Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/66e1ffbc-f72d-3216-a488-1e619eab9783.roa
File:                     66e1ffbc-f72d-3216-a488-1e619eab9783.roa (raw, json)
Hash identifier:          vbV8XJSc1vPOP5U9nyy1X5fQt9C5ISgSkxLHeUSYv20=
Subject key identifier:   8B:B3:11:B4:63:09:CD:23:75:0B:A9:BF:D9:D3:9B:38:C4:99:CD:08
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F18012B7336E8AD5C99A0A80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/66e1ffbc-f72d-3216-a488-1e619eab9783.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397237
IP address blocks:        2610:a1:3000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:12:b7:33:6e:8a:d5:c9:9a:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=bb054424-812d-499f-8bc5-c40f78794b92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1d:6b:d2:d3:b2:b6:63:15:94:4d:1d:a8:96:
                    e1:cd:5e:78:cd:b7:f7:57:dc:08:c1:77:4f:46:6a:
                    dd:55:49:48:4c:62:c3:96:a0:ad:3f:94:e0:e4:66:
                    f5:d3:c3:40:a9:10:87:b6:ff:d3:ca:94:52:9e:d4:
                    19:85:b8:41:a4:05:81:74:a4:dc:95:f8:20:bb:99:
                    b1:17:8a:c6:9d:5f:db:ae:2b:eb:98:73:2b:0d:50:
                    a5:da:b6:af:ad:8a:30:a9:a0:de:c1:7b:5c:f2:6e:
                    03:fa:8d:c0:58:1f:5b:3b:d9:a7:a1:61:bf:d3:7c:
                    b7:60:f9:80:34:75:5e:59:c0:f3:07:2c:3b:15:81:
                    65:6b:4a:8b:e0:2b:4c:80:32:41:0c:30:44:64:3a:
                    71:fc:9b:69:f4:15:d6:d4:34:ca:e0:b2:7b:c3:4e:
                    6f:18:2f:c8:53:fc:11:ca:ef:38:d4:af:e6:d5:b8:
                    bb:28:e7:ea:39:2c:83:9f:7a:4e:7a:79:17:0f:03:
                    60:27:11:15:08:25:88:bd:11:7e:fc:ee:c1:95:61:
                    0c:76:e3:09:74:91:45:05:4a:31:e9:f6:82:2a:11:
                    21:18:45:08:12:d3:3b:55:47:d3:b3:f8:94:77:7c:
                    a2:61:a4:53:02:15:fd:90:e1:ad:71:5e:c5:a0:29:
                    26:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B3:11:B4:63:09:CD:23:75:0B:A9:BF:D9:D3:9B:38:C4:99:CD:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/66e1ffbc-f72d-3216-a488-1e619eab9783.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:3b:a5:c0:32:1f:28:75:75:c3:44:92:7c:d6:e1:9b:5c:3b:
         48:95:a4:0d:67:7d:f0:5b:ad:6a:a4:d6:66:fd:c2:7a:a2:2b:
         8a:8a:c4:e5:4d:16:0b:5b:f6:67:0c:8e:bf:76:9e:0a:67:86:
         68:a0:f3:7a:db:3a:d5:59:fe:5a:fa:28:f0:a3:e8:ae:65:99:
         f3:0e:5d:b5:1d:34:08:c3:6e:69:ad:4d:d9:99:79:02:f5:ce:
         ed:75:11:4f:f9:94:60:92:10:53:af:cb:ff:8a:24:44:29:63:
         72:f7:4b:37:5a:0b:2d:e2:6c:44:49:3f:8f:85:8b:46:50:02:
         b9:84:bf:ac:94:e2:f8:86:08:a4:dd:74:13:c6:e3:cb:42:3e:
         ab:7e:fe:9c:e8:f3:3a:53:e4:47:63:04:25:fe:7d:4a:a3:2b:
         2a:80:8e:d8:2a:25:6e:40:71:24:ef:14:93:7e:30:9f:b1:89:
         ed:c8:f6:eb:54:81:3b:33:68:8e:5a:c9:bc:a7:c5:56:67:3f:
         6e:a4:97:fa:5b:cd:b6:37:18:6c:2a:da:80:36:17:74:35:b0:
         c7:19:e3:98:79:03:4b:d4:c7:e5:de:83:08:5d:12:e3:c7:56:
         91:b3:df:29:16:71:d2:0c:7e:24:18:7b:ab:24:5a:5b:85:c4:
         ec:54:9e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:34:29 2025 by rpki-client