Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/600856f8-4185-35e8-bab6-a92c03e0e2e6.roa
File:                     600856f8-4185-35e8-bab6-a92c03e0e2e6.roa (raw, json)
Hash identifier:          Qpw95Tb8Qex4bGIst3MgKmPLBdK9I7WeGAduXGf5NwI=
Subject key identifier:   76:F0:B2:ED:8C:8A:83:AD:F0:13:E7:63:F8:D0:ED:C9:43:F7:44:0D
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584B48E213F1B035811C49551600
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/600856f8-4185-35e8-bab6-a92c03e0e2e6.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     397211
IP address blocks:        2620:74:2c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e2:13:f1:b0:35:81:1c:49:55:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=74b5fc0b-a00c-4c7e-861b-51d2530942fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3c:a8:77:7f:52:87:f4:8c:92:31:85:55:df:
                    f5:82:3c:4f:6d:e6:7f:e3:65:6a:91:e5:00:85:c6:
                    7b:b9:d0:3d:74:72:b8:fd:12:1c:dc:5d:93:96:f3:
                    96:d6:9c:b7:23:f4:1d:1d:06:91:ee:db:61:c4:50:
                    44:8f:b4:c5:73:4a:a6:67:54:ca:dd:52:ec:72:4f:
                    05:59:6f:12:82:19:53:39:f5:fd:5c:15:96:ee:74:
                    9c:7a:d8:98:64:1a:32:60:60:72:ef:fa:a7:6f:b3:
                    1e:02:ef:4d:1a:21:c0:4d:83:3a:5e:70:9b:2c:eb:
                    d9:4c:8e:79:c9:4d:a0:86:fe:26:69:2b:a7:e9:8e:
                    7a:50:25:ba:05:91:a9:89:c8:8c:52:fe:b8:96:a1:
                    72:75:0b:28:c8:ed:01:3a:56:52:c1:f4:e5:67:78:
                    74:10:7a:bc:b3:00:73:2e:d7:37:2a:f5:d2:d0:4f:
                    a0:60:d8:20:97:79:ea:2a:e3:ec:52:4d:5f:cd:79:
                    c4:c8:7a:0c:ba:ab:e4:16:f3:31:56:b2:3f:16:12:
                    54:fd:13:79:53:df:e8:93:28:c3:f2:e7:31:b7:97:
                    e0:8e:35:56:4d:2b:f2:10:b4:8b:cb:97:f3:ae:e3:
                    04:fe:8d:14:58:59:67:3d:d7:a9:02:cb:47:47:a4:
                    e6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F0:B2:ED:8C:8A:83:AD:F0:13:E7:63:F8:D0:ED:C9:43:F7:44:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/600856f8-4185-35e8-bab6-a92c03e0e2e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:72:4b:9f:cc:d6:ff:4f:56:4a:d0:cf:de:de:40:52:9a:a0:
         73:30:24:30:8a:37:b1:a9:75:3d:01:63:cf:90:c4:ad:85:29:
         90:84:ab:45:28:e1:16:3d:84:46:f6:55:94:76:e9:bf:ac:b0:
         29:de:99:38:76:f2:d0:65:23:6a:e2:d4:23:1b:6a:04:97:8b:
         72:7c:39:58:bc:b4:08:de:70:dd:3a:a7:da:4f:f0:7e:78:64:
         32:8a:5f:e3:dc:ab:e2:b4:06:08:22:55:3b:58:39:4c:82:6a:
         6a:32:29:17:e7:cc:9f:65:64:90:b7:ff:12:6b:93:6d:81:87:
         72:25:c8:bf:ab:cb:db:ee:ff:70:52:74:47:6f:e3:91:cf:e2:
         0c:58:a4:c1:64:89:4c:18:e3:7e:aa:09:ba:71:e8:7f:de:eb:
         51:af:23:d3:5c:67:6c:b3:d4:23:12:91:ce:7b:b6:86:f9:31:
         b5:b5:e3:10:56:98:ec:80:8f:e1:18:49:b4:a6:a3:05:c8:d5:
         0e:82:69:9b:32:54:a0:0a:42:8d:06:4f:1b:92:0b:42:55:bc:
         2b:c5:c9:5c:c5:3f:b6:a6:1c:06:23:cf:04:50:cf:4a:69:74:
         4a:7b:90:8e:44:81:41:a6:95:94:b7:da:94:4e:d0:69:6d:1f:
         cc:1b:9e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:13:18 2025 by rpki-client