Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/70e77b37-bfa5-3593-b194-66341a60ae52.roa
File:                     70e77b37-bfa5-3593-b194-66341a60ae52.roa (raw, json)
Hash identifier:          K2rZO5GQD6zOC3j0iXSCSRNsyFvxpb9x2hUgjgDyz/c=
Subject key identifier:   47:B2:E5:4C:D7:DF:40:60:3E:EE:73:F1:93:26:D9:01:DA:BB:06:1E
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584B715CDA9F11010258BFE81E80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/70e77b37-bfa5-3593-b194-66341a60ae52.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     396582
IP address blocks:        2620:74:2b::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:da:9f:11:01:02:58:bf:e8:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=3614ff55-5398-41f1-9a6d-c606aa96aaa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4b:35:ea:a7:39:dc:fb:e3:d7:0a:b5:d0:7c:
                    b0:d3:3e:d5:34:92:37:f9:c9:da:f7:68:ba:94:81:
                    fc:30:4c:e9:17:99:4b:be:09:d0:5b:bc:40:01:10:
                    81:03:95:1f:28:6a:fe:cb:3f:b0:18:c7:2c:d2:35:
                    69:a4:24:65:8f:9d:83:d5:72:36:f4:b7:ef:0c:92:
                    2b:37:54:81:25:7e:51:e2:2e:9e:29:24:f8:4e:0b:
                    ea:03:08:02:02:5b:ea:dc:be:e1:e9:d0:6d:1e:a7:
                    8e:08:43:ba:2f:45:3c:f5:7e:99:ec:ab:9f:17:68:
                    ad:64:5e:4f:aa:f2:41:cb:75:cb:8a:4f:67:fd:aa:
                    d3:ff:6f:25:76:cf:ae:5f:fe:82:eb:db:b8:95:4f:
                    1c:0c:c6:be:65:5c:0e:af:38:d1:d2:24:4b:ac:13:
                    9c:23:3e:73:37:88:31:aa:b0:43:f5:a7:e1:66:83:
                    c7:2a:d3:81:c4:e5:f5:a9:59:4c:b5:4f:16:24:ba:
                    5b:8d:1e:3d:b3:12:0f:ee:87:d7:19:54:75:62:ce:
                    bd:00:e5:3e:0e:07:d0:2e:a5:e9:82:7a:97:61:ca:
                    db:72:99:05:c0:87:86:15:4e:b8:dd:34:47:39:70:
                    36:f3:9b:7e:6b:da:ff:5d:43:03:dc:52:60:5e:05:
                    b2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B2:E5:4C:D7:DF:40:60:3E:EE:73:F1:93:26:D9:01:DA:BB:06:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/70e77b37-bfa5-3593-b194-66341a60ae52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:25:6f:e7:3b:45:d8:73:d1:8e:c1:49:43:6d:df:61:e2:3d:
         d9:11:8d:4d:15:fc:84:00:12:89:f3:f5:15:a1:39:8f:02:fe:
         3b:bb:73:0b:4a:be:08:0b:89:64:d8:08:c3:f7:2f:b0:93:8d:
         f3:67:2a:71:1d:4a:d8:08:af:0e:c5:f4:76:6f:83:75:fb:88:
         8a:5b:fd:e4:b2:f5:dd:ce:45:14:3a:d9:e4:d0:73:e0:cf:00:
         29:ff:de:a9:11:06:63:ac:c2:b2:7f:9e:7e:21:d0:b0:46:c8:
         a3:33:d1:85:6d:ea:78:65:b6:00:e6:c7:36:f7:ac:97:55:85:
         d3:aa:bb:42:61:86:44:b5:1e:e0:1b:ff:1a:b7:bd:49:9c:85:
         32:c0:6e:03:23:2e:1c:05:3c:dd:b1:ee:d3:ec:a2:55:d1:6d:
         e8:83:7d:4d:25:e5:65:d1:a0:00:75:6a:1e:a0:eb:e4:75:30:
         95:e0:ae:2c:66:66:86:e6:3a:85:a6:8f:8d:35:4b:ac:28:76:
         3e:9b:10:d2:eb:27:a6:18:12:41:ea:bf:c5:81:87:6a:4d:ae:
         32:2f:12:6a:c3:f3:78:0d:05:b2:24:d0:67:1e:53:bd:aa:9a:
         2b:fd:96:b2:29:91:92:a7:db:65:fe:9b:25:38:f9:ff:df:03:
         fb:96:c9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:47:57 2025 by rpki-client