Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8a52d265-2721-338f-add7-3425ceae395c.roa
File:                     8a52d265-2721-338f-add7-3425ceae395c.roa (raw, json)
Hash identifier:          TA4OyUlEnrGOm27MJdCWf5ZE9FqdwIOkz8B6zi2y90I=
Subject key identifier:   99:F5:59:50:A5:A3:22:BE:65:1D:B2:F8:4E:F0:90:96:6A:D8:BC:90
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AD23C1AB4DBD5BF651B182540
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8a52d265-2721-338f-add7-3425ceae395c.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     397226
IP address blocks:        2001:500:3682::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:1a:b4:db:d5:bf:65:1b:18:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=9b03503c-5449-42af-8db1-ec29b12b84b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:12:5b:f1:92:68:5a:99:ad:12:76:e5:9a:22:
                    1c:0f:7f:1d:a0:96:1a:03:02:9d:86:ba:22:ce:a9:
                    bd:20:47:fd:3f:89:e3:df:96:3f:5a:aa:52:17:fb:
                    63:3b:8c:83:12:e1:53:e6:6d:40:45:57:12:b6:77:
                    9b:1f:96:a1:d9:0a:76:e7:ae:11:c5:77:fa:a7:93:
                    1a:df:9c:f3:4b:47:fa:b0:db:ea:2f:00:6d:7f:87:
                    85:c3:66:2c:6c:43:aa:5e:d8:75:cb:fa:fa:ba:0f:
                    37:84:6b:89:b9:cf:ca:fe:10:a8:64:2f:a4:6c:25:
                    d9:26:00:b2:70:61:e8:33:bb:6d:1e:7d:3e:aa:20:
                    d5:a4:cb:97:9f:31:07:02:ed:37:2f:43:e7:6b:3d:
                    f3:14:b7:22:40:31:3e:68:a0:81:ea:f5:2e:3d:b8:
                    3b:46:4a:32:13:66:0e:3b:80:af:bb:ad:52:17:51:
                    52:ed:d8:d5:d4:57:fa:dc:10:bd:8b:d6:61:97:d3:
                    0e:4e:14:8e:26:11:d5:1f:fa:45:76:aa:c8:57:bb:
                    e0:6e:8b:de:33:2e:09:ca:02:c3:95:e3:77:ce:90:
                    a3:dc:49:6d:33:ec:4f:6e:67:b0:10:50:0d:9c:1f:
                    54:4b:b3:e7:7a:49:b2:0c:56:ea:c5:1c:56:15:6f:
                    e6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F5:59:50:A5:A3:22:BE:65:1D:B2:F8:4E:F0:90:96:6A:D8:BC:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8a52d265-2721-338f-add7-3425ceae395c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:3682::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:8c:16:6e:54:d4:99:1b:93:a5:fd:1f:13:fe:f2:45:5a:be:
         a2:77:75:c9:b6:d6:06:22:4e:24:14:86:b3:4a:86:6f:24:04:
         99:46:da:16:d7:2d:e7:ce:46:7a:b5:24:40:e2:a2:6a:41:58:
         a7:f1:5b:cc:a3:43:38:af:92:f4:61:07:67:84:4b:af:e5:d1:
         c5:f8:d7:a9:84:46:36:6c:a6:9d:84:8a:f9:ba:1c:45:8f:e0:
         e0:0d:88:4b:5d:8a:19:4d:ce:7a:f4:ff:ff:ca:f7:da:95:4f:
         b3:a5:76:90:58:a4:22:6f:08:a4:43:84:6d:6b:bc:a3:22:a3:
         8b:b2:ab:03:cf:8b:ba:32:60:6e:be:43:f5:cc:a7:a6:a5:6c:
         f6:63:52:3f:83:97:00:f1:dc:fb:3f:8a:df:f4:b6:f5:6a:a5:
         85:20:52:dc:cf:b0:0b:6d:d6:c5:92:85:4e:c5:0c:1e:78:4d:
         27:71:89:76:fd:66:26:08:6e:45:5d:65:de:be:d7:cd:c9:85:
         99:e9:18:ca:9f:40:e5:3d:d5:2a:2c:e7:e7:0c:7d:14:15:0d:
         37:72:46:4d:2a:28:4e:d6:5c:a7:b0:fe:14:48:c4:a8:ba:fd:
         cd:01:f4:ae:45:27:6a:b0:52:41:5b:1d:1d:a2:a4:98:f9:ae:
         ba:74:54:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:10:30 2025 by rpki-client