Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/adfbd151-1f3a-35d7-8b5c-4aa027dc18f8.roa
File:                     adfbd151-1f3a-35d7-8b5c-4aa027dc18f8.roa (raw, json)
Hash identifier:          SpDpIzLeWinldZfUoYTvWn9UP0hVSErJZ8ZmfXtcuT4=
Subject key identifier:   FF:DC:CF:65:D5:88:3B:08:53:5F:03:53:1C:1C:DA:B5:FC:07:EB:5D
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584B48E2117E760CB01F43EE6900
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/adfbd151-1f3a-35d7-8b5c-4aa027dc18f8.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     36628
IP address blocks:        2620:74:2c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e2:11:7e:76:0c:b0:1f:43:ee:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=093e4d6c-aad2-4bdc-9617-25935fd788d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:03:82:ce:48:ee:32:98:3b:69:c8:e3:43:1a:
                    aa:ee:e9:0d:56:84:a3:97:8b:0a:9c:67:5d:4f:c5:
                    64:b4:83:03:ec:21:40:95:70:a9:5a:df:6c:b7:10:
                    3a:36:c1:aa:1c:c3:76:fb:c5:cb:38:d2:33:ff:f9:
                    cb:d2:1b:3a:28:ad:a6:58:10:05:b9:58:21:36:82:
                    b9:26:df:5f:d1:33:3a:81:d8:ea:5c:45:2a:1d:f3:
                    07:f5:bb:71:8e:41:ca:51:13:17:17:36:56:21:ec:
                    b3:32:67:1c:f7:a8:a0:b9:96:2e:86:b3:7b:e1:34:
                    93:10:fb:7f:d8:28:3f:8e:9c:e7:15:04:50:aa:c3:
                    27:96:eb:fa:ef:e0:5d:ec:d2:36:54:fb:fe:e9:e0:
                    97:a9:10:c6:78:27:75:05:87:fa:ce:dd:ae:ec:fd:
                    6a:cd:ab:f7:cf:b4:8e:c2:35:ef:91:56:0e:2e:de:
                    62:ba:ba:2d:f1:51:71:99:9a:93:7f:06:86:cd:a6:
                    5f:27:0b:d1:46:7c:dc:ba:b3:b1:d5:bc:2a:5c:c5:
                    0a:03:00:05:d3:09:47:4a:6d:ba:4d:3f:d7:a5:48:
                    8e:bd:55:86:47:6d:0b:47:c5:bf:f1:bf:0b:77:96:
                    20:c6:14:22:31:be:8f:98:aa:86:d2:43:a9:7b:03:
                    93:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:DC:CF:65:D5:88:3B:08:53:5F:03:53:1C:1C:DA:B5:FC:07:EB:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/adfbd151-1f3a-35d7-8b5c-4aa027dc18f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:b7:37:dd:87:7f:5e:17:bc:c9:46:82:d5:03:b2:4c:f3:0d:
         ed:61:ca:53:dd:ba:69:49:7e:6a:db:ca:ba:26:2f:e8:f1:46:
         69:14:ee:cb:7a:5d:af:c8:a9:85:0b:40:37:16:4c:fd:06:cc:
         fa:44:b4:cd:34:c0:df:a4:b7:00:34:c1:27:00:aa:7f:28:75:
         51:bd:f1:af:41:31:60:32:d0:f0:00:81:40:57:0b:c8:00:d3:
         74:18:f3:30:a2:9b:1b:d7:3a:e4:fa:78:da:27:a9:54:70:c6:
         95:d0:07:a5:3d:96:17:20:f7:a9:83:aa:1c:1b:7d:70:76:2a:
         39:51:f8:89:c2:5d:a1:71:5c:44:ef:20:55:b1:77:ae:b0:22:
         dd:75:9a:5e:5f:9e:75:52:28:70:6e:20:90:b5:d6:12:df:96:
         eb:78:d5:6a:41:60:76:3f:61:9c:d9:fa:d4:ae:aa:56:69:5c:
         44:ba:c6:8b:0c:34:f9:e1:a7:57:76:af:fa:23:9a:63:d4:8d:
         ca:6a:58:fa:28:fc:18:2a:d3:d2:5e:39:02:4e:1c:3e:31:7c:
         95:11:74:08:39:cc:01:6b:12:3f:b0:63:54:be:f3:9c:9c:da:
         0d:67:64:f2:81:4f:f7:4f:23:6f:60:f7:87:dd:38:67:72:2a:
         3e:00:4b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:17:22 2025 by rpki-client