Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7fba7c1b-3af4-3956-9c22-38531dac1222.roa
File:                     7fba7c1b-3af4-3956-9c22-38531dac1222.roa (raw, json)
Hash identifier:          VOp+hwz7y7L6gYc+RevD23Nw6DtFrBiDN67A2WI217Y=
Subject key identifier:   46:8F:04:18:E7:34:52:18:01:57:90:1C:2E:90:97:29:88:76:CC:11
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584B6201E776BACA8766ACA4F480
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7fba7c1b-3af4-3956-9c22-38531dac1222.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     40647
IP address blocks:        2620:74:2b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:e7:76:ba:ca:87:66:ac:a4:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=1bb5e0ab-9c05-4650-8131-eee9dc8ff4cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7c:4d:a7:c5:35:5d:e7:a7:6c:b6:74:77:39:
                    a1:29:b2:73:c1:0d:93:0d:7e:4b:03:68:76:f1:30:
                    ce:7a:54:b4:40:88:ef:56:a6:f2:2c:58:38:a5:3b:
                    9a:67:86:06:03:10:64:97:3d:75:c1:f5:b7:39:74:
                    2f:60:bc:90:c0:af:7e:e4:ca:5c:fc:24:f0:f2:15:
                    18:9c:59:1f:8d:9f:f7:80:5c:95:a2:6f:a4:d9:ac:
                    57:8b:48:f8:f1:fd:3b:a9:b3:b6:b9:44:b4:64:c4:
                    5f:64:4e:c9:1d:17:75:36:12:e1:78:27:d0:49:04:
                    d7:a2:7f:fa:56:1d:21:11:d2:8f:c4:01:1f:00:f5:
                    6b:47:06:ab:3c:2c:19:86:c4:af:bc:26:ce:da:1c:
                    67:c2:35:91:e2:6a:4b:f1:f1:71:85:c5:61:af:38:
                    56:4f:df:48:3e:a9:3c:6d:1c:3e:d1:2b:3b:ba:ca:
                    de:13:68:79:47:43:c9:00:14:74:de:a4:08:2a:44:
                    59:dc:53:38:ba:ab:14:f7:6a:79:91:55:64:f4:87:
                    f5:b0:1a:75:76:dd:a2:f8:b4:53:9b:d5:9c:db:17:
                    d8:69:5c:1d:c8:7e:0c:4c:c7:c7:c4:bc:73:e9:42:
                    24:0a:be:16:da:6d:dc:81:b2:11:f8:6f:26:83:69:
                    55:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:8F:04:18:E7:34:52:18:01:57:90:1C:2E:90:97:29:88:76:CC:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7fba7c1b-3af4-3956-9c22-38531dac1222.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:5d:e0:81:90:7f:2c:56:81:77:14:d7:2d:17:8c:27:89:ec:
         9b:1f:91:48:57:49:1a:fb:10:11:55:4c:2d:1a:89:30:bb:72:
         75:6a:6d:d1:64:8f:8c:0d:c3:9b:cd:7a:b7:f2:d3:cc:d6:78:
         4f:66:0d:71:75:0c:8a:ac:6c:c0:0f:81:52:0f:e4:f4:73:88:
         07:dc:fa:77:ec:4a:e4:c3:ed:78:d4:18:7a:eb:bd:90:44:28:
         80:49:40:99:a3:3a:c8:d7:9b:34:ce:c7:70:18:91:a2:0d:c7:
         b6:db:63:33:75:81:f1:9b:d4:29:80:54:1c:3a:e1:f5:62:02:
         a0:54:58:5e:68:44:86:62:fa:23:06:b4:5e:85:43:c4:c6:5c:
         96:c7:08:a5:02:02:3c:aa:88:db:24:b6:7d:f0:b0:c1:d7:f3:
         dd:9e:5c:78:cf:94:e4:20:cb:22:dc:84:bf:68:37:9c:cb:11:
         36:19:5c:99:02:4d:8c:24:f4:45:46:16:fe:96:11:2a:5c:4b:
         9a:f3:81:6f:19:db:1e:84:ad:1a:51:ef:e0:c5:57:06:3c:2d:
         b5:04:94:08:96:4e:d3:2d:9e:33:68:fe:f7:fa:28:f8:34:49:
         df:27:3c:53:c1:c0:7d:7a:0c:ba:b5:10:22:04:69:16:b6:55:
         1d:53:91:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:32:45 2025 by rpki-client