Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0a00e7bb-e7bc-32b1-a662-6f29d4cf3de2.roa
File:                     0a00e7bb-e7bc-32b1-a662-6f29d4cf3de2.roa (raw, json)
Hash identifier:          fzDCJMdHM9ZrsOb9EuFxDpV03je/W6h4tD3yJvN2y0I=
Subject key identifier:   94:B4:C7:36:01:02:43:43:55:92:8F:0D:2E:BC:CE:BB:ED:E4:FD:ED
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F1801A64DD50CA70FE4C1900
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0a00e7bb-e7bc-32b1-a662-6f29d4cf3de2.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397237
IP address blocks:        2001:502:4612::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:1a:64:dd:50:ca:70:fe:4c:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=5e5c079d-50cc-4dac-b94b-7d63f53df4ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ec:8e:c0:21:15:1d:9b:85:f8:f7:be:f6:78:
                    d2:77:2f:6e:61:d1:90:82:b8:88:3f:69:c1:e0:e6:
                    f7:eb:52:3d:7d:de:21:ee:0f:cc:52:da:1a:ca:d1:
                    db:ed:fa:8f:9c:c7:6c:f9:c4:76:02:3b:6d:d8:7b:
                    05:0d:2d:b1:c0:aa:06:87:37:6e:49:fb:ea:63:1e:
                    be:8d:1a:66:e3:3f:cd:eb:8e:e6:5c:bb:e0:9d:83:
                    50:cc:27:b4:d4:c8:e6:47:5b:dd:2a:a3:f1:6a:72:
                    1e:67:23:68:f0:47:2a:45:20:e4:6b:65:09:a9:13:
                    d3:83:93:50:b5:66:44:c0:a8:72:17:c3:6e:4f:66:
                    ec:93:20:f5:c7:7f:9c:be:c9:60:f3:fc:c8:df:d8:
                    a4:fc:c5:86:9a:0d:1c:90:f6:aa:cc:24:a1:bf:65:
                    79:f2:25:13:e1:cb:3d:e4:91:f7:28:79:23:3c:b8:
                    a8:4a:97:a4:72:f4:be:89:b5:3a:bd:df:db:95:47:
                    a1:b4:78:dd:bc:13:62:8f:ce:ce:3e:fe:1c:6d:0b:
                    3f:7e:39:f4:c9:20:36:e4:cb:b5:55:05:b5:c7:5f:
                    b5:53:7b:e2:f1:0e:ef:35:ec:84:d5:ed:4d:b6:f1:
                    a8:b2:c8:8e:4b:f2:d6:b6:c7:2f:2c:5b:f8:12:a0:
                    db:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B4:C7:36:01:02:43:43:55:92:8F:0D:2E:BC:CE:BB:ED:E4:FD:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0a00e7bb-e7bc-32b1-a662-6f29d4cf3de2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:4612::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:ea:20:5c:88:25:8e:76:41:a5:b3:45:d1:4d:07:39:b1:e6:
         d6:f7:9d:86:ec:1a:6b:2e:41:32:d6:2c:a3:d0:57:ac:f0:54:
         d9:04:e2:ef:68:70:f7:11:42:16:42:94:9f:ff:1c:1e:fc:87:
         30:33:61:d8:ce:54:3b:18:d2:d9:c7:39:ae:76:e0:89:0c:11:
         9c:2d:c8:32:ee:8c:4f:da:74:25:1d:41:99:3e:ae:4b:0d:f5:
         65:a1:79:fb:52:06:f3:0a:94:9d:e1:a1:6f:82:d2:65:12:d7:
         2b:4c:c2:75:6a:21:b3:f5:7b:a0:98:9d:8d:b8:5c:ce:fa:d1:
         54:4f:b0:2b:98:60:35:9c:d1:1f:ed:d6:7e:d4:29:6a:e4:03:
         14:c5:a1:87:0f:40:56:8e:f8:cc:b6:0b:89:f8:c9:fa:d3:fa:
         16:39:3f:eb:4a:a3:1d:7d:6b:5a:a8:a6:3a:17:fa:df:e6:85:
         c7:d4:1f:64:cb:6f:a7:d9:de:05:7a:05:a9:17:bd:f8:a6:75:
         55:93:22:5e:d9:7d:85:d9:d4:16:56:64:22:ca:4b:ee:a0:c5:
         5f:87:0c:00:ac:ab:cb:b6:73:ba:3a:c0:1a:40:f6:b7:7b:f3:
         20:0c:a8:48:2c:d5:2f:ee:7f:07:32:ff:30:13:23:60:5d:13:
         3f:1b:85:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:32:16 2025 by rpki-client