Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6aa721fe-9d06-3a42-b70a-b93295423391.roa
File:                     6aa721fe-9d06-3a42-b70a-b93295423391.roa (raw, json)
Hash identifier:          YbUpm1gjz7lfZWpGUszjRUY4RhUwgQk5mQgmMs17lQc=
Subject key identifier:   81:FF:38:2E:90:E6:C2:AC:D5:F7:E7:52:7E:C6:2B:F3:5D:F5:C8:40
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584832EFEA9F7DD04A578D502420
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6aa721fe-9d06-3a42-b70a-b93295423391.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     397236
IP address blocks:        2610:a1:1000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:ef:ea:9f:7d:d0:4a:57:8d:50:24:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=f4c350d2-e0e3-49a8-97f9-d8761ceac4e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a1:67:2c:ed:02:01:0d:42:76:88:55:d0:00:
                    16:8f:39:5a:ec:31:7c:38:2d:fd:2b:f0:e9:7b:61:
                    a9:45:8d:c1:05:5f:ba:d6:aa:75:88:8f:47:c8:08:
                    17:57:9d:48:51:28:1a:ee:e9:96:11:12:cd:da:59:
                    86:1e:9c:87:3d:f9:aa:db:8b:83:ba:cd:c5:75:51:
                    db:2c:6a:ff:70:58:e2:9b:5c:e1:4c:ca:4b:4a:ab:
                    9a:b2:d6:40:52:8a:77:ab:25:6d:62:e6:ca:03:bf:
                    21:4c:f9:68:f1:bd:ed:d8:22:77:32:36:b2:ed:59:
                    b4:23:dd:f4:b1:64:e0:ef:6d:f8:34:4a:0e:95:11:
                    b7:b4:bd:b3:35:5d:e3:9c:eb:c6:23:58:9f:f5:1d:
                    f1:15:18:86:6d:74:ec:5b:ce:71:c3:e7:8a:8b:f5:
                    68:a3:18:eb:87:70:04:da:64:44:56:00:a4:0a:56:
                    c1:18:41:6d:9f:a3:67:85:bf:c6:a3:b3:ea:d0:b0:
                    df:cf:92:b8:f4:aa:28:3c:bf:8b:33:1a:eb:f7:dd:
                    62:bd:a7:d4:3f:39:71:ff:2b:6e:e0:d2:a1:68:e8:
                    0b:64:8d:89:ec:5e:ee:ac:22:54:4b:51:25:27:aa:
                    b1:1b:b8:77:df:43:19:77:c9:3e:a9:4a:fc:b4:a3:
                    31:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:FF:38:2E:90:E6:C2:AC:D5:F7:E7:52:7E:C6:2B:F3:5D:F5:C8:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6aa721fe-9d06-3a42-b70a-b93295423391.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:53:e9:31:21:b0:ce:ad:63:29:f4:4c:ba:da:f5:68:63:df:
         b1:45:68:5c:7f:f2:b5:61:da:74:3e:9e:3b:c3:2d:8a:0c:4f:
         66:4c:50:fa:8a:6b:30:55:ec:ef:2b:f7:c0:86:7b:4d:df:9d:
         11:9e:de:94:77:25:7f:95:4a:f9:ae:a1:73:f3:c3:06:56:b4:
         6f:64:6d:48:81:95:32:0c:70:6c:a5:ab:ff:a0:e2:8d:eb:4e:
         aa:37:f3:ac:66:1e:d1:cf:f5:23:fd:df:f8:3a:9d:69:eb:67:
         4f:5a:6f:39:ce:3a:87:27:ff:bc:b7:8b:57:53:8f:1d:ea:fa:
         c8:65:5a:3b:56:06:70:79:ae:d7:7b:4b:f4:d6:6b:5c:61:83:
         a2:f5:cc:04:ca:8e:0c:37:91:6c:9f:d0:fa:81:3c:ff:19:35:
         69:93:32:b3:7a:33:02:d7:8d:58:0a:44:fc:0e:27:71:ad:97:
         d4:54:5a:ed:8e:d2:1d:a7:c0:b3:e1:18:45:98:54:31:2f:12:
         e5:d9:03:ed:e1:e9:25:6c:f3:ff:2c:d1:36:ec:4a:12:22:0d:
         7a:12:71:b2:81:29:72:7c:31:3f:24:e1:e8:73:96:c3:a1:b4:
         96:9f:5b:aa:50:a8:db:85:53:29:c9:70:3a:a4:0b:ce:6a:00:
         d8:f4:b7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:56:15 2025 by rpki-client