Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f1e6e30a-a029-3c26-862b-e2424aa0fa3d.roa
File:                     f1e6e30a-a029-3c26-862b-e2424aa0fa3d.roa (raw, json)
Hash identifier:          keXqMSnhNvipMKcssuniY9Mrl/jAIDsWJEALMEHGA1U=
Subject key identifier:   02:12:39:CB:B9:1A:29:47:2C:D5:9D:04:AC:A0:88:A3:4F:B1:73:92
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584BB2F812809199D358D4E60B00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f1e6e30a-a029-3c26-862b-e2424aa0fa3d.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     397243
IP address blocks:        2610:a1:1000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Nov 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f8:12:80:91:99:d3:58:d4:e6:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=7ce6c76f-b575-4094-86e0-f1427cf499f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0c:54:f4:6b:51:01:e2:c6:36:36:66:0e:52:
                    03:8a:80:1e:e5:53:e3:16:b5:d6:55:d9:d6:ab:83:
                    ce:cc:74:68:ee:26:6d:6c:8c:37:75:4b:df:ea:44:
                    67:92:98:7f:1c:32:87:2d:11:e1:8f:17:f1:ea:4a:
                    a4:4b:af:54:03:14:81:0d:c0:12:96:8c:d5:06:b0:
                    34:bb:5a:06:14:16:33:6c:7f:bb:96:7b:85:a3:b8:
                    66:aa:86:f4:a2:41:fb:7d:41:97:84:5b:b2:34:76:
                    7b:dc:09:ea:39:9b:b5:a1:4c:ef:d0:fd:ae:6a:dd:
                    fb:0e:31:a5:9a:6c:a7:66:61:db:86:3c:e4:26:1f:
                    59:87:ee:4f:ae:13:d2:35:5f:e2:05:94:85:d6:f9:
                    3a:a7:25:0a:e9:26:e5:b6:f0:41:7a:8c:3b:dc:7b:
                    a9:da:74:c9:ff:cf:55:5a:db:fe:2e:5e:dd:31:41:
                    a3:88:64:bf:d7:45:ed:f5:3a:d1:d7:dd:ac:c2:df:
                    d0:3a:dc:0d:db:6e:45:78:6f:60:94:39:dd:db:d1:
                    70:61:b3:ab:8e:fc:cc:08:90:e9:6a:4d:ab:5d:60:
                    dc:42:d0:c4:59:27:0e:b4:6e:7e:dc:a3:0d:f4:f4:
                    c9:b1:bb:1f:cc:e5:93:d0:ea:6c:79:45:a0:0f:88:
                    2f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:12:39:CB:B9:1A:29:47:2C:D5:9D:04:AC:A0:88:A3:4F:B1:73:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f1e6e30a-a029-3c26-862b-e2424aa0fa3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:7b:72:b6:eb:b6:f6:86:da:98:ad:3a:f1:ed:7e:54:8b:3b:
         32:69:df:5d:f2:6a:ea:b2:12:81:b7:57:66:8a:26:a9:74:c3:
         bc:73:ea:a4:1b:a0:71:95:ee:a6:e5:e6:4a:97:b9:f9:c6:d4:
         b0:24:a1:61:4d:29:10:1f:e4:4f:dd:f3:fe:cd:59:9d:f4:5e:
         79:0e:c2:8b:98:ee:2b:2a:f6:fc:da:91:02:ff:0e:94:48:3f:
         7e:53:4d:c8:a5:1e:c2:5b:83:04:8c:ca:0e:7a:9b:52:41:16:
         5d:61:27:01:1f:cc:24:4b:1f:70:22:f1:bc:a9:e8:ac:95:cd:
         de:c6:cb:4f:dc:55:9c:62:17:4f:bf:8d:e8:4e:ed:78:9e:d5:
         4e:d2:6e:ea:3b:b5:5a:c7:1e:d0:8d:88:fa:60:ab:d2:e1:07:
         5c:77:e9:72:e4:91:49:e7:1a:cc:bb:6c:6c:35:6d:3b:4a:ad:
         ae:96:fa:94:b0:44:b3:1b:f0:40:af:ef:f7:fa:83:23:c3:ea:
         a1:95:5b:c3:a8:b8:b0:10:6f:5f:46:21:2a:4e:e5:df:14:1d:
         3d:96:81:3f:5b:0d:f4:3f:fa:fc:43:33:f3:59:16:8e:0c:41:
         31:0e:36:67:72:4b:b5:a5:48:26:07:a3:52:22:ca:d8:d7:54:
         78:5a:f7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 14:51:05 2025 by rpki-client