Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/875e69ed-0664-3194-99f1-751cc2a53a8f.roa
File:                     875e69ed-0664-3194-99f1-751cc2a53a8f.roa (raw, json)
Hash identifier:          pJDjn/z8T4Yq355CJA8LP5p58v+QAbt3yn+JbIuXYsc=
Subject key identifier:   2C:B6:B8:A2:A2:60:AD:56:37:F0:38:7F:60:10:1B:8D:D4:CC:22:AD
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F18015C45A5CD576C0D96A00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/875e69ed-0664-3194-99f1-751cc2a53a8f.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397223
IP address blocks:        2001:502:100e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:15:c4:5a:5c:d5:76:c0:d9:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=12365390-6f2e-4469-9b01-b1123b7f2f7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fc:0e:92:48:83:03:4b:7c:54:53:4f:66:c5:
                    04:11:3e:04:90:dd:4f:8e:2f:14:1b:05:e9:db:86:
                    91:04:fd:5c:00:8f:81:75:88:e0:f4:68:77:91:6e:
                    fa:b2:34:d0:61:d5:65:d7:a8:09:6c:b2:1a:de:f8:
                    0a:86:8d:08:9d:31:e1:a5:05:ca:29:1d:f8:51:e8:
                    3a:26:77:c6:40:43:76:13:48:57:74:74:43:93:fe:
                    4a:8d:61:6c:89:5a:40:db:fd:96:7c:88:5d:1f:6c:
                    38:70:7b:e8:c1:c4:84:f3:c6:bd:a0:a6:ed:71:62:
                    47:9c:20:58:fe:91:a7:98:33:04:52:f7:d9:8c:05:
                    2b:d7:4e:be:29:ec:5e:7a:2f:48:05:ee:92:03:ae:
                    49:db:64:a7:7f:ec:9c:0b:62:a2:d7:bc:d5:82:1d:
                    67:aa:da:d1:d0:11:03:3f:d0:8d:0f:37:21:15:c6:
                    6e:4c:71:ef:01:de:38:87:88:a7:3f:29:4a:61:41:
                    4f:b3:91:6f:44:b9:5a:c1:dc:c7:1f:5b:f0:6d:d8:
                    1b:4f:d6:01:75:ab:a2:c0:ff:0a:9c:14:97:8a:ea:
                    04:a4:4a:77:e2:11:34:a7:61:e3:83:b6:90:2a:e4:
                    10:df:2d:04:e1:55:a3:ae:99:db:44:f7:cc:cb:c1:
                    27:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B6:B8:A2:A2:60:AD:56:37:F0:38:7F:60:10:1B:8D:D4:CC:22:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/875e69ed-0664-3194-99f1-751cc2a53a8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:100e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:cd:81:43:5e:f5:fd:b6:05:48:d0:a4:8b:b9:f6:fa:f2:b4:
         c6:e1:a7:20:cc:b7:a9:fe:e4:38:bd:86:7e:33:c7:65:e1:e6:
         20:44:6f:33:ed:ba:dc:49:5a:7f:50:10:92:1c:67:07:d1:fc:
         07:a8:89:65:fc:0f:d9:f8:50:d2:a0:e4:7d:2c:39:d3:0d:f2:
         90:d4:16:c1:d4:b0:d4:e6:ec:60:20:51:05:2b:90:f1:f6:57:
         bd:03:09:8f:29:7b:06:24:ee:df:2b:17:50:47:01:0f:87:1e:
         79:60:b6:3c:90:b3:1d:a3:40:51:e8:4c:2f:18:bf:3e:e8:d4:
         f8:ec:06:67:21:6f:f1:50:4d:95:2f:07:17:73:0a:8e:cf:f7:
         f1:cc:e0:28:f9:60:1b:bb:b0:18:d0:df:0b:4a:d3:0e:4b:c3:
         97:ab:34:17:39:77:40:63:67:56:46:bb:d2:4d:2e:92:50:89:
         c8:8c:ec:0c:6e:65:cd:0f:c2:5c:da:02:2b:85:54:27:ff:da:
         58:4a:5d:da:54:92:9e:94:85:ef:28:66:f2:55:62:0f:77:79:
         71:86:6f:2a:3d:49:1d:c2:cc:f5:e8:b1:25:21:4c:49:df:47:
         f3:ca:69:95:f0:48:c9:ba:c2:79:f5:a9:df:b1:86:ce:8c:45:
         b1:8d:a1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:43:50 2025 by rpki-client