Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/64a1b0c2-a5ad-31b0-85cb-9ded2189866d.roa
File:                     64a1b0c2-a5ad-31b0-85cb-9ded2189866d.roa (raw, json)
Hash identifier:          VC6INWqyRGP09LlAnluP90LijsRryN1+n7z6PUCIqK8=
Subject key identifier:   70:DF:CF:3D:4B:F8:D8:9A:74:AB:1F:1E:1B:77:7B:65:26:73:E0:26
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285849D164FDFD2F7C0107E48F2BC0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/64a1b0c2-a5ad-31b0-85cb-9ded2189866d.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     0
IP address blocks:        2620:74:26::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:64:fd:fd:2f:7c:01:07:e4:8f:2b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=47d45405-b7ab-48d6-9b0d-a51fb5872e2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1c:d6:15:b0:ef:58:b9:0d:4b:dc:36:45:fe:
                    89:29:5f:ed:5a:05:32:72:a9:c3:cf:e2:64:cc:c1:
                    53:fb:ef:55:5f:16:eb:c7:6f:70:fd:82:73:ad:c1:
                    f6:1c:cb:c5:27:3c:08:5e:02:f5:e6:cd:93:3c:00:
                    07:3d:f6:3b:f2:16:3c:f6:07:b7:69:be:e1:91:1a:
                    3e:22:cf:cd:d5:ce:b7:4d:59:8a:f9:19:a2:3e:ab:
                    50:f8:02:52:f0:be:c9:a0:47:1d:55:ec:4b:8d:3d:
                    de:a4:76:b6:56:82:d6:81:c7:3b:44:8e:6e:ec:5e:
                    78:93:9d:30:fd:8d:de:02:a9:a0:2c:77:e9:ef:4f:
                    5c:81:0b:87:77:8c:12:de:90:b9:e8:d3:d6:68:fe:
                    8b:81:e0:46:6f:18:44:3a:8c:ff:f8:93:2f:a4:af:
                    d0:91:d2:1b:bc:f0:b0:c4:80:f3:16:63:c4:98:91:
                    59:1a:57:6c:79:c5:bd:5e:13:ee:50:f6:46:db:98:
                    ae:b4:d1:4e:88:c2:b8:ef:56:39:e1:8b:60:bc:e4:
                    84:db:ea:57:bd:22:71:ae:b2:c3:c2:97:22:d0:c1:
                    b0:34:56:7a:5b:ba:d3:43:0f:5c:e9:50:d0:8f:5d:
                    48:20:e3:96:2c:74:ef:fb:b6:ce:a5:9c:71:7c:af:
                    6f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:DF:CF:3D:4B:F8:D8:9A:74:AB:1F:1E:1B:77:7B:65:26:73:E0:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/64a1b0c2-a5ad-31b0-85cb-9ded2189866d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:26::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:a1:f0:ab:57:3a:b6:db:3f:71:bf:36:16:d9:74:2a:09:e7:
         ab:d2:13:0f:4a:ca:8d:80:e7:f6:03:6d:dd:c0:45:1a:99:bf:
         2c:96:b9:e3:0a:4b:87:4a:04:b9:8a:cf:93:e2:04:b9:d5:41:
         fd:8e:1c:78:a5:73:48:15:ab:0d:ee:2b:00:c7:86:50:d7:8a:
         e5:df:ad:a4:e8:a4:2e:3e:2a:3b:97:47:b8:e0:ed:84:75:df:
         74:4c:91:32:21:a2:7f:66:92:09:b3:50:54:8e:b2:ec:bf:1b:
         ce:3c:20:e4:6d:66:32:46:d8:1e:0e:0d:92:24:cd:e9:cb:0d:
         ac:0c:49:80:a9:63:50:c6:c6:a8:0e:b9:3a:6e:89:20:52:fa:
         35:16:25:37:99:bd:b7:3f:a3:0b:cc:87:66:e9:ee:65:3e:8d:
         51:67:43:7c:09:df:dc:9c:91:b7:58:2d:72:ac:d8:b5:a2:e7:
         77:e9:4e:00:5e:84:fe:f5:a5:80:fd:c9:70:97:64:94:d4:0b:
         56:36:f3:21:ee:45:fe:5f:53:14:fe:f3:49:ad:ec:e9:5c:f8:
         30:e0:d8:46:08:39:2a:de:60:25:98:45:52:bd:e4:76:07:c0:
         5e:52:9e:ff:34:88:4a:87:8f:c1:59:aa:e0:a9:3e:bf:c9:97:
         9d:8c:21:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 02:37:16 2025 by rpki-client