Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/22782e33-f996-38f2-94a1-b3eb8df9a5e7.roa
File:                     22782e33-f996-38f2-94a1-b3eb8df9a5e7.roa (raw, json)
Hash identifier:          TQheGWl3PKwJjxQJOnoK8l8a1P+Iq/OeRY1VpcXStAM=
Subject key identifier:   C5:F8:5B:96:8B:CD:1A:E3:E5:F1:F4:04:4E:A1:CF:7F:92:F7:57:50
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AD23C197B8DD72CEAC4B68E80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/22782e33-f996-38f2-94a1-b3eb8df9a5e7.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     397241
IP address blocks:        2610:a1:3000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:19:7b:8d:d7:2c:ea:c4:b6:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=0c318e15-6459-48b6-8daa-0c23369e70ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:87:0b:68:fd:c7:37:70:e1:7f:cd:9a:c2:9c:
                    83:ce:f1:06:24:4e:6d:17:f8:bb:09:13:d4:c4:1d:
                    af:7b:c7:6e:66:cf:3b:67:5a:9f:45:d0:5c:e4:ea:
                    20:77:a2:4d:e2:88:71:40:42:e3:a9:dd:6f:2e:0f:
                    0d:e9:fc:53:5a:73:5b:da:88:1e:aa:54:6d:09:fb:
                    ea:11:5a:7f:02:53:a6:5e:f7:81:ad:0a:be:cb:e9:
                    1e:0c:af:c6:32:9b:a0:26:a5:a1:c6:80:8d:96:b5:
                    f6:41:0e:11:20:d5:09:ab:1d:ed:18:c6:34:b0:67:
                    ee:27:74:ae:f1:ed:80:41:5c:46:c5:68:d8:97:4f:
                    5f:d0:96:41:1f:fb:32:90:db:76:9f:b2:cc:4b:30:
                    f1:c7:1f:d4:e5:03:c1:32:56:75:c6:36:fa:9d:6d:
                    28:bf:26:c8:50:34:29:97:1e:9d:1e:b1:1d:91:d1:
                    7e:67:6a:b0:7a:af:87:05:08:7b:78:92:01:95:12:
                    28:73:b1:5d:d9:69:da:31:0a:64:b8:77:18:53:a9:
                    06:9b:32:cd:66:a0:42:93:20:30:ea:3b:9d:9a:0c:
                    1e:98:b8:44:3d:5d:e2:ff:47:06:60:42:a4:da:8a:
                    ab:ce:a4:ca:01:23:a0:84:9f:bf:86:99:64:e5:0f:
                    5c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F8:5B:96:8B:CD:1A:E3:E5:F1:F4:04:4E:A1:CF:7F:92:F7:57:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/22782e33-f996-38f2-94a1-b3eb8df9a5e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:31:5c:54:fe:a9:a7:45:10:ae:d6:8a:46:70:80:88:88:77:
         7c:3c:5c:d2:d6:d7:33:45:37:ba:37:98:cf:40:93:3b:85:94:
         ff:4c:5e:bd:7d:29:c7:da:5b:2f:87:2b:c3:4d:96:ec:b4:34:
         37:2e:e5:d6:f6:a8:6d:df:f5:5a:16:66:88:e7:9d:b2:17:2c:
         b6:9e:54:f1:f2:46:27:29:88:05:e8:75:39:69:a3:82:a8:f3:
         64:ec:2e:20:b5:d5:8d:26:02:99:04:8e:1b:25:f1:45:97:8f:
         e0:b7:d3:84:82:11:19:68:46:05:c0:9d:3a:c0:6e:63:c9:f2:
         e5:03:19:a9:fb:47:7e:d9:98:8f:f2:07:80:15:d4:79:cc:56:
         a0:eb:3b:81:7e:44:d0:c8:7d:90:48:8c:b8:9d:57:86:7b:59:
         78:81:76:18:c8:bf:12:93:b8:63:d5:e3:20:be:95:ba:58:2a:
         6d:90:ab:06:12:98:17:ac:20:6b:24:fc:22:3f:e5:64:72:02:
         a8:06:20:61:a1:19:7a:99:2c:fc:5e:2f:5f:60:83:c7:d6:06:
         8a:27:d1:32:c1:6e:57:40:cf:09:55:ca:82:15:68:54:d9:31:
         50:47:9d:9a:95:3b:fa:a6:c4:00:e6:16:13:68:f1:77:1c:5d:
         79:ef:1a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 07:13:28 2025 by rpki-client