Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/395fce40-fe51-30d3-87dd-472a01ed1dea.roa
File:                     395fce40-fe51-30d3-87dd-472a01ed1dea.roa (raw, json)
Hash identifier:          6f8hTEqHR8IIZvqtVtffTE5gMr43s+BOe9g1w4gBKvw=
Subject key identifier:   CC:1B:84:47:0B:3C:E0:9E:80:4D:31:51:41:64:85:80:95:56:35:3F
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F18017B68D6F66313B21F800
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/395fce40-fe51-30d3-87dd-472a01ed1dea.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397224
IP address blocks:        2001:502:2eda::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:17:b6:8d:6f:66:31:3b:21:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=31b96701-180b-479c-a113-3ef768fd6c02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0c:61:a4:8a:a3:f4:1a:9e:30:f4:db:be:02:
                    35:87:67:ec:b6:11:ec:36:f9:5a:64:4e:32:04:44:
                    cc:44:e6:2e:aa:6c:ae:9e:fa:ec:98:27:db:57:e0:
                    28:3c:d9:ec:54:26:97:7f:42:dc:37:36:de:e5:06:
                    e7:cb:dc:0e:eb:ce:14:31:39:d9:d8:2d:2f:36:89:
                    55:a8:ad:0c:37:33:bf:bb:65:c9:d5:4f:6a:be:51:
                    51:a5:21:67:07:b8:f5:4c:eb:01:fc:18:98:81:c1:
                    f2:db:4f:ff:25:64:5b:f2:fb:87:01:88:df:ad:a8:
                    42:82:90:81:47:9c:0c:1d:11:7d:71:10:22:70:61:
                    f7:c9:86:3c:f4:d3:23:07:05:0e:5c:0a:d4:ee:c2:
                    7a:97:91:60:e9:5e:da:12:25:c6:4a:04:8c:e0:94:
                    a8:ca:a5:64:48:8c:7c:2e:b8:20:7a:b7:83:73:dc:
                    74:46:2d:09:3d:d6:ca:33:a1:91:8e:50:e1:c3:40:
                    ba:7d:00:84:ad:b5:69:ad:88:e0:d7:3d:44:08:44:
                    f0:4c:60:91:1a:86:16:28:9f:04:67:f6:c0:92:68:
                    60:9e:0d:c5:d3:59:a3:aa:81:de:90:2b:0c:d7:8c:
                    bf:81:d8:52:92:67:05:91:13:70:31:01:bb:88:17:
                    70:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:1B:84:47:0B:3C:E0:9E:80:4D:31:51:41:64:85:80:95:56:35:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/395fce40-fe51-30d3-87dd-472a01ed1dea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:2eda::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:a0:a0:32:f0:8e:7d:e1:53:fd:0d:a8:74:28:d4:ce:1b:a9:
         0c:02:3a:29:2b:7c:23:55:75:2e:d6:33:fb:57:7f:7f:0b:5a:
         82:b8:5f:87:f1:15:17:82:71:ae:18:56:d9:7e:2f:e4:c9:0f:
         9f:19:d9:8e:1b:a2:fb:e2:d9:39:eb:f9:ae:5d:2c:b4:9a:81:
         e9:1f:6a:43:c7:70:86:ec:3f:b1:2f:c2:32:fb:d0:81:17:fd:
         38:57:8a:70:c6:e7:45:d4:c6:44:da:14:5a:9b:d0:47:c2:f4:
         54:67:1d:93:c9:56:f9:a1:84:18:21:2b:a4:6a:52:d2:21:ea:
         de:3d:a8:43:b6:d7:8f:b5:54:3d:27:c5:08:ee:ef:77:29:02:
         04:c5:50:21:5a:a2:a4:c5:30:48:db:8a:32:19:c4:24:5c:30:
         cd:29:53:b8:bc:86:12:e1:6a:fe:a0:6f:5a:54:f4:84:12:d9:
         2e:40:09:05:6d:10:7b:d7:c1:d7:3e:96:2a:ff:9c:46:b3:cd:
         32:98:79:f7:0f:38:53:d8:56:8e:91:7b:f3:f3:d2:66:1a:bd:
         5d:9e:bd:01:ed:c7:5b:15:51:cd:f5:2d:35:ce:66:0d:a0:2a:
         9d:a1:78:85:94:fd:b7:d7:54:ae:e3:ec:84:bc:57:2a:da:b1:
         06:ed:4a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:21:25 2025 by rpki-client