Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/99eb27fa-b601-371b-8fdc-3ffb7aa14496.roa
File:                     99eb27fa-b601-371b-8fdc-3ffb7aa14496.roa (raw, json)
Hash identifier:          QTNNY3qyhwNTBHY5TwALeDE0ChC9kv12KEQHCSbUUmo=
Subject key identifier:   BC:D7:44:E4:29:64:DC:99:5C:A4:77:8C:14:86:25:9C:20:F9:2B:49
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AD23C2AC058053D2B6B27C690
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/99eb27fa-b601-371b-8fdc-3ffb7aa14496.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     397230
IP address blocks:        2001:503:e239::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:2a:c0:58:05:3d:2b:6b:27:c6:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=d5872ad7-9a9a-49a7-8df2-b640dbaa7363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:07:af:3f:1e:0c:fd:dc:ef:28:d3:75:32:8a:
                    0d:93:5c:72:88:89:68:42:43:ce:d1:7f:5b:69:d0:
                    71:09:c2:fc:9a:75:fd:32:7a:38:3c:04:78:19:9c:
                    1d:95:2e:2f:e5:74:c8:19:c9:22:52:8c:a0:6f:1f:
                    16:3c:64:6a:10:72:72:b0:d7:98:30:d0:b1:75:3a:
                    37:43:37:b0:4c:c0:d7:d1:21:50:80:06:05:68:14:
                    c4:da:04:09:6e:30:47:9d:53:bd:3d:0f:c6:19:66:
                    21:ad:69:17:df:70:f8:6f:d5:4d:7c:3a:d8:2b:a3:
                    67:5d:35:31:71:8a:45:c6:a9:21:9d:82:49:34:9e:
                    76:04:37:56:4f:82:84:3d:54:3f:c4:04:7e:dc:fd:
                    6e:e4:54:b3:88:e5:bd:9c:33:45:ad:e5:f7:e8:29:
                    35:5c:68:15:71:79:eb:ac:9d:64:9f:32:89:71:55:
                    56:b2:a2:03:b6:22:57:40:86:a6:53:af:aa:72:8b:
                    41:94:5a:eb:11:37:09:b9:56:ee:f3:f6:4e:13:5c:
                    0b:2e:6e:3a:63:66:81:da:63:13:d7:b0:38:01:4d:
                    d6:d4:09:7c:aa:4b:d6:79:b3:16:e2:5a:24:4b:84:
                    a9:e9:2c:cb:5e:3d:7f:3c:03:44:83:63:0c:98:e8:
                    ad:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D7:44:E4:29:64:DC:99:5C:A4:77:8C:14:86:25:9C:20:F9:2B:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/99eb27fa-b601-371b-8fdc-3ffb7aa14496.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:e239::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:2f:46:10:0f:d1:67:17:b3:83:da:dd:54:0c:3a:81:3f:3d:
         ed:be:1a:33:66:fb:c4:be:96:04:7d:bc:65:87:8f:45:aa:da:
         4a:8b:13:f2:76:bc:f2:47:d1:a8:6c:68:85:23:8c:94:d7:41:
         27:ac:88:4a:ff:e3:ff:94:14:c6:f7:12:8f:64:fa:1d:e1:2e:
         01:83:5a:38:a5:28:3d:90:e7:c5:74:e2:32:80:78:f6:f2:9a:
         03:8d:c1:7a:a2:7c:1d:2a:8e:59:cf:6c:dc:f5:15:9b:2f:32:
         d3:cf:cc:89:7f:10:c3:db:40:40:46:07:4b:22:67:ec:d4:0d:
         2c:86:05:55:92:1a:66:0f:6b:7c:6e:14:0d:0c:ad:23:22:2b:
         68:80:80:aa:52:54:c1:f2:12:b7:1f:73:46:75:51:04:22:c2:
         2f:be:38:a5:27:94:06:79:ce:c1:f3:03:76:c6:25:e8:17:9f:
         15:f2:97:65:5b:a0:4f:38:3d:79:64:da:77:d3:28:c5:fa:90:
         92:9a:f6:6c:5d:bd:13:14:99:4e:2b:4c:23:a8:0d:ba:65:22:
         02:5b:93:5b:36:47:6d:7d:06:f7:0d:7a:55:33:73:51:e4:fa:
         aa:da:ca:67:7f:fc:b7:45:1e:2f:9d:de:3c:97:78:c8:2a:eb:
         a1:22:c5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:07:43 2025 by rpki-client