Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ee1c28f7-1ed9-381d-aa64-c6d176762b1b.roa
File:                     ee1c28f7-1ed9-381d-aa64-c6d176762b1b.roa (raw, json)
Hash identifier:          ISECmK1w4bnm8fPqXvh+p/2388BIKYGBhpNFUjWsq0E=
Subject key identifier:   9D:71:4D:54:84:B7:AC:5F:0D:39:5A:27:F0:BA:09:B4:FE:46:17:42
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F1801DD64F81ED3C634F90C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ee1c28f7-1ed9-381d-aa64-c6d176762b1b.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397229
IP address blocks:        2001:502:d399::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:1d:d6:4f:81:ed:3c:63:4f:90:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=1400d7c5-76f8-4030-aa69-f01697303776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:79:c7:47:c6:fe:1a:6d:a5:ae:1e:76:3b:3e:
                    a9:9d:7a:0d:e2:62:f4:c7:0f:b5:06:7c:45:e2:46:
                    d2:ac:ed:1f:94:1d:0a:f5:f7:92:da:63:68:d4:03:
                    a1:52:9d:0b:3d:df:44:cb:da:4c:f8:73:87:b7:e5:
                    3b:c1:0c:de:fa:04:b8:f7:88:d8:69:68:e1:c8:ae:
                    fe:bb:e8:8b:23:91:fe:cc:70:7e:62:ca:ef:0c:60:
                    ef:72:e2:64:79:f7:d9:83:d7:5f:78:7e:b5:c9:3f:
                    fb:0e:7c:8a:b4:01:f9:dc:8c:65:33:fe:fb:89:a5:
                    52:7c:61:27:f2:ec:e0:51:f7:fd:3d:94:28:62:ca:
                    79:bd:8c:d0:6a:23:ae:01:0a:6c:10:43:93:7b:65:
                    6d:39:7a:39:de:4b:78:2e:19:28:65:62:19:7d:f8:
                    62:6c:14:08:dc:60:3f:13:42:09:81:bf:b0:3f:ee:
                    6c:a3:1f:66:36:46:19:84:5a:9c:c6:36:fb:50:d8:
                    2d:65:39:01:07:ec:fa:39:db:b9:20:5a:c0:db:84:
                    1b:a9:0f:b9:96:9c:ab:17:55:05:77:4e:c1:bc:d6:
                    11:09:50:bb:c8:48:1c:2c:7d:b3:b1:7e:3c:cb:8a:
                    2f:f7:6d:83:33:2d:74:83:9a:53:a1:db:96:ef:78:
                    65:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:71:4D:54:84:B7:AC:5F:0D:39:5A:27:F0:BA:09:B4:FE:46:17:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ee1c28f7-1ed9-381d-aa64-c6d176762b1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:d399::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:01:79:f9:bf:4f:8e:3f:d5:cb:4e:c2:e6:65:4a:7e:38:78:
         d5:ed:f6:99:6f:29:39:a1:54:54:72:1c:43:a5:d9:51:0e:f9:
         a0:49:58:97:32:76:86:53:f5:82:af:5c:e7:65:25:3c:94:a5:
         24:21:b3:04:5b:90:b7:47:aa:70:52:03:05:14:ab:f3:01:4b:
         c7:d3:fa:a6:84:29:6d:4f:34:52:47:d5:39:f7:e0:02:a1:2d:
         cf:ae:9c:f3:5b:0c:96:7d:11:6b:34:31:4e:7b:8d:a6:3f:e6:
         8a:e4:6d:89:e4:12:17:a1:53:5c:52:a6:28:6d:17:77:20:a4:
         bb:df:8e:82:ad:88:83:6f:11:c3:60:32:1a:36:69:83:97:45:
         e1:f7:f2:ee:cc:6d:75:7a:2a:18:a4:1e:c7:84:b5:81:5b:7d:
         3f:46:b2:30:e6:8e:10:e7:5c:22:15:12:3a:96:da:72:bf:dc:
         c1:cb:fc:96:2a:32:01:30:73:65:b5:8d:2e:58:f8:9a:d0:e8:
         19:96:c5:8d:19:eb:f6:31:e9:84:ec:69:4e:9a:76:81:ef:44:
         67:d1:33:9d:45:58:db:ca:ec:2b:b2:3c:5c:bf:5a:63:e2:c4:
         ab:d5:b1:4f:c7:0b:0b:81:3d:96:e4:e9:04:f4:6d:54:f7:8c:
         30:0d:a6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:14:06 2025 by rpki-client