Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1dc525a8-ac4e-3ad7-8b95-b4018b8eecbd.roa
File:                     1dc525a8-ac4e-3ad7-8b95-b4018b8eecbd.roa (raw, json)
Hash identifier:          Yg+YQSoicodqM3V6hH5iiUdhbzZHfA0uRNbVljNGiWs=
Subject key identifier:   E5:D5:EE:9A:A7:60:86:02:3B:E4:F9:11:6E:AE:89:84:88:3D:D9:E5
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584BB2F823BCAE4C481115E010B0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1dc525a8-ac4e-3ad7-8b95-b4018b8eecbd.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     397243
IP address blocks:        2001:502:f3ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Nov 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f8:23:bc:ae:4c:48:11:15:e0:10:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=557b5638-152e-406d-a234-381c042114b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f7:02:8c:8c:f5:ee:21:f8:d8:44:d0:21:8a:
                    41:20:57:a1:98:e2:c1:9e:cc:47:df:c5:8d:8a:cc:
                    6f:a6:7a:2d:02:b8:3b:00:a0:98:b0:b1:fd:38:61:
                    96:fa:87:a5:a2:38:fa:9e:f9:6f:b3:80:22:8e:b5:
                    55:ef:08:5a:a6:42:71:34:ea:2d:3e:c2:49:e4:b7:
                    c4:ce:92:5d:48:4c:25:1f:4b:3b:85:55:f8:42:ea:
                    49:32:87:40:4e:09:04:e3:a4:1b:f0:67:14:e6:26:
                    b7:10:92:b2:0e:9e:fc:af:57:43:b6:f5:33:37:ca:
                    50:12:19:f6:43:f0:5b:8c:56:04:38:8c:f1:52:9b:
                    e6:f8:52:ee:ec:c4:1a:5b:a9:20:c1:ed:ae:b2:a2:
                    69:84:0d:ee:6e:64:28:b8:13:39:a5:62:de:b3:ae:
                    16:b9:80:53:90:f5:3a:04:d7:d1:ac:f0:03:df:f7:
                    13:1e:76:a0:c6:e3:31:f3:54:3c:4d:8e:e7:54:29:
                    63:d3:f0:1a:6f:45:fb:1c:39:8d:24:3f:39:10:7c:
                    37:ee:cc:55:d2:09:8b:9d:6c:8c:21:c9:4f:2a:c9:
                    de:eb:25:88:1b:3c:60:ba:cf:80:0c:e4:7c:75:93:
                    1a:a3:f5:f7:ff:71:eb:d0:ff:cd:bd:2b:9a:75:0c:
                    da:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D5:EE:9A:A7:60:86:02:3B:E4:F9:11:6E:AE:89:84:88:3D:D9:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1dc525a8-ac4e-3ad7-8b95-b4018b8eecbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:f3ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:a1:f7:41:3d:a9:1d:0d:8d:41:36:d6:2d:0f:d8:9c:a6:ad:
         0c:e3:d2:67:3f:f7:58:66:1e:1e:40:61:b1:8d:c3:41:87:3b:
         3d:d4:c2:c1:39:e5:2b:ff:8d:d3:9a:27:ce:74:1a:84:1f:06:
         44:33:05:f3:0f:60:74:77:c1:20:df:ce:6e:1f:5c:19:a7:5c:
         12:5e:9e:bb:e3:ca:47:72:f4:b5:df:b0:ab:56:7c:e1:fe:7a:
         c6:3c:b7:48:7d:af:a7:7e:39:38:6f:71:05:bd:7e:33:9c:27:
         68:7d:df:54:07:1b:87:ea:3d:41:5f:d8:55:c7:a3:e0:4c:2b:
         e7:b6:b3:12:5d:33:dd:ed:ee:a3:9c:67:05:49:a6:c9:d8:88:
         37:1f:bd:8c:7c:01:b3:49:48:2d:ac:bb:59:cb:6a:73:d7:7f:
         ae:c7:c3:13:4f:7c:17:10:88:5e:c5:f9:1c:52:84:06:da:cd:
         0f:4f:81:3b:93:d3:e6:0f:d7:0a:40:da:66:29:14:52:6c:0f:
         81:34:49:2b:c4:0e:28:e1:b2:3e:86:94:d6:27:20:1f:e2:0f:
         0a:b6:0b:16:8e:46:7b:f2:9a:fb:5b:cc:ac:5e:e6:46:aa:82:
         75:b9:0a:4a:ea:58:9a:e8:c7:9b:f4:5f:1b:5f:04:00:99:67:
         c7:da:82:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 14:51:05 2025 by rpki-client