Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/93789493-0057-33f4-bac6-b22b530afa2c.roa
File:                     93789493-0057-33f4-bac6-b22b530afa2c.roa (raw, json)
Hash identifier:          qGO9NAhpgZjQfOd9M6MxlgK+hWizlQoc8Xzf2RxbSt8=
Subject key identifier:   B2:82:2A:D1:10:F3:CF:52:18:35:8E:28:C6:22:25:54:B5:28:B6:6B
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AD23C2B5FB836CE781B427700
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/93789493-0057-33f4-bac6-b22b530afa2c.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     397239
IP address blocks:        2001:503:e239::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:2b:5f:b8:36:ce:78:1b:42:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=da8743c5-e8d4-4b2d-8017-d68659cc3a59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b8:3c:93:e2:2f:2d:c9:32:3c:45:54:51:07:
                    51:8b:8b:12:0d:9f:66:9b:13:3f:22:51:ef:95:60:
                    a7:0e:b1:1e:da:9f:1c:d8:3b:6d:0e:62:ee:b0:4c:
                    5a:4a:51:3b:60:16:80:ef:a6:a7:fa:02:92:60:e1:
                    dc:82:54:ca:af:b7:fc:04:d5:0c:f3:75:cf:66:ff:
                    e6:1a:df:94:86:a9:ec:7e:c9:18:4d:ef:2d:87:46:
                    60:55:bc:cd:d1:9e:8f:1c:c9:a7:6c:e3:2e:5a:ba:
                    37:a0:aa:b2:b4:d2:2d:ca:3c:20:1f:52:1c:68:86:
                    2e:f3:ae:a5:a9:c1:90:14:8e:d2:d5:7e:1b:f2:78:
                    54:d4:7a:83:95:eb:c3:13:87:56:f5:4f:ac:b3:2f:
                    1c:a2:d5:01:e9:e8:eb:30:d5:b9:fb:cb:e7:c6:e2:
                    77:3d:01:51:a9:ad:ff:1b:9e:ee:d3:cf:da:08:23:
                    db:34:fa:6a:14:64:59:5d:c7:5e:00:a3:49:cc:96:
                    ed:d9:55:0b:df:73:60:75:ca:77:fe:28:f1:98:c7:
                    b6:a9:f2:87:15:4d:2a:c4:05:9d:2c:f2:13:ce:c9:
                    56:8e:95:2b:08:14:d5:f5:6c:4a:c8:a0:bb:78:1e:
                    d3:ec:cb:14:db:9f:d3:51:69:2b:b7:2c:90:61:2d:
                    5a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:82:2A:D1:10:F3:CF:52:18:35:8E:28:C6:22:25:54:B5:28:B6:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/93789493-0057-33f4-bac6-b22b530afa2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:e239::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:25:2e:46:ac:5f:ce:27:63:8e:a1:53:86:01:ba:94:5b:86:
         1d:0e:01:ad:7c:4e:e2:57:4d:f0:01:80:31:f8:dc:05:d5:31:
         59:55:87:be:1c:ee:a7:41:9e:a3:ca:6a:d3:4f:54:f7:9b:6a:
         76:3f:3c:f7:69:bb:28:4e:4d:d4:65:9d:1d:63:4c:ab:83:64:
         2a:a2:13:09:03:5a:4b:5c:b6:c9:8b:3c:1f:1d:2b:a3:ee:cf:
         15:9b:ab:8c:a0:54:a6:13:56:71:ca:b3:f9:da:9b:36:3d:5e:
         e2:2f:7a:0f:7f:2b:de:22:f2:1d:3c:91:ba:48:bf:7f:3b:3e:
         d7:45:6c:73:f4:5f:d2:f9:8f:e4:9d:79:cf:80:03:70:6a:62:
         b9:97:46:4e:9a:bd:69:0a:29:0c:bb:c5:4d:ca:0c:05:b5:a9:
         32:07:af:77:df:35:be:13:2e:4d:7f:20:7a:ed:8b:3c:77:37:
         d7:b0:ce:0c:27:c6:ec:e7:44:50:e9:53:e2:d0:a7:39:ba:79:
         25:5a:68:8a:1b:49:6e:58:cd:e7:6b:37:82:1f:5f:e4:2a:cf:
         54:83:03:85:10:74:e4:94:9b:08:18:77:27:c1:04:3c:50:84:
         6e:d2:05:55:bd:33:04:c2:bf:79:f8:82:11:78:82:20:61:78:
         29:bc:ed:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:59:20 2025 by rpki-client