Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40801f6c-baf4-39ca-8afd-ff4f25798169.roa
File:                     40801f6c-baf4-39ca-8afd-ff4f25798169.roa (raw, json)
Hash identifier:          DCsmVvyJIqqU84T5cvl+/6EoOUDfCEUKZvNanIzUqMI=
Subject key identifier:   B7:E2:71:BA:CB:18:06:B1:9B:77:F8:D6:3D:BC:B9:1B:CB:14:BE:32
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584B48E1A9FEBADFBEE5986D6E00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40801f6c-baf4-39ca-8afd-ff4f25798169.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     396585
IP address blocks:        2620:74:2c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:a9:fe:ba:df:be:e5:98:6d:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=1188b76b-03af-405c-973c-d3424fe07d23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:91:8e:9c:f5:1c:ed:ad:aa:1b:5c:b1:93:a9:
                    36:8b:c6:f0:9e:e1:3a:f6:fc:f5:c4:b6:c5:7e:f2:
                    96:f5:05:1a:7a:18:20:a1:ce:04:2d:69:e4:8e:94:
                    dd:0c:56:dd:f2:15:28:28:f5:6a:1c:35:29:36:1b:
                    73:3d:c7:60:1d:26:df:06:3d:7a:90:49:35:d8:5d:
                    7c:6e:07:a1:10:33:19:39:12:10:18:e3:41:a3:20:
                    b7:01:21:b9:61:6a:6d:e4:34:10:6b:b1:56:89:9e:
                    5a:9a:e6:be:74:4e:04:60:52:5a:82:f7:a8:0c:e2:
                    72:77:58:96:5d:9d:55:0d:a7:fd:04:8e:c8:e6:e8:
                    4e:ab:29:b8:e2:5d:8e:8b:94:a1:a7:b7:c8:40:8d:
                    cc:d4:64:64:cb:cf:f0:d3:2e:0f:4e:09:76:cb:a5:
                    64:4c:fd:ec:ad:30:38:35:fd:3c:94:28:31:b9:c5:
                    be:b1:ac:31:8d:25:c1:fc:5f:05:73:bc:78:e0:a2:
                    57:4f:10:46:3d:e0:ba:c3:20:a6:07:55:94:bb:22:
                    93:48:46:5a:ac:61:98:ac:98:7a:e7:ad:41:1a:90:
                    62:04:9a:6e:52:88:9a:b0:9c:1c:43:f7:5e:44:79:
                    e9:64:1f:3c:26:e0:38:89:18:35:c8:54:58:dd:7a:
                    ad:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E2:71:BA:CB:18:06:B1:9B:77:F8:D6:3D:BC:B9:1B:CB:14:BE:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40801f6c-baf4-39ca-8afd-ff4f25798169.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:a5:cd:5b:ad:24:7e:a7:12:6b:2e:93:f5:a9:13:29:5d:a6:
         25:17:0c:b8:de:8b:a1:13:d3:99:ab:63:e1:7a:11:01:a4:34:
         51:32:f9:b5:fb:f9:58:6e:7b:45:b2:fa:d0:a0:24:43:f8:57:
         09:86:41:33:d2:73:fe:eb:b1:34:0a:0d:01:f2:3d:ac:63:fa:
         b0:e9:24:79:f4:3c:aa:9f:f5:80:91:14:d5:c8:37:e2:86:ca:
         b4:1b:18:dc:89:01:da:00:63:71:5d:31:df:7f:38:03:7a:e1:
         1e:85:9d:80:ca:df:83:c2:76:e0:2b:4c:a1:fe:c5:9f:17:9e:
         0e:10:06:68:8b:b0:3c:af:f7:f5:39:9a:e2:1a:55:e8:c2:8f:
         3f:7d:37:41:00:55:c7:18:3a:52:fa:7c:4c:68:a9:65:60:28:
         b5:fc:d0:8c:15:fb:d9:e4:a0:ed:1f:f7:f5:e6:53:00:9c:81:
         b5:35:a9:74:e7:07:6b:4b:5f:cf:5e:b0:f3:93:ea:fe:1b:0a:
         52:c3:94:f4:7b:9b:68:c1:18:bc:73:8c:b9:57:53:ec:2e:8c:
         bb:c4:30:81:8a:af:e2:08:24:3b:16:65:7b:80:21:27:6e:04:
         20:9c:4e:c5:c7:3a:71:bb:ae:50:3f:ca:1f:1f:13:5e:70:15:
         11:bc:4c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:31:51 2025 by rpki-client