Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/31dd5564-3ff5-3e5e-bc42-648846e20e34.roa
File:                     31dd5564-3ff5-3e5e-bc42-648846e20e34.roa (raw, json)
Hash identifier:          PU760WeI3/vFk3aAjpesYFIbVWJQ09gdC4KrriLehFc=
Subject key identifier:   B5:AF:A7:4C:20:E1:79:E6:6D:BE:12:6F:3E:5B:9D:03:6A:87:1A:A0
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584B715CDD57A578986E38A3BB60
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/31dd5564-3ff5-3e5e-bc42-648846e20e34.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     396612
IP address blocks:        2620:74:2b::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:dd:57:a5:78:98:6e:38:a3:bb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=525b9728-c852-433b-954b-70e938dfe497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:04:df:b5:7e:96:8f:05:a2:e0:35:f0:fe:50:
                    fe:26:d6:45:8d:68:06:92:be:93:4e:b9:1e:e3:4c:
                    9c:dd:05:dd:58:a5:99:9c:84:6e:ed:75:c9:f7:94:
                    42:0b:c4:a7:a9:db:8b:ae:bb:c0:3c:01:4a:6c:ca:
                    5b:ee:24:31:49:63:a9:2a:e6:54:45:c2:74:fa:ad:
                    30:37:3c:a8:b6:fc:a5:f7:c8:a6:88:f2:f6:a4:34:
                    46:f3:ac:42:4b:9d:5e:8d:ae:16:d3:0e:67:54:ad:
                    c5:58:a9:95:85:4d:28:99:dd:10:94:97:f9:30:33:
                    6f:14:df:a3:04:32:94:cd:11:8d:08:1c:02:2b:ef:
                    80:79:d4:c8:be:5e:46:26:60:6c:03:66:e1:4c:33:
                    75:18:1b:c8:54:c1:96:3c:96:d5:52:c4:9e:42:48:
                    86:33:6c:6f:20:6d:cd:f4:74:09:3c:f2:ac:1d:ab:
                    2a:16:68:8f:80:19:a0:2b:c6:94:81:31:05:98:25:
                    e3:80:af:a2:1c:b0:da:17:d2:b0:35:78:70:fd:c4:
                    c0:a3:bb:37:37:e5:66:85:8c:ff:f1:f1:7b:a1:a1:
                    5c:5e:7f:f3:b6:0b:f9:df:0e:bb:fb:40:7d:50:57:
                    3d:1c:dc:be:d6:de:13:95:ef:08:c1:72:7a:09:a7:
                    12:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:AF:A7:4C:20:E1:79:E6:6D:BE:12:6F:3E:5B:9D:03:6A:87:1A:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/31dd5564-3ff5-3e5e-bc42-648846e20e34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:e4:bd:e7:32:ae:7c:2c:4d:12:4b:bf:9d:dd:a9:af:67:19:
         30:b3:a7:1f:b5:e4:ff:19:91:1d:4d:b2:e8:2b:64:27:66:4e:
         98:d9:43:c9:1a:4c:ec:0e:b5:9b:cb:cd:fa:4c:93:40:22:6d:
         dd:4d:97:97:b5:41:c6:18:96:3c:4f:16:b6:70:12:e1:4d:c6:
         bb:e9:66:2f:bd:65:d1:d2:ca:26:0d:04:82:2f:1e:d3:5d:e8:
         bb:00:ed:0f:1e:c5:b3:0f:28:7e:83:cd:c5:db:f6:1d:03:ec:
         3c:50:ae:7e:12:6c:af:6e:8d:be:12:8b:52:16:c0:6d:eb:fa:
         5b:97:ec:0b:cf:79:90:77:1f:c2:3a:71:20:07:5a:0a:2c:ba:
         85:fd:1f:dd:13:d6:42:95:d7:25:e0:ef:5b:6f:1a:8f:31:b1:
         d8:df:c4:80:09:c8:4e:67:42:f6:7f:58:19:e1:bd:c2:28:29:
         90:e6:7a:59:6d:c4:1b:a4:10:f7:2c:fa:df:c4:87:a7:93:b7:
         7c:a4:e0:95:4b:16:4a:07:7e:b4:71:ef:f1:20:ac:87:5d:04:
         79:d0:53:b4:6c:50:be:de:1c:c3:52:ff:20:cd:3b:a2:56:90:
         07:57:89:91:cc:c6:6d:cc:7c:da:2d:5f:fd:28:93:28:ce:a4:
         12:81:b6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:13:42 2025 by rpki-client