Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0e321529-67b0-3b6c-80fb-23ea199d219e.roa
File:                     0e321529-67b0-3b6c-80fb-23ea199d219e.roa (raw, json)
Hash identifier:          MpNl77gw7CK8+G1AEkR8ZeOi6Bw4d1n5NV9OJ55Wgqw=
Subject key identifier:   07:22:73:C6:D3:CB:DB:93:7C:2B:F9:D4:C4:9A:AB:EA:63:4A:6E:71
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AD23C1B366DF91CB60E84F540
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0e321529-67b0-3b6c-80fb-23ea199d219e.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     397234
IP address blocks:        2001:500:3682::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:1b:36:6d:f9:1c:b6:0e:84:f5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=24ed17d0-c297-4182-add6-9d70d4d5a659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cf:81:e2:41:a9:2b:ed:61:e1:1e:41:bc:00:
                    6d:f5:0f:43:a5:ee:a6:3b:f2:6d:45:07:92:ea:c8:
                    9f:46:3d:e5:98:f7:4d:d7:4c:62:13:81:1c:bf:2f:
                    01:90:80:51:0f:03:80:57:b1:8a:8e:1c:ef:81:fb:
                    de:de:16:57:08:2f:61:cb:cf:66:cb:d6:12:f1:80:
                    18:de:c2:4a:9e:01:60:eb:50:d9:43:f8:d3:48:93:
                    4c:51:98:0a:7c:49:ca:71:0d:7f:74:37:bf:57:1d:
                    bc:f6:44:b3:93:8e:4d:ec:16:e5:49:94:e4:1c:fa:
                    c5:55:d2:87:91:70:5f:b0:28:9d:8c:31:2c:56:85:
                    9f:2a:5c:b7:4a:00:e7:a2:24:7e:a2:31:22:f5:4a:
                    09:06:b0:45:d8:78:93:ee:ab:c8:f2:99:d4:bc:76:
                    7f:53:97:ef:c6:1a:fa:3e:97:b8:56:7e:12:c2:c1:
                    14:0c:74:74:9b:73:d5:f5:4b:8f:58:f1:d7:5a:8b:
                    52:75:c4:c9:6d:85:b3:43:30:9c:d7:26:06:ec:ce:
                    63:49:c1:75:64:09:41:26:66:05:3b:6e:3d:c8:64:
                    69:ed:23:58:92:7f:09:80:c2:ef:0c:a0:e2:00:2d:
                    83:cc:13:9a:4f:79:3c:a2:0a:98:30:53:71:fe:09:
                    d4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:22:73:C6:D3:CB:DB:93:7C:2B:F9:D4:C4:9A:AB:EA:63:4A:6E:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0e321529-67b0-3b6c-80fb-23ea199d219e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:3682::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:7f:5a:0e:0d:03:54:a9:eb:08:b6:b4:f1:1a:10:9b:c3:15:
         60:fa:86:fe:45:ba:98:90:57:7d:9e:93:21:21:91:93:4e:c3:
         d0:37:40:db:b5:d5:6a:f4:f0:dc:c4:22:a2:58:34:44:fe:c1:
         e5:6e:39:c9:d2:05:bd:ca:62:9c:53:4e:f2:ff:3e:ca:f5:f6:
         68:22:3e:54:08:78:4d:4a:4e:c3:40:fc:f2:a6:c3:5c:2c:c2:
         c1:f4:09:fb:00:0c:27:a5:37:3b:72:35:12:b0:42:fa:56:ac:
         ce:74:0e:65:57:0d:b8:8a:1e:c9:79:94:44:3f:d1:3e:da:a9:
         74:89:80:48:01:0e:43:8d:26:54:fe:c0:ec:86:71:2a:01:f3:
         94:a6:34:a8:23:f3:68:8c:43:a6:aa:c6:f9:c6:ce:4d:66:e6:
         43:6d:17:cb:a4:12:6d:e0:86:fe:01:6b:2d:a6:dc:d4:b9:54:
         ea:7b:79:e3:3c:f8:e7:84:5a:c1:14:95:c4:6e:eb:e5:fc:90:
         31:37:ec:a6:95:74:87:a0:fe:ec:e1:6a:c9:9e:53:77:c5:72:
         a6:b7:c3:92:23:27:70:8b:b1:a9:b3:c5:09:7c:13:16:46:86:
         d2:1c:5c:da:46:ce:80:5a:f3:7d:6f:b6:f6:68:f9:91:94:a4:
         ec:2e:31:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:57:44 2025 by rpki-client