Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/593f93b4-eea3-4f8b-a272-fca95f2691d2/b449aea6-9e44-3a16-81d3-a102dccb47d9.roa
File:                     b449aea6-9e44-3a16-81d3-a102dccb47d9.roa (raw, json)
Hash identifier:          Xvd2e9Au50Wv2AcRSUyCCiijrywoaRWD98IGn0x+Knk=
Subject key identifier:   5F:04:B7:86:EA:F8:5C:BE:71:E4:57:60:68:A0:8A:A3:B0:C6:C7:E1
Certificate issuer:       /CN=593f93b4-eea3-4f8b-a272-fca95f2691d2
Certificate serial:       010D0C9F43285849C20A1FC41178F102BDF22B80
Authority key identifier: 97:0B:8C:B5:7E:12:DB:A2:F1:49:9A:0D:13:91:5C:1B:B6:3B:C0:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/593f93b4-eea3-4f8b-a272-fca95f2691d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/593f93b4-eea3-4f8b-a272-fca95f2691d2/b449aea6-9e44-3a16-81d3-a102dccb47d9.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     293
IP address blocks:        2001:400::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/593f93b4-eea3-4f8b-a272-fca95f2691d2/593f93b4-eea3-4f8b-a272-fca95f2691d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/593f93b4-eea3-4f8b-a272-fca95f2691d2/593f93b4-eea3-4f8b-a272-fca95f2691d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/593f93b4-eea3-4f8b-a272-fca95f2691d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:1f:c4:11:78:f1:02:bd:f2:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=593f93b4-eea3-4f8b-a272-fca95f2691d2
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=4876f3e1-d190-42a4-a2f3-1d5d16c48963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6b:57:1b:c9:3e:4d:53:33:99:04:12:09:59:
                    d5:d9:5f:52:96:bb:38:e3:b9:89:de:5e:56:8d:9f:
                    95:d8:da:c4:de:72:de:19:3e:eb:34:ca:7e:eb:43:
                    61:57:c6:d5:82:a0:41:dd:14:2e:1e:4d:32:23:65:
                    38:68:a5:0a:a4:94:99:0c:71:61:ea:ae:65:10:a3:
                    ed:b0:4b:00:9f:02:2f:e4:8c:b7:41:fa:ba:31:fe:
                    14:a1:ed:30:a7:6c:34:31:5a:9b:0e:7e:f0:e9:a0:
                    68:fe:5c:31:66:3f:28:51:7f:67:c1:1f:25:a6:87:
                    2f:6f:a9:1a:9f:55:cd:89:09:aa:7f:d0:e5:7b:c9:
                    f5:f5:74:12:f0:ff:bb:9d:6e:f7:66:12:4e:ad:df:
                    e8:02:9d:78:d6:d2:7b:b9:fb:06:13:bc:69:fa:59:
                    2b:8f:0e:00:b6:0a:5c:7e:d4:43:6d:b1:b9:86:34:
                    81:83:fb:69:ba:bb:62:e5:44:b0:92:11:b5:bd:3e:
                    b0:76:d0:48:c1:00:6f:6e:bf:06:90:cf:13:d1:94:
                    01:cb:b2:cd:05:7d:c1:fb:30:f5:bc:71:2f:64:ee:
                    26:15:33:fa:20:13:f6:9e:5e:ea:36:34:08:b8:26:
                    c5:4b:cb:82:63:1b:3c:88:78:53:95:32:93:78:3c:
                    02:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:04:B7:86:EA:F8:5C:BE:71:E4:57:60:68:A0:8A:A3:B0:C6:C7:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/593f93b4-eea3-4f8b-a272-fca95f2691d2/b449aea6-9e44-3a16-81d3-a102dccb47d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/593f93b4-eea3-4f8b-a272-fca95f2691d2/593f93b4-eea3-4f8b-a272-fca95f2691d2.crl

            X509v3 Authority Key Identifier:
                keyid:97:0B:8C:B5:7E:12:DB:A2:F1:49:9A:0D:13:91:5C:1B:B6:3B:C0:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/593f93b4-eea3-4f8b-a272-fca95f2691d2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:400::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:e2:1e:b7:97:3e:1e:21:dd:dd:63:a2:d0:0d:1f:81:88:e8:
         ea:d9:fc:6f:a1:bc:33:c2:37:56:2e:08:43:c6:cb:61:67:cb:
         f4:fe:2c:4e:53:e2:4d:84:35:ff:d6:4f:03:4e:50:fa:10:f9:
         ae:dd:05:ff:36:28:aa:3e:d9:e3:cb:36:cf:0e:a4:21:13:89:
         35:c1:e9:70:45:25:61:bb:94:0f:37:9f:7b:66:da:cf:fc:63:
         cd:c4:a2:0a:92:21:fb:86:c0:e2:c6:50:c0:5a:46:ae:91:ee:
         9d:68:3f:45:f6:b0:17:57:c3:11:15:89:1d:9a:2a:41:76:9d:
         53:d8:47:f0:f2:0d:23:cc:65:7e:50:5b:0a:5c:fa:df:f0:3b:
         12:06:5f:58:89:e0:6b:37:d5:3d:11:0d:42:a9:d8:57:61:94:
         f9:d6:d6:0e:f8:3e:c5:1f:42:0a:5a:0c:87:9b:55:67:30:0a:
         d0:8a:41:7f:98:0c:da:3a:17:bd:43:a5:07:92:39:88:ad:75:
         35:a1:68:a6:13:91:9e:82:7e:e5:12:06:79:48:6f:62:54:c2:
         02:7d:49:cd:6f:16:4c:7a:12:b5:18:67:dd:45:bd:69:af:16:
         cf:20:b4:14:4f:11:54:e6:4f:2c:86:64:54:43:9e:05:d6:5a:
         13:48:a0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:47:55 2025 by rpki-client