Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/75fb7322-7491-3aae-b621-1510ca18c9ff.roa
File:                     75fb7322-7491-3aae-b621-1510ca18c9ff.roa (raw, json)
Hash identifier:          W4S/yiTZkkV/MuqMPllKCRlu895w0r495qMlCs5XQ8g=
Subject key identifier:   CB:BD:33:55:0B:17:39:3E:1E:EC:C5:8F:FA:33:C5:6C:7F:32:E0:6E
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AD23C2041B0454ADADA8D8570
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/75fb7322-7491-3aae-b621-1510ca18c9ff.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     397241
IP address blocks:        2001:502:2eda::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:20:41:b0:45:4a:da:da:8d:85:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=e96490ac-c0fb-4c58-9611-fea656b473d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:38:47:04:53:d5:bb:5e:f3:4a:e4:7a:1f:93:
                    f5:35:22:d4:83:d4:15:91:3c:dd:bb:f9:a3:80:e4:
                    ca:0a:83:e3:5d:67:6f:42:67:38:f8:e6:f6:a0:bd:
                    76:a0:bf:e0:4b:d9:41:e1:46:e2:9e:d2:c0:31:44:
                    26:57:32:1c:6d:04:30:7d:bf:4f:3c:e7:f9:3c:59:
                    d9:fc:4c:c6:d5:2c:34:7d:21:10:9b:86:f5:4d:69:
                    ed:10:41:53:21:31:a0:27:ea:47:92:31:06:78:f6:
                    b8:6c:7d:81:30:e3:f2:c7:44:c2:d0:76:bf:41:f1:
                    56:4f:58:1b:ca:21:0d:45:42:cb:34:95:f1:e8:fb:
                    22:02:fb:42:58:99:e8:70:41:0f:42:e5:76:ee:37:
                    15:4a:e9:df:a3:56:11:98:fd:cd:ae:62:ed:fe:e4:
                    95:cc:b5:f5:e4:6f:54:35:20:57:1c:84:10:41:ea:
                    dc:76:2c:fe:9f:bc:fb:c2:d7:fb:ff:34:8b:26:fe:
                    d0:63:25:90:71:43:5e:d7:e1:29:97:1e:70:de:2e:
                    48:90:60:db:51:85:01:c1:6a:ea:a8:81:46:1b:76:
                    dc:2f:89:70:da:32:a6:f1:5f:4a:18:8c:09:36:c5:
                    da:e9:d8:60:19:48:ae:1e:a1:b8:66:39:a3:9d:25:
                    d0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:BD:33:55:0B:17:39:3E:1E:EC:C5:8F:FA:33:C5:6C:7F:32:E0:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/75fb7322-7491-3aae-b621-1510ca18c9ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:2eda::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:18:55:81:fc:ec:25:b3:5e:d6:cd:f8:e7:43:99:ea:cd:20:
         4a:89:3b:c7:ba:34:a7:6b:11:44:00:64:40:8a:39:3c:64:fa:
         08:24:b5:3d:1e:16:56:af:52:13:c9:c5:b3:96:a6:f4:62:ca:
         3a:85:a9:00:80:0a:45:bb:c4:b8:16:80:ab:7c:7d:a1:c9:f1:
         3d:d4:63:fc:09:0e:98:6c:dc:b5:ba:32:7d:05:bd:3f:62:7e:
         3f:ac:2e:9c:94:0d:bb:8e:9a:dd:c1:d3:29:e8:2b:f1:69:d5:
         74:6e:96:8a:50:32:98:73:60:58:39:7b:68:25:ae:5a:bb:04:
         cd:08:35:1e:2c:0f:c6:be:a1:01:08:98:a2:2b:1f:0e:34:f7:
         a4:c0:d8:6a:06:a6:7f:b1:64:e8:14:36:45:4c:ae:87:d8:2e:
         6f:b5:65:e9:13:97:a8:64:78:81:ea:de:33:6b:7c:db:dd:75:
         3b:da:df:3d:0c:80:84:f5:ae:b2:04:11:b2:16:17:d2:8d:10:
         4d:c8:43:96:37:30:b5:5b:9e:45:76:4c:7c:b9:1b:51:d9:f3:
         fe:d5:f6:c7:5e:92:15:84:a0:8b:75:a7:ec:1e:bc:d0:00:aa:
         79:25:b3:92:cb:0a:3e:be:f2:07:a5:8f:65:bf:fb:7d:08:b9:
         0d:78:31:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:59:45 2025 by rpki-client