Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e22e1de-01c6-3507-ab20-b881646f46fa.roa
File:                     8e22e1de-01c6-3507-ab20-b881646f46fa.roa (raw, json)
Hash identifier:          RXlhwwk/SbJuchE1e0p7x2QuGe/Kvmf64mGe1e5+li8=
Subject key identifier:   1B:99:E1:38:25:FF:44:D1:62:36:3E:C2:2B:8B:96:18:32:D4:0B:19
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584B715CD9E8F10874DC90454500
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e22e1de-01c6-3507-ab20-b881646f46fa.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     396578
IP address blocks:        2620:74:2b::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:d9:e8:f1:08:74:dc:90:45:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=5e10ee1b-e760-463f-9143-fd8dd378724b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:79:29:e1:dd:68:2c:00:e7:df:95:3d:ba:21:
                    69:5d:9e:d7:e8:75:6b:2d:c6:19:e5:c4:bb:85:8a:
                    a8:e0:4a:11:60:c6:42:e3:84:33:d7:46:ec:a6:65:
                    e7:92:ca:27:d8:39:a0:c5:f7:c7:6e:07:80:39:b2:
                    ef:6b:b1:a0:2c:b4:3e:ea:12:6a:af:03:6e:64:1f:
                    86:6f:93:db:51:96:e7:99:ae:6e:97:f9:d3:11:7d:
                    8c:f7:da:1a:31:ae:58:99:1d:4f:bd:14:e3:65:65:
                    a4:53:18:7d:d7:c4:9a:7d:82:7d:bd:7e:35:ff:72:
                    6c:7a:24:0b:f4:e5:9a:61:69:3c:f1:67:b5:d2:67:
                    ae:f1:1c:7e:41:70:44:93:03:48:c7:be:49:e8:29:
                    5e:d2:1f:9d:aa:0d:1b:50:b9:d4:db:65:af:b7:d9:
                    af:b1:00:e2:0a:4d:bd:8e:50:12:68:41:fe:3d:74:
                    8d:dc:99:43:d1:0f:f5:48:18:6f:1f:d0:46:e0:ed:
                    98:9b:7c:e8:f9:66:4c:b6:02:51:14:44:7c:ce:cd:
                    eb:aa:c6:1e:35:3f:14:e8:e5:e9:ff:33:dc:7c:50:
                    3d:a9:a7:12:ac:48:f5:f5:dd:39:e1:c6:8a:3c:4d:
                    bf:07:b9:15:4d:84:91:41:3e:f3:94:28:b1:e4:bb:
                    e1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:99:E1:38:25:FF:44:D1:62:36:3E:C2:2B:8B:96:18:32:D4:0B:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e22e1de-01c6-3507-ab20-b881646f46fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:e0:77:54:f8:11:eb:c1:20:fb:1c:97:a8:0f:19:1d:a8:da:
         c6:f1:49:f5:e7:38:4a:80:a4:3c:4e:b7:12:31:7e:51:70:ae:
         df:99:68:cc:81:dc:ee:39:45:4f:1b:81:14:91:e5:db:8f:60:
         45:16:e5:a0:55:f3:63:2f:f2:80:44:b8:5b:9a:47:b5:ac:21:
         b5:df:86:48:7f:fb:6d:ef:a2:8c:be:13:4e:53:51:6d:18:df:
         39:0d:20:76:dc:13:98:b7:fc:de:60:15:71:44:f4:cc:a7:0a:
         31:38:bf:df:67:db:c6:5b:07:b2:89:53:50:b1:8d:1c:71:cb:
         b8:7e:4e:e8:04:9a:b9:03:1c:80:b5:19:2b:8f:d1:f9:67:09:
         30:17:82:3c:b5:ba:0f:f6:12:bb:4c:8d:e4:97:db:2a:ab:5a:
         bd:29:c3:80:bb:9f:6e:24:f3:95:48:c4:70:47:b2:fb:5a:ff:
         a5:dd:b2:d8:c0:76:7e:07:b5:f4:35:8b:77:04:c3:b0:85:11:
         b5:bc:d5:e4:48:72:79:ff:01:e0:86:14:25:98:2b:2f:8c:94:
         44:ee:e0:8f:94:1a:2e:d9:8e:df:e7:e1:00:9b:a7:77:3f:df:
         30:62:ed:ee:9b:a0:89:85:33:83:c0:14:6a:f1:2d:cc:a9:18:
         0f:6d:e8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:10:04 2025 by rpki-client