Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/abba81e5-c08f-3b4d-a65d-51cb17b00256.roa
File:                     abba81e5-c08f-3b4d-a65d-51cb17b00256.roa (raw, json)
Hash identifier:          s4LaHBktFm++tr76f9r87+KleHmEH6Yt3FK/h5Zt5tY=
Subject key identifier:   1F:E7:87:CE:EE:AD:49:C9:41:12:E0:4D:20:95:D5:58:17:96:E4:BC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849F17FE0BF3ACDDDA6E6927940
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/abba81e5-c08f-3b4d-a65d-51cb17b00256.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     701
IP address blocks:        100.10.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:e0:bf:3a:cd:dd:a6:e6:92:79:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=2022255f-761c-4068-af19-87f5dae8377f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fb:b4:ce:f1:c0:75:62:37:87:59:b1:e9:e2:
                    28:76:95:64:ed:5a:ca:99:17:a6:fa:87:90:8e:b7:
                    69:85:d8:5d:db:c7:3f:2e:2b:2a:b7:fb:72:66:9f:
                    01:c4:c2:72:9c:f8:40:17:de:ea:35:07:ce:ec:ee:
                    9b:b4:72:8d:fe:10:04:6d:65:83:aa:a9:85:27:1c:
                    f1:23:90:93:50:63:71:0a:05:9c:a7:cb:60:af:57:
                    29:a8:82:ab:07:fe:42:66:f4:4a:7b:28:a5:d3:02:
                    e9:c8:99:8d:31:f6:b1:54:91:67:e9:ff:c7:31:38:
                    a8:4a:a1:0d:ca:bd:3c:c5:91:54:1c:b0:64:a6:a1:
                    f1:18:58:d2:13:82:ae:86:9e:28:c2:12:2c:c7:9e:
                    f1:ff:74:a8:d2:00:9a:09:77:41:0c:96:2b:1c:e2:
                    c6:78:2c:aa:b4:a2:a2:aa:20:78:91:64:d6:62:41:
                    2b:a5:d4:15:5a:20:29:1e:c5:14:4d:71:08:86:39:
                    8a:d6:4d:38:4c:83:94:51:eb:bf:5d:4a:7c:fe:a3:
                    1d:f3:3c:13:06:cc:a1:7c:98:8b:12:77:e4:a1:95:
                    b5:92:a0:20:89:58:ce:87:ad:15:2e:bc:b4:ce:2e:
                    7b:6b:e5:74:86:8d:67:a1:96:3e:54:78:e9:49:00:
                    e2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E7:87:CE:EE:AD:49:C9:41:12:E0:4D:20:95:D5:58:17:96:E4:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/abba81e5-c08f-3b4d-a65d-51cb17b00256.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.10.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:01:84:8e:6f:cb:3e:d5:21:b1:52:0f:d6:37:aa:b9:ae:51:
         c3:cc:79:52:2b:92:f0:e8:b5:87:7c:60:8c:e0:bc:38:55:79:
         5a:02:28:c2:89:6f:0b:38:27:b3:43:fa:b3:0b:33:ac:ae:53:
         4a:fb:94:f4:dc:38:2f:8b:67:bd:ed:a6:9d:bf:c3:60:c2:ba:
         ec:11:b6:0f:5a:f6:58:9a:71:33:79:6a:e1:90:0f:4c:1c:f8:
         5f:db:e3:f1:b4:b8:79:56:da:7b:00:99:ab:a7:6e:69:2e:c5:
         fc:41:ea:61:e0:ae:56:f4:30:00:d0:59:a5:13:df:0f:61:6a:
         d3:41:c4:aa:89:03:91:17:44:05:a8:38:35:b8:76:d5:ac:39:
         65:48:e5:30:1e:8e:4e:9c:d5:f4:67:8d:bb:d8:30:7c:7c:11:
         88:2b:6e:39:a8:b6:b5:10:56:b4:1e:d0:95:3a:81:99:26:d2:
         52:e3:0f:41:07:04:84:84:e4:2e:76:31:e5:12:ab:b6:cb:87:
         ad:52:59:34:09:73:62:95:e6:8f:06:9e:d8:64:e3:89:96:05:
         5d:c1:56:62:a3:d6:5b:82:79:ff:0d:48:82:71:40:bf:7f:1a:
         c9:99:c6:96:c6:0d:20:94:3f:b5:74:b3:58:ba:69:85:60:2a:
         6c:32:3b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:45:27 2025 by rpki-client