Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d111a5e9-1922-33ea-a02f-11683a2965fe.roa
File:                     d111a5e9-1922-33ea-a02f-11683a2965fe.roa (raw, json)
Hash identifier:          9GKrzLL9Hq1XSjXC+9g3ZHXHc5GRUEe4QgpBvp/NH3Q=
Subject key identifier:   B2:0A:76:CB:54:99:0C:95:A9:63:57:9E:0B:67:A6:D7:BD:0E:2E:7C
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A050A85509CE0B01039D52458
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d111a5e9-1922-33ea-a02f-11683a2965fe.roa
Signing time:             Fri 30 May 2025 01:00:48 +0000
ROA not before:           Fri 30 May 2025 01:00:48 +0000
ROA not after:            Thu 28 Aug 2025 01:00:48 +0000
asID:                     397239
IP address blocks:        2610:a1:3300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:05:0a:85:50:9c:e0:b0:10:39:d5:24:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 30 01:00:48 2025 GMT
            Not After : Aug 28 01:00:48 2025 GMT
        Subject: CN=485b1469-a43f-404f-900e-d22746ec8d1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:33:ca:70:c7:63:44:8f:ed:45:26:88:45:33:
                    a3:ee:e5:2c:c0:96:ac:3e:70:db:6e:da:38:45:45:
                    7c:f0:b0:c5:09:14:f5:28:86:cf:b6:aa:9c:32:cf:
                    ee:e8:42:a7:13:e4:87:7f:f8:4f:26:07:48:7e:0c:
                    20:a6:71:3e:02:46:8d:6d:59:47:fe:96:e0:e5:09:
                    dd:39:de:89:11:15:46:07:cd:2b:fb:b5:a9:1f:f5:
                    96:a7:67:ee:ae:df:2d:8f:08:14:b2:a6:70:8b:c9:
                    d1:72:4c:4c:ca:19:df:13:35:31:c9:dc:fd:80:5d:
                    45:91:6b:72:00:09:d7:2f:21:8f:ad:bd:6e:f3:65:
                    c2:0e:95:dc:19:ec:e4:33:9d:11:59:21:f3:e5:d1:
                    96:33:4e:a4:7d:ad:c3:b0:94:24:0f:6a:36:c8:3d:
                    6f:f1:3c:2e:77:33:a8:63:38:1c:41:aa:b6:17:f5:
                    c2:6c:66:c2:a3:9b:f8:74:36:81:08:ee:40:51:9c:
                    a3:c9:5e:f2:6e:d4:23:3d:44:63:53:7e:68:bc:f3:
                    5a:ef:6e:2c:6d:0d:db:25:22:5f:0e:84:12:8b:6c:
                    b6:25:ed:4a:91:87:a5:1f:60:58:0f:e3:9c:85:37:
                    0d:96:4b:27:49:bc:96:b5:cc:2d:53:85:b7:9d:3f:
                    30:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:0A:76:CB:54:99:0C:95:A9:63:57:9E:0B:67:A6:D7:BD:0E:2E:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d111a5e9-1922-33ea-a02f-11683a2965fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:12:32:9f:d0:2c:a7:ef:bb:c7:d7:e6:d7:00:3f:d6:65:45:
         15:cf:d7:9a:9f:23:8d:e1:93:d0:17:71:52:10:be:61:33:0e:
         4f:8f:78:7e:62:c1:57:9a:30:ad:c7:ea:7c:5b:cc:1a:00:f7:
         e9:12:6e:25:47:3b:8d:d5:86:28:16:b1:3f:c2:fa:05:c7:c2:
         aa:bc:95:dd:db:09:e4:fe:11:db:d5:99:98:4e:77:79:c2:34:
         d4:da:d6:d5:e2:ff:00:6e:6e:4b:4b:49:01:a3:34:ed:e6:e8:
         64:45:fb:dd:e2:b9:dd:84:3e:37:3b:70:ec:ab:28:77:e6:a0:
         1c:ef:2a:ee:7d:36:fa:71:cb:cc:97:c3:60:75:e6:b1:5a:de:
         88:40:dd:89:28:48:c6:da:43:94:5c:23:9e:e2:cd:f2:5f:fd:
         6d:04:18:be:e5:5d:49:c4:10:fa:41:51:7b:4c:24:53:8a:75:
         fc:4a:e5:a7:0f:86:3e:cf:85:10:53:88:83:79:42:0b:de:93:
         a5:34:08:be:9b:8d:74:a6:01:49:61:bf:31:08:84:5a:26:4f:
         9a:6f:4c:a6:9a:ce:37:fd:59:b1:fa:db:a5:d5:3b:56:71:0b:
         86:5a:c2:28:6c:c0:6f:55:b1:93:55:b1:84:27:08:c6:21:78:
         1a:d4:69:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:28:08 2025 by rpki-client