Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bb8da82c-647c-38de-ae79-badf24ce35fb.roa
File:                     bb8da82c-647c-38de-ae79-badf24ce35fb.roa (raw, json)
Hash identifier:          9zHiRd7kRDUEeG42iviCPXf1jXyBXEUeR+GZoaJG3EU=
Subject key identifier:   9E:A7:B0:E0:53:B4:8A:4E:7F:65:8B:CE:4E:FC:4E:A6:E3:07:48:AA
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849124704A47BB6F7BD407BBEC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bb8da82c-647c-38de-ae79-badf24ce35fb.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     397242
IP address blocks:        2001:502:100e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:47:04:a4:7b:b6:f7:bd:40:7b:be:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=e0875575-ddf2-4dff-85f2-5c4afb07ab4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b9:b6:10:c9:82:51:c1:d6:65:a4:82:eb:8a:
                    0f:81:a5:83:68:11:db:9c:3f:a9:e5:13:f7:12:64:
                    eb:20:74:be:2a:44:9e:22:0b:e9:84:c1:c1:72:50:
                    d1:8b:2d:aa:46:1d:1d:c6:7d:75:4c:53:ad:13:f4:
                    e6:fc:f7:4e:79:2f:6b:09:a1:11:9c:31:2c:84:1f:
                    a4:b1:03:63:8d:9e:bd:1a:27:ea:95:e4:39:c7:fc:
                    83:91:94:66:fd:36:85:ad:9a:ed:59:24:3b:58:bf:
                    20:89:36:30:93:94:66:25:d7:5e:60:1e:d8:d5:ad:
                    dc:25:fc:5a:81:70:d7:40:97:8c:d2:f1:5b:f5:87:
                    8a:e8:81:01:da:aa:25:1e:0c:8f:60:3e:52:64:53:
                    20:70:b6:56:aa:36:87:e2:4f:52:c1:a4:9a:b8:cb:
                    55:1d:4e:cb:12:fd:6e:38:1c:6d:05:d5:28:0f:d5:
                    81:9e:62:a5:d8:43:f8:b4:b8:7b:25:a2:58:5e:a8:
                    4b:08:5c:9f:aa:6f:ef:e2:1f:b9:88:a1:4a:44:18:
                    d8:1a:02:f5:1a:80:cc:9e:31:a8:9f:5a:b3:02:df:
                    e3:39:a8:9c:2a:b1:2e:9a:10:80:c1:7e:c7:10:75:
                    73:6b:6c:5e:94:6a:a9:36:da:54:2e:fc:93:dd:32:
                    20:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A7:B0:E0:53:B4:8A:4E:7F:65:8B:CE:4E:FC:4E:A6:E3:07:48:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bb8da82c-647c-38de-ae79-badf24ce35fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:100e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:79:4a:3a:5e:56:32:46:0b:10:07:ff:90:ad:90:e4:77:af:
         71:6c:f5:dc:4b:2c:79:08:14:24:71:71:5e:5c:56:60:6b:f2:
         ca:09:ca:12:e5:d2:8d:6f:91:70:44:94:b9:93:de:79:72:bd:
         5d:9c:7e:d4:00:cd:48:74:ed:28:3f:26:97:57:53:d5:e1:d3:
         bc:93:34:12:d8:dd:34:fd:a5:78:c5:12:7d:6e:90:da:d0:f1:
         cf:e6:c2:6a:31:0d:7f:3c:c3:fa:08:c6:be:52:9c:cf:6c:f6:
         7e:ba:b3:76:97:a8:82:cd:b2:4b:54:b2:14:fd:53:0a:3b:35:
         c5:7b:c5:5f:65:86:57:88:55:11:69:ec:2f:3e:49:34:2f:c5:
         21:1b:ed:e3:6a:65:9f:04:9e:d2:82:26:bf:3a:47:16:b9:24:
         5f:61:62:ac:98:5b:65:17:14:10:65:b5:f4:80:cd:ba:a6:25:
         e2:95:f0:2e:72:9a:4c:b4:3a:d7:54:d9:3e:de:ef:06:d9:d9:
         8a:33:1f:7b:13:ce:e4:f4:eb:54:57:bb:46:ca:1b:c4:ff:0c:
         93:c2:40:22:b6:66:d1:8c:19:b9:9f:df:57:9d:5b:c3:5b:e8:
         da:83:bc:34:71:d8:c2:a4:43:a8:39:4b:c4:bb:74:5d:d6:8e:
         7a:b6:29:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:59:29 2025 by rpki-client