Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/696c5d09-cffc-320b-8378-730affdd5075.roa
File:                     696c5d09-cffc-320b-8378-730affdd5075.roa (raw, json)
Hash identifier:          pKbqUJmAagSzZZcYCuzC/FAHoUCPEhxLualXQK9Bt6Y=
Subject key identifier:   D6:F4:9E:29:71:00:41:E7:92:B6:04:9D:7A:36:E8:2C:91:98:01:AF
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584B3557013BFA11DE415E984D00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/696c5d09-cffc-320b-8378-730affdd5075.roa
Signing time:             Tue 16 Sep 2025 01:00:33 +0000
ROA not before:           Tue 16 Sep 2025 01:00:33 +0000
ROA not after:            Mon 15 Dec 2025 02:00:33 +0000
asID:                     36628
IP address blocks:        2620:74:2c::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:35:57:01:3b:fa:11:de:41:5e:98:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 16 01:00:33 2025 GMT
            Not After : Dec 15 02:00:33 2025 GMT
        Subject: CN=39403f62-9d74-48e7-935d-9b940776add1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b0:06:7a:57:81:5c:dd:b3:da:31:bf:ca:e2:
                    4e:a5:3c:21:f7:0d:bc:d0:7a:87:9a:d6:2d:f3:08:
                    dc:d4:a3:17:89:69:b9:c0:c8:9a:5d:f9:84:a2:53:
                    49:7b:a3:9a:84:6b:69:65:70:fd:d2:b8:1d:9f:4f:
                    8d:26:63:50:b9:ae:b3:70:f5:d5:d8:aa:d9:61:6d:
                    27:25:d7:f2:4e:79:11:25:f6:94:8f:97:3d:87:d8:
                    3d:ba:f7:7b:cf:e2:54:a5:54:4c:bd:c8:c3:e5:c9:
                    a6:a8:39:42:a6:d7:8c:21:dc:2c:37:e2:35:54:08:
                    16:d2:39:76:1d:f5:97:73:2b:5b:b4:16:ed:0c:a9:
                    ba:28:73:0d:19:07:d2:51:7f:74:24:49:95:be:03:
                    73:90:3c:8f:f2:bf:7f:53:6a:6f:f4:4e:f9:6b:e1:
                    69:ae:6e:e2:6d:04:ab:03:84:f9:6d:a8:c6:05:b1:
                    40:65:3a:ec:48:0f:6e:e2:db:54:d5:41:52:27:e2:
                    99:c6:3e:18:b8:92:a4:d3:13:30:8f:60:9e:db:6a:
                    d6:1c:48:b7:7b:10:0a:af:96:5a:01:28:a1:27:d4:
                    b3:b5:c3:7a:4e:3d:3a:2f:6d:96:a9:d1:97:03:ef:
                    28:f0:a6:82:5c:2e:1c:a0:8f:12:63:3c:cd:99:d8:
                    6b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F4:9E:29:71:00:41:E7:92:B6:04:9D:7A:36:E8:2C:91:98:01:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/696c5d09-cffc-320b-8378-730affdd5075.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:f0:bc:ae:86:ef:ae:36:84:ac:9a:d0:be:b7:47:19:f7:bb:
         6f:9a:6d:d7:bd:b7:8d:a7:4a:94:6e:53:e2:51:34:18:db:72:
         11:69:0f:8b:11:de:9e:ab:d7:7f:0c:e8:85:c2:9b:cc:e7:9b:
         9b:16:31:8b:0b:e8:05:b4:8c:fc:d7:cc:ba:60:ea:ef:8a:ad:
         a3:40:58:34:24:35:4a:cd:6c:e9:cb:f1:06:3a:14:c8:6d:fb:
         13:0a:9c:75:5e:d9:bd:58:e3:4a:25:7e:1d:06:b7:66:4a:af:
         1a:bc:02:85:8d:55:d1:60:6a:e4:4a:88:0c:4b:48:00:0a:38:
         1d:f4:12:c7:ae:00:36:04:38:8c:ad:7c:c6:75:ba:9f:60:a1:
         17:7d:1f:7d:cd:c2:43:4a:1d:84:56:44:4b:f8:80:ad:1c:d9:
         f0:b9:92:6a:ac:70:30:c1:27:a7:1b:b9:5c:44:59:66:88:5c:
         29:a2:73:63:b2:8f:47:d9:f2:8f:6a:cb:63:f2:17:39:de:61:
         cb:a1:7c:b5:16:e6:41:64:55:7d:f6:57:2f:b7:f2:e5:77:06:
         d4:57:e1:2b:a2:f9:72:73:bd:cb:ff:81:97:21:1a:44:bc:0f:
         a2:5d:91:9c:26:2e:b9:69:b9:8d:f6:64:12:a8:5c:71:fc:8f:
         27:70:e1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:31:00 2025 by rpki-client