Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9f3ba32a-d161-3114-995e-5370559a8373.roa
File:                     9f3ba32a-d161-3114-995e-5370559a8373.roa (raw, json)
Hash identifier:          pC3LKmFP7Cde/pnsvHkghp3LZpCjXO2O2lnbx/m5fBM=
Subject key identifier:   76:F7:1D:04:14:F0:D2:78:9E:26:76:90:FD:50:EB:A0:4C:53:4D:58
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584B715CE06BE1F0A17895CB9280
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9f3ba32a-d161-3114-995e-5370559a8373.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     397206
IP address blocks:        2620:74:2b::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:e0:6b:e1:f0:a1:78:95:cb:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=2cc197ba-8fda-418c-9e18-0cf49ee908de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:04:bf:84:9b:47:fe:df:d2:90:b0:18:f7:62:
                    fa:07:48:90:68:59:92:2a:76:15:08:6a:04:28:1c:
                    73:0c:b0:7d:3c:77:e1:9a:c1:a4:3c:77:84:1a:83:
                    c3:91:7b:dc:76:47:c6:13:2e:63:26:96:7d:78:c7:
                    8e:52:68:4f:54:46:44:bf:2d:7c:df:f7:f7:21:2a:
                    e5:01:8f:c3:1f:58:9d:4e:99:49:4f:86:69:e0:b6:
                    13:4c:12:42:a9:b2:8d:6f:d6:98:04:8b:e6:8e:4d:
                    c0:29:2d:44:fa:9b:71:b1:ec:85:84:90:85:80:7f:
                    35:6c:15:db:ee:d7:24:37:b2:db:9b:ca:99:92:fe:
                    4c:c5:9b:33:81:09:37:5e:5d:72:d7:26:bc:da:65:
                    f3:1c:67:08:7c:96:ab:bf:e4:70:77:2a:28:f6:20:
                    6f:08:9b:48:f1:cf:07:9a:44:7b:6a:d3:42:c6:7d:
                    97:6b:89:38:fb:37:e7:3b:11:ca:47:cd:a6:04:4a:
                    1e:22:68:e6:d8:48:7c:88:b1:3c:5d:50:12:79:a8:
                    da:43:3d:40:5c:8d:62:2e:ed:72:e4:db:24:74:b8:
                    41:a3:f5:a5:3c:a3:e7:68:6e:a2:43:68:20:7f:fb:
                    05:f8:60:55:8a:42:05:25:c0:07:47:2b:2b:68:b7:
                    b8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F7:1D:04:14:F0:D2:78:9E:26:76:90:FD:50:EB:A0:4C:53:4D:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9f3ba32a-d161-3114-995e-5370559a8373.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:99:54:63:a3:77:03:2e:fb:d8:24:e5:0b:01:5d:d2:7c:ab:
         83:a4:61:d2:ce:68:20:3c:d6:04:d6:19:76:51:ad:75:b7:dc:
         6d:31:37:cb:55:56:72:83:dd:a8:db:6c:b5:da:4d:ea:9f:05:
         01:60:0c:a5:49:e4:3a:02:7e:f2:ce:2c:f0:90:9b:97:b9:91:
         8d:5d:45:47:b8:fa:d2:e4:39:df:3c:9d:80:be:59:af:23:94:
         a0:3a:eb:5c:eb:46:de:97:e8:88:55:d3:a9:24:a0:68:95:da:
         29:0f:ea:e2:cb:00:b0:5b:a3:c7:49:a7:98:e5:d5:37:15:af:
         0f:e5:8e:4f:ba:e5:9b:04:23:3f:eb:8c:9e:ad:10:77:fa:01:
         99:cd:1e:bc:fd:1f:bd:c7:cd:89:b6:f6:cc:15:37:8e:a9:25:
         0c:8f:1d:e9:88:30:6b:18:9e:5a:70:ca:52:35:c5:69:ca:e2:
         bc:8c:f5:fc:7a:57:bd:c0:4b:8e:5c:ed:7b:64:7f:c2:6d:e2:
         86:0d:63:37:c4:45:72:30:70:3a:2c:47:50:9e:fb:e9:c6:d6:
         3c:f4:34:55:c4:59:ed:4b:91:ee:1a:fe:f4:1b:1a:13:03:68:
         20:dc:09:b6:89:be:fb:c2:fd:91:92:b8:4f:8d:f2:22:27:e4:
         6a:66:3c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:54:40 2025 by rpki-client