Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/84e486f1-b11c-3c8b-a635-6a05092c1099.roa
File:                     84e486f1-b11c-3c8b-a635-6a05092c1099.roa (raw, json)
Hash identifier:          VDKUmvtD1z5N7eQm8A07NlC85JBZBRK1bapoAfGtTc4=
Subject key identifier:   1F:6B:46:0B:B5:05:D3:49:C3:9E:55:FB:5B:DF:5B:CE:9F:25:C1:97
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849124707653A03CF26A77A6B80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/84e486f1-b11c-3c8b-a635-6a05092c1099.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     397225
IP address blocks:        2001:502:4612::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:47:07:65:3a:03:cf:26:a7:7a:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=95738434-3d50-4f2f-9fd9-61fb37435e78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c6:aa:a8:cf:22:98:36:b7:c5:84:02:85:44:
                    cd:b9:cf:d7:37:a5:b0:d1:51:8f:9f:04:f8:57:e5:
                    a5:d4:6d:0d:16:3e:05:9d:10:44:23:7d:be:50:74:
                    29:1b:c6:c8:84:6c:75:4f:a3:90:06:6e:20:c2:f8:
                    fc:86:97:32:8c:26:3f:2e:72:64:b0:b4:3d:e9:63:
                    f4:f1:d3:d6:47:b8:b6:0a:90:6e:7f:de:ba:27:6c:
                    8d:a0:dc:25:1b:6f:58:12:42:dc:fe:9f:2c:c6:96:
                    0a:ae:6d:e7:f8:b8:9a:a2:6d:1e:7e:98:11:13:cd:
                    5d:05:11:78:24:37:c5:f6:1f:56:f5:ad:10:c7:d3:
                    5f:36:ac:15:a2:53:20:6b:18:0d:3d:4a:7f:c7:90:
                    9d:14:41:aa:57:77:13:58:d1:df:b8:2f:73:e4:89:
                    ea:fe:e8:0b:3c:6b:a1:ff:ef:dd:cc:a4:fc:3a:b4:
                    e8:92:02:18:68:61:12:28:ec:30:3b:34:2d:1b:0f:
                    4b:54:34:26:05:60:4f:14:62:99:48:ff:cd:57:b3:
                    5f:d1:53:4c:b7:0e:71:a1:1b:30:f4:9d:fe:c6:82:
                    f3:e2:b7:f2:ef:29:72:26:81:e8:7e:30:35:e9:c6:
                    7e:ae:da:9f:31:42:52:53:c5:ac:a2:3c:6e:46:f9:
                    22:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:6B:46:0B:B5:05:D3:49:C3:9E:55:FB:5B:DF:5B:CE:9F:25:C1:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/84e486f1-b11c-3c8b-a635-6a05092c1099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:4612::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:b6:bf:84:30:dd:28:90:f8:4e:f0:20:f5:df:0f:c9:b8:0d:
         ae:a0:d6:cc:ba:9e:f7:8d:f7:a5:1a:d9:d6:c8:b2:d5:76:73:
         06:cf:a2:28:b5:22:1c:e3:3b:60:89:bf:4f:97:8f:7f:75:da:
         b3:f2:17:1e:4d:fb:a7:b2:51:b9:c6:00:84:dc:91:10:57:1b:
         34:76:6e:3f:d3:a5:a0:9b:72:7e:39:1e:a1:80:5d:f5:d0:19:
         29:b1:d7:79:0d:3d:e8:b3:ee:fa:e9:3f:fc:73:30:23:c8:5d:
         44:fe:ab:5a:8a:75:02:33:5a:4e:88:db:e6:85:fa:ac:a3:d1:
         64:4b:e1:14:fd:1b:3f:3b:d0:28:ce:25:85:f0:0c:42:f5:3a:
         3b:17:b4:43:f8:6f:ae:7f:0f:45:26:1c:15:7b:b6:70:cd:11:
         59:2f:d0:97:44:c7:77:f2:58:23:26:5a:f8:58:f8:fb:d8:4e:
         7c:0c:66:42:06:b6:29:8f:cc:56:ec:66:85:5f:81:bd:fc:b5:
         48:a7:f2:d1:f4:50:a6:b7:aa:4b:26:8b:ac:36:2b:51:3f:f6:
         14:14:25:a8:c7:a1:b9:fd:8c:39:26:d5:33:e7:e2:90:0f:84:
         a1:ec:fa:fc:4f:c8:d1:1a:51:32:ba:a1:d5:c6:70:80:c1:5f:
         02:3b:a7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:31:18 2025 by rpki-client