Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f7121aa4-b9b7-3014-87cd-44523303ecb5.roa
File:                     f7121aa4-b9b7-3014-87cd-44523303ecb5.roa (raw, json)
Hash identifier:          7p/1P/gfnyUiMUW4AqucT0ST2q/Yhv2xhqzXgk/RA9w=
Subject key identifier:   A1:56:AA:4B:63:4D:11:30:E6:B4:43:04:0C:AE:2F:B0:D3:0F:FC:27
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858491247006B015F9917552F0980
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f7121aa4-b9b7-3014-87cd-44523303ecb5.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     397230
IP address blocks:        2610:a1:3000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:47:00:6b:01:5f:99:17:55:2f:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=a1289b68-6bcb-4aad-a03a-fb57b7db6db7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b9:ee:01:85:28:ac:b7:ea:ce:ee:5d:97:f0:
                    15:10:e7:65:23:1c:ad:f0:a6:98:85:4a:22:ca:0e:
                    2e:99:d5:1f:b2:e8:38:78:2d:2c:cb:bb:fc:7d:d1:
                    75:c9:8e:a1:83:b2:ea:6f:8e:f7:68:dc:17:eb:e7:
                    a0:df:f3:bd:d4:c9:89:ad:3f:90:a8:61:e0:0d:18:
                    8b:6a:51:15:30:54:09:a1:62:6c:1c:51:7f:2b:47:
                    d8:2c:52:ef:00:89:f0:5b:07:64:14:ec:9e:ba:c4:
                    6a:db:7f:88:ef:48:91:1f:23:db:9b:ad:cf:86:4e:
                    b2:3d:82:7c:0c:4a:9b:3c:90:db:3a:8f:e0:a5:46:
                    05:29:ef:ac:30:b6:e1:f1:30:89:83:b7:19:e7:67:
                    41:4f:f5:54:92:6c:39:75:32:0d:5e:c9:bc:98:13:
                    43:56:8f:6f:82:06:b7:f4:3d:62:e8:50:6b:40:62:
                    aa:03:6b:8a:ab:5b:db:d3:0d:eb:58:19:a4:43:24:
                    96:cc:2f:9d:bc:e5:80:a1:c6:a6:13:fb:b0:6a:87:
                    04:0f:49:e8:d7:62:dc:42:7c:2a:73:66:fa:08:ba:
                    a1:71:d6:28:29:f6:e8:e8:0c:d8:79:0b:1a:b6:f7:
                    47:c7:21:47:6b:a9:a7:00:4c:99:33:a7:f3:37:81:
                    00:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:56:AA:4B:63:4D:11:30:E6:B4:43:04:0C:AE:2F:B0:D3:0F:FC:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f7121aa4-b9b7-3014-87cd-44523303ecb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:98:53:53:f6:ec:c5:eb:7e:c6:52:47:41:3c:11:e5:90:ba:
         36:44:19:75:39:b0:b7:62:39:62:75:2a:bf:29:a9:2f:bb:5f:
         d0:c9:dc:06:56:b2:b1:d7:1b:f9:bc:4e:12:04:a4:69:51:31:
         c8:da:51:c8:01:ee:da:40:0d:66:e7:50:c9:1f:1b:fb:37:9f:
         af:da:44:b5:f3:0b:ba:8e:de:fa:e4:e6:31:ee:73:fe:e8:f0:
         83:4d:15:19:31:78:79:15:ed:96:1e:8b:81:fa:04:b7:b0:9a:
         dd:ec:79:fa:0c:37:89:b9:29:fe:98:85:63:30:5f:73:a8:87:
         89:f3:68:06:09:bf:03:56:fb:9d:ce:ef:2a:be:a9:47:d5:51:
         86:96:1e:e8:cc:e1:28:0f:c5:07:6c:b2:e3:41:df:93:61:b9:
         c9:f3:68:52:f3:d8:a3:50:06:77:18:33:25:e5:35:99:aa:ab:
         ed:5d:d0:6d:01:9b:d7:08:b2:58:9f:4c:43:ef:33:17:8b:59:
         82:96:09:45:a9:df:16:cd:6a:27:30:7f:a5:33:86:88:32:e4:
         45:95:6b:bd:7d:45:d7:d5:65:10:5f:40:da:89:f3:5b:1a:f9:
         1f:3e:03:23:43:fa:0a:88:a9:b1:74:a5:4c:1b:f8:68:3c:9c:
         3b:f8:64:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:32:52 2025 by rpki-client