Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d6e5c6e9-c617-32ef-9ff3-d0b2cb2c69c2.roa
File:                     d6e5c6e9-c617-32ef-9ff3-d0b2cb2c69c2.roa (raw, json)
Hash identifier:          zy1PwAfTXR33v/4A8FO/XXS4BgUBIM8lvSj1SceMOTU=
Subject key identifier:   FC:01:90:09:85:5A:F8:53:F5:94:22:66:AE:98:BD:E9:1F:ED:12:3B
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584912470408EDF553A2A2641100
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d6e5c6e9-c617-32ef-9ff3-d0b2cb2c69c2.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     397231
IP address blocks:        2001:502:100e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:47:04:08:ed:f5:53:a2:a2:64:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=0a5aedd0-ac60-4a79-af63-7b527de8d370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:90:dd:1a:e6:4b:ff:43:64:1b:d5:7c:14:4b:
                    1b:9a:d5:32:7d:3c:81:c0:0b:fb:3c:d5:47:9d:7b:
                    e1:d5:bd:96:86:91:e6:10:63:57:a2:74:09:a7:68:
                    35:be:3a:2c:dc:9e:c1:62:ff:02:4c:e7:f4:93:88:
                    28:6e:ce:62:5d:12:ca:68:6a:bd:d0:e5:1f:13:ae:
                    4c:8e:3d:96:34:5c:fe:32:fd:16:70:11:ec:84:1d:
                    ab:98:84:55:e9:a8:5b:5c:43:58:96:16:49:b2:fc:
                    75:c7:37:c1:cf:c2:1f:19:c3:41:c6:e4:63:ea:90:
                    c9:87:9b:af:3e:b2:1e:38:a5:ad:c4:70:67:ef:31:
                    62:f4:02:7f:b1:53:1f:8a:78:cb:3e:f3:f8:0f:ba:
                    75:35:08:40:3a:7f:d2:1f:5e:3a:0c:80:3c:be:90:
                    7a:53:5b:51:77:91:f0:a8:d0:3f:ad:ec:fc:b8:ce:
                    6a:31:2c:b6:94:a3:82:9d:07:68:29:36:20:3c:43:
                    fa:cc:35:f2:33:94:a1:78:92:a3:6b:24:4a:a0:66:
                    8e:06:b5:b2:a5:7a:73:12:85:f0:55:ce:f2:7e:df:
                    00:5a:2a:9d:78:4a:9f:32:8c:88:22:f6:fe:5d:1e:
                    73:2e:53:cc:cb:b6:79:ad:f1:0e:98:66:90:1a:3c:
                    33:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:01:90:09:85:5A:F8:53:F5:94:22:66:AE:98:BD:E9:1F:ED:12:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d6e5c6e9-c617-32ef-9ff3-d0b2cb2c69c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:100e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:cd:32:a4:e6:51:b9:ba:8b:45:ac:ba:83:e8:ec:26:55:1e:
         07:0f:dc:7f:80:26:50:b2:0f:e9:1e:ad:fc:4b:f3:87:1a:82:
         b6:54:3c:2b:c6:1c:7d:ed:00:7b:63:2e:2f:b6:3e:13:d5:29:
         70:77:a2:7b:cb:8b:c6:d8:75:45:48:b6:4c:72:c2:4e:59:28:
         68:a9:85:46:84:ad:a0:80:08:85:70:50:76:ab:b1:b6:b5:0f:
         6c:10:19:3d:cd:cf:5d:64:fb:b6:81:90:f5:3a:a4:b2:36:c5:
         f6:52:00:2c:d3:17:78:bf:92:47:2f:86:c5:20:68:ef:a5:07:
         77:8e:ff:a9:96:2e:1f:1e:8a:9b:44:ba:e8:25:f1:f5:0f:e8:
         2e:fd:a4:78:78:41:42:3b:74:53:48:11:df:7c:b6:1c:94:1a:
         c4:6e:10:3a:95:a6:ac:80:c2:17:19:74:d6:8e:b5:15:21:53:
         b7:79:5c:c5:de:21:5c:e6:e1:6f:e3:be:28:22:c1:f0:37:7e:
         83:d3:0e:bc:4f:9e:43:87:a7:03:52:ff:09:88:b3:1e:ae:4a:
         65:7c:85:e5:d7:08:82:f5:2d:f4:01:49:ec:db:2a:1c:70:0e:
         9d:b8:6a:ce:d7:79:23:c9:68:1d:71:a7:5a:58:8a:f3:fa:55:
         17:07:9f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:34:36 2025 by rpki-client