Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/11bd38e2-ac3d-397a-ad21-f07cfa00b9fc.roa
File:                     11bd38e2-ac3d-397a-ad21-f07cfa00b9fc.roa (raw, json)
Hash identifier:          O4U0gu/PWMp6nnWVheYNWzam3RwT6qmxTW9E5oZsChE=
Subject key identifier:   63:5E:8C:85:7F:84:80:B6:32:F9:20:FE:9E:56:B9:41:8F:18:B4:D4
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849124708FB47CE55C9C65CAA80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/11bd38e2-ac3d-397a-ad21-f07cfa00b9fc.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     397220
IP address blocks:        2001:502:ad09::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:47:08:fb:47:ce:55:c9:c6:5c:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=141fd029-7b55-4266-920e-c4100c7a660d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9a:5b:cf:4d:e1:c0:26:89:9d:60:7d:67:26:
                    44:54:f5:d3:71:7f:bb:63:b8:06:b1:dd:fc:e7:ac:
                    eb:f1:26:8b:1b:eb:b7:7a:18:87:93:2c:d9:04:fa:
                    ec:fc:73:e1:b0:80:96:a0:98:7b:2d:7b:6b:b3:b2:
                    ba:7e:17:14:a0:53:c0:30:c7:39:53:63:64:9b:47:
                    b6:63:47:33:55:0c:8f:aa:d0:de:d7:02:24:94:34:
                    30:f9:19:93:45:58:99:fb:01:6e:0d:c8:20:b4:d8:
                    33:c8:b4:21:1d:bd:3f:ff:fa:24:69:73:66:04:f9:
                    75:2d:d2:26:54:9b:2b:89:11:78:dd:7b:86:05:5a:
                    8d:d2:a8:29:ea:ff:85:bf:3b:70:4f:da:5c:53:da:
                    0c:67:a6:c6:42:f3:ce:78:23:14:49:c0:ee:4b:db:
                    53:77:bc:e6:c6:41:76:c3:1a:22:44:3d:bf:d0:64:
                    bb:68:bf:9d:c4:03:74:59:1e:ad:8e:fd:c5:81:17:
                    a6:f4:b6:7e:6f:59:99:ac:44:97:72:4d:1a:a5:af:
                    0f:bb:10:84:24:a6:52:e4:31:9c:fb:30:51:94:64:
                    68:ce:4d:92:84:68:d8:d4:73:0d:97:b1:40:dc:ad:
                    e5:6a:d3:5b:6f:94:91:fa:55:a9:9e:07:78:27:8c:
                    6e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:5E:8C:85:7F:84:80:B6:32:F9:20:FE:9E:56:B9:41:8F:18:B4:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/11bd38e2-ac3d-397a-ad21-f07cfa00b9fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:ad09::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:8b:0e:72:98:b1:5e:d2:83:3c:2e:1a:de:1e:46:aa:a7:59:
         f9:73:b4:73:af:81:a0:72:a7:4b:48:38:94:fd:b0:ef:e3:b8:
         22:28:70:3b:3d:19:f9:49:23:07:c9:26:fe:80:a4:53:fd:80:
         85:ea:ed:09:09:e8:7b:18:f1:04:45:20:cd:92:ad:b6:4a:f2:
         36:66:19:29:73:ae:09:c8:bd:c9:e1:fc:75:7e:d9:82:67:34:
         7e:33:6b:1b:1e:a1:9a:53:1d:e0:ab:89:fa:9f:ff:e7:29:c0:
         a1:d3:fd:b7:10:a4:32:6b:4e:a4:11:3d:32:79:ef:8f:68:53:
         44:98:30:5b:c0:0e:26:21:ff:63:d0:b8:da:7f:cb:69:bb:e0:
         9e:44:57:42:9b:84:99:5d:92:0a:40:28:e6:4d:9a:26:02:55:
         cb:99:2b:0a:33:18:f5:77:a9:12:e5:10:ae:e3:85:a1:5b:b7:
         22:6c:10:9d:47:27:94:6c:ab:e0:b3:61:3b:d3:6b:20:3e:b9:
         8a:59:81:18:c9:ae:3c:e8:15:6e:be:01:d6:f0:94:35:f2:ad:
         cf:45:5f:91:af:92:50:50:6a:af:6d:95:20:d4:4e:a3:a5:52:
         a4:23:f5:11:77:60:19:1c:45:39:77:af:db:b5:26:2f:5e:68:
         bd:00:46:92
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkSRwj7R85VycZcqoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
MTQxZmQwMjktN2I1NS00MjY2LTkyMGUtYzQxMDBjN2E2NjBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJpbz03hwCaJnWB9ZyZEVPXTcX+7Y7gGsd38
56zr8SaLG+u3ehiHkyzZBPrs/HPhsICWoJh7LXtrs7K6fhcUoFPAMMc5U2Nkm0e2
Y0czVQyPqtDe1wIklDQw+RmTRViZ+wFuDcggtNgzyLQhHb0///okaXNmBPl1LdIm
VJsriRF43XuGBVqN0qgp6v+FvztwT9pcU9oMZ6bGQvPOeCMUScDuS9tTd7zmxkF2
wxoiRD2/0GS7aL+dxAN0WR6tjv3FgRem9LZ+b1mZrESXck0apa8PuxCEJKZS5DGc
+zBRlGRozk2ShGjY1HMNl7FA3K3latNbb5SR+lWpngd4J4xuewIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGNejIV/hIC2Mvkg/p5WuUGPGLTUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMTFiZDM4ZTItYWMzZC0z
OTdhLWFkMjEtZjA3Y2ZhMDBiOWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAq0J
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABOLDnKYsV7SgzwuGt4eRqqnWflztHOvgaByp0tIOJT9sO/juCIo
cDs9GflJIwfJJv6ApFP9gIXq7QkJ6HsY8QRFIM2SrbZK8jZmGSlzrgnIvcnh/HV+
2YJnNH4zaxseoZpTHeCrifqf/+cpwKHT/bcQpDJrTqQRPTJ5749oU0SYMFvADiYh
/2PQuNp/y2m74J5EV0KbhJldkgpAKOZNmiYCVcuZKwozGPV3qRLlEK7jhaFbtyJs
EJ1HJ5Rsq+CzYTvTayA+uYpZgRjJrjzoFW6+AdbwlDXyrc9FX5GvklBQaq9tlSDU
TqOlUqQj9RF3YBkcRTl3r9u1Ji9eaL0ARpI=
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:11:24 2025 by rpki-client