Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fe08edf4-afd8-37d3-bcd6-869a11bf2819.roa
File:                     fe08edf4-afd8-37d3-bcd6-869a11bf2819.roa (raw, json)
Hash identifier:          oL49/nwO7gWoiNzWnRRK9zQfxH+lDG2tviKeRecXgo4=
Subject key identifier:   04:E1:C8:AD:81:9B:85:48:AF:45:04:6C:57:68:A5:8D:F8:23:A2:CF
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F180139EB149A48AD36E7A00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fe08edf4-afd8-37d3-bcd6-869a11bf2819.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397219
IP address blocks:        2001:500:3682::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:13:9e:b1:49:a4:8a:d3:6e:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=e1d43169-aca2-413b-912b-e6f978416969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:42:68:ae:2b:3e:3d:10:cb:0b:02:aa:58:9e:
                    53:85:6d:88:c4:64:69:c6:b8:dc:b3:07:eb:c5:cd:
                    9f:46:5e:09:ee:c5:b4:93:58:0d:8b:99:17:61:2c:
                    82:f3:e8:45:c6:b4:be:01:94:0a:05:1b:af:e9:82:
                    e9:2d:17:98:50:4f:91:a4:cd:1b:7e:d9:d9:ca:9c:
                    ac:ce:5e:79:eb:59:64:38:f5:0a:45:99:0b:2f:cf:
                    b9:da:a0:04:c0:43:5c:06:91:ad:73:47:c1:f4:9c:
                    a6:8d:fb:28:c4:55:84:6b:78:c8:36:11:34:b2:0c:
                    a8:d4:85:42:9d:9f:e4:20:5b:60:d4:7c:95:1a:d1:
                    bf:a4:56:e6:05:c7:66:b8:b2:ca:21:bd:6b:2f:2b:
                    d9:b2:78:1c:5c:a9:eb:79:62:61:df:66:07:22:68:
                    9a:15:b2:4b:c3:82:8a:2d:1b:c9:d8:1b:3a:a7:42:
                    1a:61:99:e8:a6:43:a7:79:74:4c:e9:7e:fa:dd:fe:
                    c6:b3:ed:fe:dd:d5:9f:ab:69:f9:de:4e:4c:76:57:
                    93:06:1e:e4:d1:e2:5b:dd:8b:19:4c:4c:b5:d2:76:
                    12:cd:9e:ed:1c:09:d9:67:cd:cd:03:4d:c3:2f:be:
                    d0:54:64:0c:18:f4:6c:9f:b3:de:8e:44:47:72:49:
                    3a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E1:C8:AD:81:9B:85:48:AF:45:04:6C:57:68:A5:8D:F8:23:A2:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fe08edf4-afd8-37d3-bcd6-869a11bf2819.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:3682::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:88:8a:e0:e2:da:d1:f5:04:21:0a:60:3b:14:81:8e:04:01:
         b9:ae:45:d3:dc:27:b8:5b:e8:c6:69:42:bf:cb:08:e6:2b:a9:
         f0:11:3a:0c:d5:69:ca:76:6d:da:02:13:fd:57:ab:ed:32:7a:
         eb:9c:b9:ff:6b:87:73:ee:47:5b:81:37:f8:01:d6:6f:9a:28:
         d2:89:5f:91:5a:8b:b2:bb:36:51:03:f6:64:01:9f:0d:e6:f4:
         66:ce:5e:fe:7f:40:a2:16:23:7b:67:a8:02:80:41:69:a4:3b:
         1d:b4:8e:48:fd:8b:dc:df:a9:65:3a:dc:7e:72:46:ee:81:82:
         0b:e0:97:1f:8f:0d:88:dd:45:fc:70:27:05:ab:bc:b3:6c:52:
         0d:a4:71:89:8e:7d:19:6c:b6:3f:7b:e0:aa:f1:b5:1e:34:9a:
         65:55:8e:a3:0e:e1:f6:1b:22:9f:d3:b1:38:23:66:70:0e:0a:
         af:54:07:b5:04:f2:33:b3:4e:65:5d:f7:f0:a6:6e:12:be:c7:
         6a:26:aa:32:2b:e6:1a:23:a2:84:7c:be:92:76:52:af:1f:d2:
         9e:50:4a:4e:a9:f6:59:b7:d9:74:be:cc:1e:b6:67:49:53:0d:
         7e:2d:b9:f7:ab:e2:99:bf:48:cc:a2:64:41:e6:d0:96:d4:30:
         7e:08:31:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:14:50 2025 by rpki-client