Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2488ac8f-6e85-3e9a-9495-52fca2eeb490.roa
File:                     2488ac8f-6e85-3e9a-9495-52fca2eeb490.roa (raw, json)
Hash identifier:          WF//Jzv29elLcN/rLpBJ9js4ao1hCQhBIB/AD33kmF0=
Subject key identifier:   5F:CD:3A:9F:7A:6D:04:C1:4A:9A:AD:CC:33:8E:CE:D4:B7:99:83:29
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584BB2F8113F14ADDF4D05FE8D00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2488ac8f-6e85-3e9a-9495-52fca2eeb490.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     397224
IP address blocks:        2610:a1:1000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f8:11:3f:14:ad:df:4d:05:fe:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=6eb0e3f8-0358-41c6-8d4c-9035a7af200c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5e:76:7b:45:85:3e:88:0d:ac:2f:e4:22:69:
                    36:2b:88:40:6a:ab:5a:b0:7a:9b:6a:58:85:4a:a5:
                    67:ca:08:48:2f:a5:4c:1b:b2:e8:08:a6:32:15:96:
                    37:8d:3c:57:f5:a8:03:14:ea:10:31:1d:bb:27:00:
                    92:d1:18:23:c1:43:a7:0a:91:73:99:d3:1a:e6:e5:
                    2b:0f:b7:78:94:c3:97:b0:19:d4:fe:04:08:f4:07:
                    75:24:55:04:47:17:46:53:e3:f6:8f:1f:ee:5a:46:
                    32:dd:c7:dc:62:8d:6d:2f:d6:31:52:fa:ca:ba:6e:
                    74:81:63:39:6b:63:fd:21:18:6e:a1:bc:0c:b6:ef:
                    fd:76:31:9d:13:3e:bd:ce:f0:6d:06:64:8c:12:f7:
                    4c:5f:22:b9:98:6a:f5:2e:2c:8a:20:f3:b9:60:db:
                    a3:ca:08:a0:37:67:47:b3:9d:0c:59:c6:48:ae:d8:
                    ea:d7:1b:e8:23:70:14:55:57:78:01:6b:43:25:5e:
                    29:be:ca:8f:6f:a4:9b:d9:ef:02:ad:01:4a:50:45:
                    1d:aa:2e:60:1a:87:42:7b:c6:27:50:06:c0:e9:a8:
                    b6:d7:34:ee:17:54:80:45:9d:ee:b7:60:b9:3b:44:
                    c8:40:8e:be:31:5f:d2:37:66:fe:aa:d9:b7:70:bc:
                    ac:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:CD:3A:9F:7A:6D:04:C1:4A:9A:AD:CC:33:8E:CE:D4:B7:99:83:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2488ac8f-6e85-3e9a-9495-52fca2eeb490.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:9a:6a:f2:dc:29:fe:60:75:46:0c:51:66:2a:9c:48:fd:aa:
         e1:df:68:65:4b:b1:80:6a:a5:cf:45:98:1d:bd:21:cb:5c:0e:
         ee:0e:5f:49:5d:86:0b:54:e4:03:2e:93:95:31:f9:d9:da:d4:
         84:74:67:ee:ce:d5:51:7f:17:ae:cb:f2:ad:d8:5c:df:4d:f3:
         87:e4:f7:78:9c:09:95:45:9d:2e:89:2e:64:ff:ff:d2:0a:8e:
         df:96:f6:77:87:6d:33:25:35:a6:fb:ff:92:ff:28:0e:7a:35:
         eb:e0:4a:5a:40:3a:a0:3c:83:63:aa:5d:04:35:ba:12:3b:30:
         17:d7:18:7c:66:52:10:33:ea:36:3f:43:c9:30:47:c3:fb:a6:
         64:ff:c5:f0:ac:10:d9:19:c8:e9:79:f9:73:af:d6:fe:02:ea:
         12:42:39:5a:3f:e9:27:d1:c4:57:02:9a:5d:cc:dc:40:77:e4:
         f7:59:84:46:23:cd:8b:dd:2d:22:ca:2e:bd:8d:4c:e9:54:73:
         3c:1c:72:53:0d:c4:5e:52:2b:65:6c:8c:d8:66:54:cb:68:a9:
         91:3f:5b:6d:8c:44:ad:ce:00:db:bd:89:c0:0e:96:06:10:ea:
         53:75:57:ec:08:0f:19:9e:99:ec:2b:c7:d9:8f:6e:dd:02:2f:
         49:76:4b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 03:14:45 2025 by rpki-client