Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fd193fed-d25f-36d6-a69a-d4d235c32c99.roa
File:                     fd193fed-d25f-36d6-a69a-d4d235c32c99.roa (raw, json)
Hash identifier:          YT1dcAgWdJI8b+7zHN2c1RsaE/iFY+jl6s6IHmOWHK4=
Subject key identifier:   DB:28:2B:A1:72:75:0B:96:86:49:46:85:B7:53:1F:D1:3E:5C:48:85
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849124705A34E625A3EAFD89800
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fd193fed-d25f-36d6-a69a-d4d235c32c99.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     397228
IP address blocks:        2001:502:2eda::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:47:05:a3:4e:62:5a:3e:af:d8:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=a797d8d6-e56c-4128-be2b-e0470671518c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2d:d4:5f:8a:43:8f:4e:84:1e:61:76:83:08:
                    b5:c7:92:45:00:1d:54:73:65:a3:4c:e6:9d:06:3c:
                    e2:61:85:5d:b9:9e:49:51:9d:f6:e9:b6:74:ef:bc:
                    24:12:08:50:13:ae:a8:14:85:2c:19:88:e4:7b:7b:
                    31:64:28:46:99:a3:cb:2c:80:17:71:7a:69:aa:88:
                    a0:cc:0d:f3:71:48:c6:6e:9b:4f:c9:85:c7:1b:99:
                    26:f8:87:4f:47:52:c5:0a:05:d2:ac:5f:bc:65:01:
                    2f:bb:82:59:2c:91:51:05:3d:e4:13:81:4e:b1:c5:
                    45:72:ff:8e:92:47:1a:cc:b4:f8:13:fc:8a:bb:57:
                    8a:c6:f2:97:96:e3:aa:56:c3:ab:be:f5:4e:79:dd:
                    d3:04:cc:4c:0f:d5:d3:b3:bb:2c:0f:51:bd:42:ae:
                    c3:62:95:ae:23:15:0d:dd:7f:d5:2a:5c:40:77:a1:
                    13:fa:fa:cf:b6:20:00:ec:32:24:ad:09:96:18:4d:
                    ba:7c:3c:4e:72:1c:7a:70:43:7e:c6:6e:bf:37:5a:
                    5e:f1:fb:09:88:22:34:4a:63:2f:d3:a4:f4:83:0b:
                    03:78:3d:83:6a:ba:b3:6b:3a:ee:09:11:17:4b:a5:
                    72:ba:c1:1d:8f:3d:28:3d:a0:e3:40:34:da:b2:dc:
                    cc:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:28:2B:A1:72:75:0B:96:86:49:46:85:B7:53:1F:D1:3E:5C:48:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fd193fed-d25f-36d6-a69a-d4d235c32c99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:2eda::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:82:76:7f:88:7e:8d:e6:a7:4b:9a:57:35:ae:68:e7:fe:39:
         52:8e:c5:3f:a1:73:5c:54:a8:7a:84:0d:07:33:7a:8a:92:13:
         05:98:69:83:02:42:36:3a:ac:ab:b7:20:3f:ff:10:e6:eb:e7:
         35:03:03:5b:43:80:db:b2:4a:d4:80:88:83:8c:b8:6d:d6:56:
         80:39:a4:d6:a7:e7:b9:78:2e:35:b3:3b:d1:7f:ae:e9:2f:1c:
         cd:9e:22:21:be:a0:dd:a1:d8:65:30:85:be:ee:13:52:4a:2e:
         2c:c6:da:73:8f:f1:6e:58:68:ae:04:a8:63:d4:dc:0d:2d:a0:
         c6:b1:89:35:88:a1:00:3d:09:93:47:ee:2f:9d:da:79:59:8f:
         0d:09:36:e4:fe:76:71:4a:8d:e8:4d:e3:91:69:34:93:47:05:
         1e:b8:0f:10:02:6d:db:87:12:94:2f:84:42:3a:54:31:27:7c:
         15:a0:ea:6a:50:36:6e:d6:0b:10:f7:1c:5e:30:7d:56:eb:0d:
         38:bf:8d:e6:b4:43:6d:13:a0:6e:25:f0:8e:e5:e3:88:5e:40:
         ec:7e:8b:2a:b4:d6:65:3b:0f:5e:f5:50:4f:5b:c7:ea:8e:ac:
         f6:7f:85:2f:91:e8:17:72:53:15:12:22:b6:86:c5:fa:68:e3:
         c2:84:06:95
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkSRwWjTmJaPq/YmAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
YTc5N2Q4ZDYtZTU2Yy00MTI4LWJlMmItZTA0NzA2NzE1MThjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAny3UX4pDj06EHmF2gwi1x5JFAB1Uc2WjTOad
BjziYYVduZ5JUZ326bZ077wkEghQE66oFIUsGYjke3sxZChGmaPLLIAXcXppqoig
zA3zcUjGbptPyYXHG5km+IdPR1LFCgXSrF+8ZQEvu4JZLJFRBT3kE4FOscVFcv+O
kkcazLT4E/yKu1eKxvKXluOqVsOrvvVOed3TBMxMD9XTs7ssD1G9Qq7DYpWuIxUN
3X/VKlxAd6ET+vrPtiAA7DIkrQmWGE26fDxOchx6cEN+xm6/N1pe8fsJiCI0SmMv
06T0gwsDeD2DarqzazruCREXS6VyusEdjz0oPaDjQDTastzMMQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNsoK6FydQuWhklGhbdTH9E+XEiFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZmQxOTNmZWQtZDI1Zi0z
NmQ2LWE2OWEtZDRkMjM1YzMyYzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAi7a
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGWCdn+Ifo3mp0uaVzWuaOf+OVKOxT+hc1xUqHqEDQczeoqSEwWY
aYMCQjY6rKu3ID//EObr5zUDA1tDgNuyStSAiIOMuG3WVoA5pNan57l4LjWzO9F/
rukvHM2eIiG+oN2h2GUwhb7uE1JKLizG2nOP8W5YaK4EqGPU3A0toMaxiTWIoQA9
CZNH7i+d2nlZjw0JNuT+dnFKjehN45FpNJNHBR64DxACbduHEpQvhEI6VDEnfBWg
6mpQNm7WCxD3HF4wfVbrDTi/jea0Q20ToG4l8I7l44heQOx+iyq01mU7D171UE9b
x+qOrPZ/hS+R6BdyUxUSIraGxfpo48KEBpU=
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:52:28 2025 by rpki-client