Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dc832fe5-feb0-395d-863f-00c7005c70c0.roa
File:                     dc832fe5-feb0-395d-863f-00c7005c70c0.roa (raw, json)
Hash identifier:          dqPWEdAYoA+D0AmY2LBQCaEeDSD/EizCJVQ2J+mfbJA=
Subject key identifier:   B8:DC:DA:35:38:42:CF:49:6D:6F:0A:57:F4:95:D4:9F:A5:67:28:91
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849124703312D38A65B500C2780
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dc832fe5-feb0-395d-863f-00c7005c70c0.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     397215
IP address blocks:        2001:502:100e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:47:03:31:2d:38:a6:5b:50:0c:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=ddb7d095-1a52-438a-8e49-739c235f066a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f4:bf:94:4e:0d:bc:54:08:3f:0a:cd:ab:68:
                    5c:3f:46:c9:86:34:da:75:02:81:39:9d:74:91:7b:
                    be:1a:3a:55:d8:ae:6b:c0:a1:02:92:bb:a3:d8:78:
                    ad:65:96:28:7b:1b:60:c8:83:68:10:9e:2a:83:cf:
                    87:86:d4:25:f9:a7:c4:07:88:fb:ad:94:40:24:89:
                    37:a2:a0:54:02:75:a3:79:48:f0:fe:cd:c9:6e:22:
                    4d:8a:94:69:8c:1e:49:4d:70:e9:f5:9a:ff:6b:ee:
                    31:33:97:b7:60:24:18:7a:6d:af:17:71:39:b4:3b:
                    40:39:60:6f:d2:93:29:0e:80:bc:47:7e:bc:29:5d:
                    ed:b4:c5:79:ad:73:bc:40:b0:30:c0:20:88:95:ea:
                    60:21:a1:48:21:8e:6a:cb:e0:53:94:cd:15:15:21:
                    c9:45:af:ab:6d:9c:61:33:30:43:74:f1:7d:69:6f:
                    e2:e9:6a:b6:11:65:56:25:ae:95:dd:5b:67:0a:ee:
                    39:1f:e8:f1:fe:59:a2:b4:fb:90:71:16:4b:6f:28:
                    8f:e9:a4:98:d0:d9:0a:1f:ba:fb:97:07:f5:54:b3:
                    2c:ba:c3:1e:ca:ce:33:83:34:24:6d:e8:89:60:4d:
                    3f:44:0c:c1:9c:d0:74:8c:90:1c:56:e6:14:57:f1:
                    7c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:DC:DA:35:38:42:CF:49:6D:6F:0A:57:F4:95:D4:9F:A5:67:28:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dc832fe5-feb0-395d-863f-00c7005c70c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:100e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:f1:a5:73:9a:f2:a9:04:66:e0:d0:b0:ed:79:f4:5f:c3:21:
         76:83:98:f8:50:fb:76:7d:e9:a4:43:fb:0b:61:30:d3:72:aa:
         7a:1c:ef:6a:5a:36:ce:2e:eb:cb:c3:f1:fc:50:94:8c:b2:a4:
         e4:d4:c5:7d:e4:5a:aa:f7:49:4f:4d:2a:06:60:b7:a4:6c:98:
         b9:86:ee:18:f5:cf:66:b3:87:74:75:fc:23:66:34:37:a9:6f:
         3f:52:90:07:ff:98:05:b8:ed:f3:ac:d7:5b:8a:52:e0:58:ee:
         cc:46:b1:7d:53:98:5e:4a:95:04:a9:3e:ff:ee:df:2e:cb:e3:
         0b:17:17:77:e0:0e:b2:cb:ff:2e:66:06:d4:14:c2:61:9b:9a:
         31:ae:31:3d:f6:95:a5:5d:f3:87:6a:0a:64:12:ee:d2:14:21:
         14:67:63:23:8a:f3:96:fa:28:d5:ca:e1:48:bd:e0:01:b7:ed:
         d1:c6:ac:12:fd:a6:f8:13:9f:9d:be:9f:91:01:3c:4a:25:4a:
         a2:a7:7f:fb:c4:1a:70:6e:d1:98:4e:51:f7:b7:9b:55:cc:e5:
         d8:b5:73:d3:40:8a:8a:7c:a0:f8:fe:2f:af:0e:0f:73:0f:55:
         e3:5b:92:d8:f8:d7:b8:03:97:37:db:2e:b6:22:64:b2:40:1b:
         f0:23:ac:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:57:32 2025 by rpki-client