FA:F0:D7:BA:19:20:8A
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584912470BBFC33BA2D8453D7500
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c1c434a6-c3af-321d-b524-ca2e308aadb9.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     397235
IP address blocks:        2001:502:d399::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:47:0b:bf:c3:3b:a2:d8:45:3d:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=431f0a97-4230-45af-ba14-5d53019800f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:95:02:f2:fb:c1:9b:79:62:48:45:43:9f:1e:
                    56:87:c1:e2:e4:31:b3:90:20:58:29:bb:76:7b:68:
                    f5:c3:4c:5a:df:90:28:b6:d5:71:55:7e:a3:0e:a0:
                    dd:35:12:86:0a:d5:87:c1:ca:27:fe:5b:71:b9:81:
                    20:d6:22:c1:a8:6d:1b:6a:b4:e2:ad:37:d7:62:2e:
                    d7:8f:3c:0f:c2:bd:f3:0d:ab:26:8e:9d:d3:5d:6f:
                    fb:14:48:c3:2f:0a:41:72:96:4c:9e:8a:ad:9b:b2:
                    5d:01:9a:da:e0:66:a0:f6:3e:21:3f:bd:30:e1:4d:
                    7e:21:c5:b6:e2:4e:23:59:d3:dd:a1:70:77:e0:ab:
                    a1:23:18:84:ca:18:e9:bf:19:02:45:c0:b1:bf:8b:
                    60:fe:c6:5a:05:78:b4:22:0e:4b:4d:c5:f5:75:93:
                    1c:f0:45:84:d7:0d:89:0d:27:05:de:48:e0:46:c2:
                    df:66:b7:19:56:be:d3:1b:af:4d:4e:b9:b4:58:7e:
                    3f:52:65:c7:7e:74:eb:41:62:9a:5f:2c:64:2e:e1:
                    37:2c:06:0d:93:a4:ec:f4:a3:04:d5:b8:48:b8:97:
                    4d:d6:ad:4f:05:b5:e7:2e:3f:96:84:1d:7a:c0:68:
                    f8:9d:e4:37:39:2c:db:84:74:ab:67:ed:12:92:40:
                    4d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:6B:DE:DC:4F:22:23:49:B4:8D:09:FD:C9:FA:F0:D7:BA:19:20:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c1c434a6-c3af-321d-b524-ca2e308aadb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:d399::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:49:90:cd:3d:6f:6c:a5:63:64:e1:59:4e:8e:e1:51:81:32:
         6d:4b:b5:ea:a1:0a:dc:28:be:bd:bf:af:53:71:e2:cd:93:fa:
         c0:fc:f7:7b:1f:2d:34:76:91:23:77:cd:4b:69:d1:dd:17:b2:
         63:e4:fe:08:b8:9b:61:94:df:32:84:9b:4d:d8:29:aa:86:4c:
         86:7e:ef:c7:f5:b7:6f:bb:9f:18:8e:38:59:a7:56:0f:f4:53:
         0c:32:12:92:02:cb:78:0e:21:da:47:34:ac:02:54:b3:0b:c2:
         da:4c:fb:89:25:ba:1d:af:8e:34:5b:e4:ec:8c:65:98:03:d7:
         63:70:5a:0c:60:44:d4:cb:ab:fb:14:77:c8:de:b9:83:f6:ab:
         f3:56:b4:60:41:d3:5c:a9:f8:78:5c:14:e2:33:63:95:bf:72:
         9c:87:71:49:9d:e4:d9:5e:ce:85:6a:ca:0c:5d:77:97:59:97:
         4d:80:fc:fc:a7:0c:72:8d:9c:0c:8b:40:8a:06:c0:7c:f7:b6:
         68:5c:5c:b6:16:ad:0e:10:74:f8:31:1e:be:12:98:11:14:88:
         a7:38:c7:b7:6b:f9:6b:bf:5b:13:d4:48:73:65:6d:02:e4:03:
         f6:69:4b:98:34:89:ba:5a:36:6d:f1:2f:95:30:88:6d:f5:61:
         60:64:90:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:32:47 2025 by rpki-client