Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6463646d-b7e0-3550-9b55-c33ab05adf87.roa
File:                     6463646d-b7e0-3550-9b55-c33ab05adf87.roa (raw, json)
Hash identifier:          oMQk93BUXjzxvkt890I8EitfuBkRrRBS+EQpSSXbSm0=
Subject key identifier:   8D:47:04:BC:88:2F:1B:D9:63:8B:CF:DD:2D:EB:77:A0:9E:21:0F:AE
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584AF0F157E4FFB8AAABBD662800
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6463646d-b7e0-3550-9b55-c33ab05adf87.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     396609
IP address blocks:        2620:74:21::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:57:e4:ff:b8:aa:ab:bd:66:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=95dc168c-2a37-4c07-b2f1-74b217253d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:66:39:83:ac:ac:72:f6:fc:e4:cf:9a:c7:ad:
                    76:9c:1b:59:de:0e:05:1a:0d:a3:e4:34:98:e9:fd:
                    31:dc:91:92:6c:90:d1:7c:d0:df:39:10:a3:de:25:
                    3b:60:33:7c:43:26:ae:6d:71:56:fc:0e:f6:17:e2:
                    98:aa:2b:02:cc:cd:72:9c:9b:20:60:44:5f:08:a3:
                    4d:9a:67:39:28:c7:70:14:df:3f:d8:2c:f1:ca:94:
                    41:1b:c5:ad:1e:07:b5:02:6a:a0:10:61:b2:dd:fd:
                    03:1f:c3:f8:87:28:c8:f4:76:92:cc:ff:a0:0c:5a:
                    ce:58:fe:85:d4:5f:fd:de:4a:79:10:1a:5c:4c:5a:
                    f7:83:ee:b6:5c:b1:27:f7:66:cc:02:ad:d5:28:42:
                    4c:a5:9b:41:59:08:53:d9:6a:0c:ce:72:b9:28:f1:
                    9f:91:c1:26:fb:a1:77:1d:f4:69:94:06:81:b6:ef:
                    ee:29:cc:08:57:2f:03:83:6e:3e:d8:f9:70:ba:22:
                    cc:aa:5c:83:04:35:cb:6e:59:9e:05:a7:47:ee:42:
                    1e:1c:f4:b0:db:cf:3f:58:a4:e1:bc:c2:d0:47:99:
                    24:67:32:95:5d:bb:2c:9b:2c:ea:ea:af:14:a2:5f:
                    61:fb:f2:a4:38:e1:3d:ca:4e:d8:b4:08:2e:1e:70:
                    ac:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:47:04:BC:88:2F:1B:D9:63:8B:CF:DD:2D:EB:77:A0:9E:21:0F:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6463646d-b7e0-3550-9b55-c33ab05adf87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:af:ab:94:e6:8c:28:d4:e8:d9:9b:8b:56:e0:6b:fb:37:a8:
         73:64:02:10:ab:a8:29:bf:ce:55:81:c0:c4:fe:ae:bd:26:74:
         7a:56:b9:26:9e:2f:40:d2:59:93:3a:ea:4f:b7:c0:2c:16:f6:
         0d:cb:2a:f4:9f:ce:e7:6f:03:09:f5:a7:69:16:16:90:04:47:
         fb:09:83:dd:09:73:71:f6:23:c8:c3:a7:15:a7:ae:62:4f:a3:
         e4:60:c4:49:dd:b1:a6:7c:fc:53:4f:65:89:68:0f:51:18:58:
         25:1b:b4:f6:49:9c:6f:52:a1:63:31:b6:c4:c5:fc:19:6a:f2:
         1f:ca:0f:48:30:e6:6d:0d:09:ab:dc:88:5e:08:a8:fb:a0:a2:
         3e:59:74:08:07:c3:d5:17:f5:99:62:6f:9a:fa:5a:70:53:08:
         34:fb:ce:00:95:22:e9:d9:51:12:df:a8:1f:c5:57:4a:62:47:
         dd:38:d9:1c:76:54:92:d8:ea:e5:9e:35:02:b5:50:e5:e4:f7:
         9d:8a:bc:a6:8b:4d:6f:49:bd:d1:1f:a4:5d:5e:57:46:63:b5:
         49:0e:ea:4d:35:aa:1b:bc:4a:91:ae:35:50:ac:76:7b:75:3b:
         bc:8c:12:29:68:02:c8:4f:5c:91:85:ed:3c:72:93:f2:8a:79:
         a4:ad:4f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:45:28 2025 by rpki-client