Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/b01a6fd0-5038-3515-9519-e4df95bc9b9a.roa
File:                     b01a6fd0-5038-3515-9519-e4df95bc9b9a.roa (raw, json)
Hash identifier:          51FXKQv/sG8g46QuR3ISLlO9fO8lodScbubQ+jaa/P8=
Subject key identifier:   AE:8C:1E:61:EE:03:EF:FA:9A:27:9A:B6:B2:22:04:42:3C:D9:1C:FB
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F43285849CBCF8AF7B2C9155E8AFD8D80
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/b01a6fd0-5038-3515-9519-e4df95bc9b9a.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     187
IP address blocks:        2620:171:d00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:8a:f7:b2:c9:15:5e:8a:fd:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=1701e95d-4d4e-47c6-9226-eb8fbe167830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:62:c0:3f:c1:ce:d4:7b:39:dc:ce:a9:46:40:
                    8a:55:1f:24:fa:fe:3a:60:32:72:96:1a:9d:a7:dd:
                    a6:5b:2a:75:3d:0c:47:fd:2f:d7:4f:3b:13:cb:eb:
                    de:e9:82:b2:0a:4c:68:5a:d2:28:ca:f4:e9:79:83:
                    83:2c:da:77:3b:7c:95:9f:f3:3e:20:92:a8:ec:0e:
                    1e:bb:3f:20:81:b3:9f:fa:bb:9c:ac:2b:91:63:57:
                    a7:ec:2f:f0:66:bf:75:92:af:65:92:50:cd:6d:9b:
                    c1:88:ed:42:14:a4:85:59:e4:5c:12:93:5d:19:67:
                    27:33:cd:2c:bd:a7:f0:74:90:49:6f:11:ca:a7:af:
                    02:b3:f8:7c:c6:12:46:3e:26:28:bd:81:b6:bd:09:
                    45:ae:c7:a0:e8:65:e9:52:6a:86:ab:0f:a3:ae:32:
                    98:5f:14:ca:a5:8f:df:44:c9:e3:8b:be:a5:8e:84:
                    53:24:6c:4a:09:c6:05:a2:d4:1f:24:c4:30:db:46:
                    f7:e4:2c:8d:eb:a8:0e:30:f9:0d:99:8c:1e:c0:2f:
                    63:ba:f4:91:00:43:a1:b3:45:73:ed:69:b9:88:82:
                    58:29:ec:00:bb:4d:4b:1f:5d:40:f5:7e:92:35:81:
                    dd:10:a5:cf:42:41:bb:ce:ad:2a:7d:17:a2:03:2b:
                    b9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:8C:1E:61:EE:03:EF:FA:9A:27:9A:B6:B2:22:04:42:3C:D9:1C:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/b01a6fd0-5038-3515-9519-e4df95bc9b9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:171:d00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:96:94:7a:df:e4:48:fa:64:ae:36:b5:b7:cb:34:71:f2:69:
         fc:e9:97:b5:8a:a0:05:13:84:be:3a:37:5b:16:55:d3:aa:c9:
         96:9e:73:98:76:1d:ec:53:ab:0b:2c:79:72:8a:35:7a:52:71:
         83:17:0f:eb:22:48:da:a0:91:5e:93:b9:bb:72:3b:a8:51:6a:
         22:a1:a3:87:46:59:99:a0:2c:06:ee:92:da:fc:a1:4d:cd:e4:
         89:3a:76:b1:4c:04:af:6e:44:6f:25:9d:68:3b:89:8d:92:6e:
         66:80:8b:50:7c:cb:21:85:c5:73:2d:b7:67:41:de:5b:df:db:
         55:85:3e:67:0e:c9:04:7c:17:6d:e8:a6:04:d4:c1:f9:3e:5c:
         6c:8d:8d:da:e8:ac:04:21:9d:05:01:f9:08:bf:d2:85:6d:e9:
         1a:ab:7c:68:0a:01:64:07:1e:6f:6d:9b:3c:d1:5e:67:d9:8c:
         9b:fd:53:c8:ed:96:8e:a4:01:0a:8a:74:57:0e:7e:8e:bc:26:
         db:eb:e1:d4:9e:3a:83:49:86:51:92:d9:75:9c:0d:bd:63:b7:
         a0:49:85:9f:13:88:e6:41:7c:a0:c0:92:d4:1f:61:21:35:ac:
         c5:8d:01:77:c9:9f:10:d3:2e:e6:1d:1e:b3:0e:02:11:eb:dc:
         52:07:73:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:41:09 2025 by rpki-client