Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d8c9f996-6415-3338-a801-9db5474a6f9f.roa
File:                     d8c9f996-6415-3338-a801-9db5474a6f9f.roa (raw, json)
Hash identifier:          ZhjxiPd2Izk14qbbIFPNdajTIliMKSYMN1T/7Qj3fkk=
Subject key identifier:   11:56:59:DA:E2:4E:08:F0:2E:AB:57:9C:79:43:78:1F:C8:F7:49:73
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584912470CDE067433750E5F8E00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d8c9f996-6415-3338-a801-9db5474a6f9f.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     397222
IP address blocks:        2001:502:f3ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:47:0c:de:06:74:33:75:0e:5f:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=eb4fc3df-7bc3-4e0a-96ad-48d2c7c398ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:54:d9:81:72:3a:c3:6a:84:cd:fa:67:85:f2:
                    a2:d7:0c:9a:fb:b6:8a:82:16:ff:de:5f:d6:ff:da:
                    95:54:b5:90:c2:6b:28:8e:9f:16:13:45:35:e3:8f:
                    f9:60:03:e5:cd:20:7c:a1:50:3e:ac:1e:0c:1a:1f:
                    da:d9:eb:68:7e:c8:ba:82:91:e4:03:0d:c5:4c:30:
                    ba:5a:f9:62:89:c5:47:87:31:78:6c:d8:25:1e:8e:
                    37:43:62:fe:3d:da:f6:62:ee:8d:94:94:c5:61:2a:
                    da:a4:c3:c0:7c:70:46:d8:65:8d:8e:76:1b:82:a7:
                    46:2f:cd:49:e7:9d:93:4f:7f:09:63:71:bb:c7:3f:
                    31:26:ef:a4:6f:e0:22:9a:cb:c9:4f:44:24:e9:f7:
                    6e:4e:0f:a8:fc:b5:80:85:11:7f:9c:98:e3:67:f8:
                    14:b4:7e:64:c3:02:dd:31:4d:40:f5:35:c9:fa:e0:
                    5b:92:63:5b:30:dc:06:2d:21:10:f8:48:c7:be:f1:
                    7c:61:85:6f:b4:87:55:40:31:e1:34:19:05:69:96:
                    cd:6f:09:fe:b6:5e:3e:49:c0:2e:0c:ea:4c:b1:e7:
                    ee:d2:44:54:76:d3:d7:c3:2e:5b:3a:4d:87:50:98:
                    19:28:f1:81:dc:48:7a:cb:50:ea:f0:38:31:07:26:
                    aa:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:56:59:DA:E2:4E:08:F0:2E:AB:57:9C:79:43:78:1F:C8:F7:49:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d8c9f996-6415-3338-a801-9db5474a6f9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:f3ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:b6:df:e1:82:eb:4a:e8:b0:52:ba:b6:2e:7e:c1:61:0e:38:
         c8:75:55:3b:46:50:d1:7e:18:80:c5:95:07:9e:40:ba:f4:59:
         4d:27:71:78:45:1a:e6:d3:c3:a1:8d:13:f0:3e:8c:61:ad:28:
         5d:c4:b2:70:91:0f:7c:62:21:b9:a6:2d:9a:f6:f4:c5:2e:46:
         e6:87:91:a7:a7:00:98:ae:98:13:7c:04:6c:4d:99:e7:51:47:
         e6:c6:62:cf:58:27:fa:ca:ca:3e:06:22:f5:5d:10:66:ce:13:
         bb:73:37:b9:d9:56:d1:64:0d:8e:d3:06:c9:07:b2:fc:da:a7:
         a5:e8:2c:f4:4c:44:ce:f6:da:6c:f2:03:ee:8d:a2:b8:69:34:
         80:27:3e:65:dc:4a:ce:db:28:93:8b:0c:7a:1e:80:4d:23:37:
         53:38:50:bb:a6:52:64:8b:6c:36:a8:45:e1:0e:bb:40:94:81:
         61:4e:f9:6f:3e:8c:ed:75:61:81:5c:77:e8:5f:f9:d9:f1:80:
         2c:30:b8:ab:2a:30:ff:55:68:ce:d2:94:a3:7d:38:86:5f:10:
         81:aa:c3:65:b6:f1:a0:88:4c:85:26:d5:11:fe:a7:65:ae:ce:
         66:d2:19:d8:be:10:d8:e8:54:7a:72:d7:b8:d9:e6:ec:ce:54:
         cb:d3:f1:68
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkSRwzeBnQzdQ5fjgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
ZWI0ZmMzZGYtN2JjMy00ZTBhLTk2YWQtNDhkMmM3YzM5OGVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlTZgXI6w2qEzfpnhfKi1wya+7aKghb/3l/W
/9qVVLWQwmsojp8WE0U144/5YAPlzSB8oVA+rB4MGh/a2etofsi6gpHkAw3FTDC6
WvliicVHhzF4bNglHo43Q2L+Pdr2Yu6NlJTFYSrapMPAfHBG2GWNjnYbgqdGL81J
552TT38JY3G7xz8xJu+kb+AimsvJT0Qk6fduTg+o/LWAhRF/nJjjZ/gUtH5kwwLd
MU1A9TXJ+uBbkmNbMNwGLSEQ+EjHvvF8YYVvtIdVQDHhNBkFaZbNbwn+tl4+ScAu
DOpMsefu0kRUdtPXwy5bOk2HUJgZKPGB3Eh6y1Dq8DgxByaqDQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBFWWdriTgjwLqtXnHlDeB/I90lzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZDhjOWY5OTYtNjQxNS0z
MzM4LWE4MDEtOWRiNTQ3NGE2ZjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAvP/
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAu23+GC60rosFK6ti5+wWEOOMh1VTtGUNF+GIDFlQeeQLr0WU0n
cXhFGubTw6GNE/A+jGGtKF3EsnCRD3xiIbmmLZr29MUuRuaHkaenAJiumBN8BGxN
medRR+bGYs9YJ/rKyj4GIvVdEGbOE7tzN7nZVtFkDY7TBskHsvzap6XoLPRMRM72
2mzyA+6NorhpNIAnPmXcSs7bKJOLDHoegE0jN1M4ULumUmSLbDaoReEOu0CUgWFO
+W8+jO11YYFcd+hf+dnxgCwwuKsqMP9VaM7SlKN9OIZfEIGqw2W28aCITIUm1RH+
p2WuzmbSGdi+ENjoVHpy17jZ5uzOVMvT8Wg=
-----END CERTIFICATE-----
Generated at Fri Mar 14 07:37:43 2025 by rpki-client