Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/29eab676-695a-3d54-abf2-9ba90caec947.roa
File:                     29eab676-695a-3d54-abf2-9ba90caec947.roa (raw, json)
Hash identifier:          hSsaZDwkCL1H4X6z27YskitBKHvBmP2dPJlbbveWXJ8=
Subject key identifier:   59:86:7C:00:A3:F3:68:6B:4A:0F:3D:47:A4:C9:2A:78:97:C7:5A:37
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584912470E31E81C5FFEFD4CDAC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/29eab676-695a-3d54-abf2-9ba90caec947.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     397213
IP address blocks:        2001:503:e239::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:47:0e:31:e8:1c:5f:fe:fd:4c:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=3435f2a1-8d54-424f-b5ba-fc22f9a3766d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:90:26:c5:4d:2b:9c:2e:92:93:5c:da:84:ef:
                    83:17:c7:fa:1c:e7:eb:2e:ef:42:da:53:53:d8:66:
                    33:de:9d:05:b1:23:ed:93:f6:c3:16:34:77:f1:10:
                    f7:c6:a5:e1:a7:eb:e0:08:c0:89:39:b9:17:92:82:
                    e7:eb:86:3a:cf:76:5c:dc:eb:31:5e:6a:42:72:a4:
                    b1:e3:3a:44:58:3c:e4:bd:05:75:2e:a8:a8:a3:23:
                    79:17:1d:19:20:e9:47:8e:4f:08:b7:6f:eb:a8:52:
                    0c:bd:d1:0d:9c:d7:7b:ca:11:91:44:23:b4:ed:ac:
                    aa:58:ce:9e:78:34:b5:c9:5a:29:06:fd:76:ae:b3:
                    b8:2a:a8:f6:b5:6d:18:4f:b5:2e:e7:36:1c:ed:31:
                    88:c2:c7:40:3e:fb:66:40:b1:dd:e6:81:c0:c9:d9:
                    8c:ed:d4:64:44:9e:89:a2:fd:f7:c6:fb:ab:f3:62:
                    fa:38:1b:f8:64:46:c6:dd:9c:a2:79:0b:aa:a5:37:
                    cf:c6:8a:ec:17:39:8b:7e:c9:d0:ef:8e:ff:79:d1:
                    c6:cf:e9:e8:17:ef:f8:a3:09:5c:45:68:3b:de:cb:
                    f3:00:51:b4:f1:cc:ac:62:c3:f4:f3:25:6f:7a:57:
                    48:70:cd:94:08:d7:15:49:5d:b3:e6:ef:27:a9:8a:
                    99:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:86:7C:00:A3:F3:68:6B:4A:0F:3D:47:A4:C9:2A:78:97:C7:5A:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/29eab676-695a-3d54-abf2-9ba90caec947.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:e239::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:0a:29:2f:8d:a2:ea:d1:29:b5:3c:40:b2:b0:25:c4:ca:54:
         6d:da:13:06:a9:51:f7:a4:c5:21:bd:6e:67:c1:e9:5c:e9:b4:
         bf:63:9b:03:1f:0a:09:5d:f1:c7:c8:64:92:e6:de:af:47:e6:
         f9:c3:3d:41:fc:54:04:4c:79:34:76:14:f3:e7:a0:71:50:c6:
         1a:51:20:c5:a4:40:f9:9c:c0:7e:f8:e5:38:5a:7d:7b:66:b5:
         4c:c9:04:5b:4f:e7:e5:41:2b:2b:d1:de:65:b2:a3:52:14:eb:
         07:fe:cb:ec:98:73:3d:41:ec:69:9d:40:4d:79:55:13:30:c1:
         c3:76:1c:44:f1:67:32:a6:e1:32:ea:7f:34:cc:57:f9:64:e9:
         ef:92:85:dd:23:9b:b4:8a:9c:fb:c9:ae:70:f8:33:01:5d:f6:
         ff:1d:f5:15:fe:05:02:ea:0e:6e:1c:ae:1a:37:c3:f0:07:b5:
         34:1b:ba:af:a3:6b:b6:27:5d:0c:60:de:b9:98:0c:46:05:62:
         68:08:1e:5a:cc:d0:65:d1:45:05:9c:d6:bb:79:ed:f2:fd:47:
         7d:30:5a:4a:11:b5:27:b3:f6:c5:a8:36:f8:d9:89:f3:7c:11:
         c3:07:d9:fc:5d:b5:e6:bc:a5:55:05:86:59:a1:18:f9:42:b0:
         0f:11:24:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:01:21 2025 by rpki-client