Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f2d71818-c79d-3099-bbef-15605bef4960.roa
File:                     f2d71818-c79d-3099-bbef-15605bef4960.roa (raw, json)
Hash identifier:          8r0FASE2D3GD2jGTcv3z9o/eyfefPFOUj+r8874Q+lI=
Subject key identifier:   B2:90:8F:42:5D:35:C0:28:9A:CC:B0:31:12:F9:82:3E:79:24:15:29
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584832EFF080F293CCF3CB1DA300
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f2d71818-c79d-3099-bbef-15605bef4960.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     397221
IP address blocks:        2001:502:100e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:ef:f0:80:f2:93:cc:f3:cb:1d:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=b3b5272e-19ef-4c3d-bdd2-f50eabbee884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ce:71:47:98:21:86:82:c6:0c:7b:82:fe:09:
                    f6:e5:bf:7d:49:aa:d3:6c:d3:97:7a:a0:cf:f6:89:
                    9f:70:f2:28:d6:eb:70:8d:ea:d7:39:06:6f:2c:36:
                    e2:ba:e5:a5:66:56:9d:4f:96:40:d2:54:44:8b:11:
                    30:55:23:a4:6c:df:91:9f:a9:6b:d5:65:62:5d:f0:
                    0a:19:79:9e:47:eb:4c:ea:f8:f4:16:33:4d:fd:c7:
                    f3:91:e6:8b:1d:1d:3a:e4:f2:8a:e0:36:e0:8d:9a:
                    61:0e:be:56:ae:2e:5f:d6:c3:14:3c:72:b7:27:25:
                    dd:2d:b7:c6:4f:8d:19:0b:e1:8d:e2:77:83:b9:c1:
                    71:34:00:24:77:fe:07:5f:cb:24:30:1c:8a:85:48:
                    43:c7:4a:72:bc:54:ac:c5:0a:4a:8a:15:54:ef:06:
                    13:55:cd:86:84:95:00:ac:e2:c2:90:88:48:dc:06:
                    15:d2:71:95:4d:67:37:b4:e2:a6:02:4b:5d:b5:0f:
                    df:54:53:3d:b8:c5:7e:93:3a:e4:28:a3:4e:e1:4e:
                    96:6f:b3:72:43:d0:3f:c6:12:52:1a:8f:07:57:a2:
                    77:c2:a8:67:b5:e4:35:91:8a:92:62:4b:17:8d:7a:
                    54:ec:c0:07:3d:13:cc:c6:13:c3:29:6f:89:65:68:
                    5b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:90:8F:42:5D:35:C0:28:9A:CC:B0:31:12:F9:82:3E:79:24:15:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f2d71818-c79d-3099-bbef-15605bef4960.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:100e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:63:dd:1c:40:23:3e:33:19:ca:21:bb:3c:79:0b:f2:f6:82:
         23:72:a3:45:13:6c:e8:50:64:af:53:d5:f1:95:49:ab:f6:5c:
         fb:eb:3f:fe:69:0f:0d:94:cc:0a:87:81:98:f5:de:60:67:6e:
         17:e3:1a:86:59:b8:3a:84:1b:bf:32:73:0c:56:68:14:14:72:
         0d:cf:bc:9a:d8:48:1f:be:e8:cd:92:15:6c:61:83:4f:74:3d:
         31:9b:27:52:7d:f9:c2:12:dc:00:2b:ba:38:f6:93:25:2f:1e:
         94:49:48:58:59:47:e4:f9:59:e6:06:85:04:07:27:84:2d:9d:
         c1:6c:41:1f:4e:2f:fa:a4:a8:e9:1c:44:d1:cb:91:c6:12:d0:
         ac:ab:81:e6:ee:75:e5:33:04:51:65:11:4b:80:3f:e3:17:83:
         d1:32:a4:55:c7:a9:f6:a6:ae:41:76:a7:2a:a1:3b:1a:67:41:
         d7:4f:e7:d9:06:5d:96:2c:6f:38:62:be:fb:5b:1a:22:96:86:
         a5:f7:64:9c:ed:45:ce:2b:9d:0b:27:63:8a:b6:fe:af:64:f2:
         c6:f0:05:16:eb:30:94:57:af:65:6d:59:77:4b:db:73:1f:90:
         67:5f:e7:ae:bf:b8:79:9e:5c:04:5b:4d:40:fc:11:bb:cd:85:
         0b:a1:8e:ef
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgy7/CA8pPM88sdowAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
YjNiNTI3MmUtMTllZi00YzNkLWJkZDItZjUwZWFiYmVlODg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo85xR5ghhoLGDHuC/gn25b99SarTbNOXeqDP
9omfcPIo1utwjerXOQZvLDbiuuWlZladT5ZA0lREixEwVSOkbN+Rn6lr1WViXfAK
GXmeR+tM6vj0FjNN/cfzkeaLHR065PKK4DbgjZphDr5Wri5f1sMUPHK3JyXdLbfG
T40ZC+GN4neDucFxNAAkd/4HX8skMByKhUhDx0pyvFSsxQpKihVU7wYTVc2GhJUA
rOLCkIhI3AYV0nGVTWc3tOKmAktdtQ/fVFM9uMV+kzrkKKNO4U6Wb7NyQ9A/xhJS
Go8HV6J3wqhnteQ1kYqSYksXjXpU7MAHPRPMxhPDKW+JZWhbZwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLKQj0JdNcAomsywMRL5gj55JBUpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjJkNzE4MTgtYzc5ZC0z
MDk5LWJiZWYtMTU2MDViZWY0OTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhAO
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH9j3RxAIz4zGcohuzx5C/L2giNyo0UTbOhQZK9T1fGVSav2XPvr
P/5pDw2UzAqHgZj13mBnbhfjGoZZuDqEG78ycwxWaBQUcg3PvJrYSB++6M2SFWxh
g090PTGbJ1J9+cIS3AArujj2kyUvHpRJSFhZR+T5WeYGhQQHJ4QtncFsQR9OL/qk
qOkcRNHLkcYS0KyrgebudeUzBFFlEUuAP+MXg9EypFXHqfamrkF2pyqhOxpnQddP
59kGXZYsbzhivvtbGiKWhqX3ZJztRc4rnQsnY4q2/q9k8sbwBRbrMJRXr2VtWXdL
23MfkGdf566/uHmeXARbTUD8EbvNhQuhju8=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:45:50 2025 by rpki-client