Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/33639536-56be-38a2-bae6-f7cc53e4fc64.roa
File:                     33639536-56be-38a2-bae6-f7cc53e4fc64.roa (raw, json)
Hash identifier:          iHv9M9ahkmMyYE3MFCXM/EP27zHcXLxDIduyHp2Q9II=
Subject key identifier:   BB:C8:75:EB:11:95:1C:C3:74:CD:F9:6B:35:E5:23:C3:D0:6F:F0:30
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F1801DF4A9BB6B570FB15D40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/33639536-56be-38a2-bae6-f7cc53e4fc64.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397231
IP address blocks:        2001:502:d399::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:1d:f4:a9:bb:6b:57:0f:b1:5d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=5d3851f5-0900-4d97-836c-d37516357b61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1e:90:a3:27:a6:70:91:6c:91:68:9d:9f:81:
                    59:f3:4b:df:50:36:d2:4e:52:70:ee:a3:7b:23:1c:
                    3f:b3:9c:b2:50:99:7b:1d:dc:fa:b5:a1:bf:31:5c:
                    63:61:41:64:f1:30:bb:22:70:96:39:70:c6:c6:bd:
                    ad:77:a0:5d:1a:0a:f0:5a:28:b7:01:58:4e:24:83:
                    fb:b3:87:e7:c5:da:8a:64:ca:95:f3:10:3c:18:e8:
                    14:c9:7e:03:c3:74:10:b5:2e:af:3f:f1:f6:ae:a7:
                    34:d1:0f:7d:79:df:cb:40:ad:a9:31:ab:9c:56:be:
                    9b:a9:33:e3:4c:17:a6:b0:2e:45:46:ec:0e:4f:cc:
                    03:bd:c1:01:bf:73:97:c6:fc:8f:87:d4:85:6d:5a:
                    6d:1e:c1:d0:c0:68:57:52:4b:d3:4b:c0:1b:40:54:
                    8b:5b:a2:7c:a1:21:e4:f7:0b:fd:8c:07:01:55:6b:
                    0b:56:83:3d:24:8c:8f:26:7c:3a:33:63:40:e4:87:
                    7b:6d:02:eb:fd:00:5d:0b:b2:f8:44:13:8f:8a:18:
                    83:e3:57:45:03:2f:be:d8:80:d6:87:f4:28:92:99:
                    65:e2:4b:90:49:ef:6b:96:3f:fa:61:f0:be:6a:4a:
                    f0:1c:97:91:2e:f0:11:91:8e:9a:d4:35:9e:df:af:
                    0a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C8:75:EB:11:95:1C:C3:74:CD:F9:6B:35:E5:23:C3:D0:6F:F0:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/33639536-56be-38a2-bae6-f7cc53e4fc64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:d399::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:08:19:50:61:1b:56:e8:b4:39:50:dd:a9:93:31:34:eb:17:
         9a:2d:a7:17:0c:bf:3f:ff:aa:b7:20:cf:a3:9c:da:ae:7f:87:
         a4:1d:3d:d8:d1:81:15:3e:39:f1:2f:49:4e:d1:62:48:67:14:
         4d:ec:92:7f:44:8c:91:9d:5b:8f:99:f7:72:3d:ad:dd:5a:08:
         d7:04:e3:97:30:8b:40:fa:db:c2:8c:52:98:85:f9:eb:64:e9:
         fc:d1:e6:f8:46:99:fc:80:13:22:f6:ad:d2:24:ee:15:97:b1:
         af:b8:cb:42:25:11:11:84:4f:bb:44:62:33:c9:32:de:a3:6b:
         3b:0e:04:81:c5:64:08:66:fb:4a:92:9c:6c:6b:dd:32:6e:48:
         a3:50:46:50:16:ac:30:a3:87:84:79:95:f9:92:cc:8f:70:bf:
         4d:a6:cd:29:cb:12:ac:1d:fd:ac:7d:a3:e8:6f:fc:88:c1:d6:
         d8:79:eb:17:f5:c6:01:53:d9:8e:5b:64:05:e0:ce:87:e2:f6:
         a7:f4:9a:49:92:21:4b:e1:ca:67:26:55:32:91:f5:41:74:f7:
         9a:13:5a:c3:eb:f3:ce:e6:51:8c:8f:c5:c8:cd:c1:e7:96:85:
         81:ff:7c:78:27:ce:df:3d:b2:75:6a:df:0c:c8:c7:f9:85:40:
         09:9c:b5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:24:18 2025 by rpki-client