Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b6b77ad4-1dd6-37d8-a3e5-2709ae17a66c.roa
File:                     b6b77ad4-1dd6-37d8-a3e5-2709ae17a66c.roa (raw, json)
Hash identifier:          B+3YYhZ5UBlErqUkH0aI5he+CXSp7nAtRQcuodX2X4g=
Subject key identifier:   AD:95:E1:D9:40:47:8A:96:36:AA:04:E3:C9:29:D9:1D:EB:8D:11:A6
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584A411066C51E27E4F77648DE2A
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b6b77ad4-1dd6-37d8-a3e5-2709ae17a66c.roa
Signing time:             Fri 20 Jun 2025 13:01:05 +0000
ROA not before:           Fri 20 Jun 2025 13:01:05 +0000
ROA not after:            Thu 18 Sep 2025 13:01:05 +0000
asID:                     396605
IP address blocks:        2620:74:2c::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:41:10:66:c5:1e:27:e4:f7:76:48:de:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jun 20 13:01:05 2025 GMT
            Not After : Sep 18 13:01:05 2025 GMT
        Subject: CN=713fd226-37cf-4107-a856-c576c13a9f98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a5:e3:a1:1b:30:98:00:cd:72:d5:5c:bd:2f:
                    65:32:c6:9d:e0:f3:f0:8b:44:3b:62:b4:b9:ac:8c:
                    38:89:f7:e0:00:e5:85:d8:ea:a7:a9:74:e3:fa:82:
                    41:4d:16:1c:81:8a:de:9f:0f:e8:b0:ce:dc:2c:8e:
                    67:5c:c3:5c:e0:85:9b:21:00:00:23:ac:59:d5:38:
                    a0:23:fc:da:50:48:91:1d:32:fc:80:0f:7f:6f:2c:
                    69:a6:89:05:b4:a5:3f:18:6b:9c:ef:24:4a:0f:16:
                    c2:2e:3a:23:6e:4c:2e:98:e8:a5:18:d3:d2:dc:e6:
                    31:cd:0d:ef:93:38:9d:b8:d7:c6:e3:9e:9d:45:c6:
                    ad:9b:ee:e4:e0:90:c6:c1:31:d4:9a:c8:71:f4:ff:
                    09:5e:a9:38:6f:14:65:2e:26:8c:94:64:87:dc:41:
                    da:70:84:41:40:9e:b7:90:c5:28:02:2a:4b:a5:33:
                    3e:50:f3:cf:b4:d0:4c:14:dd:1b:4c:df:71:9c:76:
                    07:fa:a3:09:f0:43:c5:2d:9a:20:1e:21:7c:ea:bc:
                    50:55:e5:39:b8:27:8d:8d:25:d4:2b:71:bb:3d:d2:
                    96:3e:9d:8d:cf:da:0f:8b:2b:7c:68:f0:c6:19:12:
                    13:8b:65:db:d2:d1:a2:64:6f:e9:64:1d:15:96:be:
                    45:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:95:E1:D9:40:47:8A:96:36:AA:04:E3:C9:29:D9:1D:EB:8D:11:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b6b77ad4-1dd6-37d8-a3e5-2709ae17a66c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:59:67:58:41:63:c5:fa:5a:23:54:61:67:68:3d:5f:84:b6:
         0b:ba:ce:29:8b:f9:4e:db:c4:8d:d4:c9:5f:0e:ce:40:c2:d4:
         59:e3:97:d4:d7:33:38:a6:fe:b8:ff:eb:f8:30:cf:7a:5c:77:
         81:85:81:0f:0c:5c:84:ca:d1:31:98:14:32:8a:18:db:5c:5d:
         cd:10:1f:de:d2:a1:cd:54:fd:10:e6:3f:08:78:e2:ea:6b:53:
         74:e1:de:a1:78:81:f9:67:ca:c6:cf:4c:37:7f:75:cf:b8:64:
         e1:aa:90:46:f2:1e:c0:23:af:75:df:c3:16:d0:a5:5a:f6:97:
         d7:dc:0e:92:b5:d1:de:79:cf:8f:89:f5:3a:6c:da:1f:dd:12:
         f3:14:56:7f:bb:8c:67:57:86:7d:29:5d:f4:ce:3d:75:b5:12:
         c9:83:b0:72:d2:a5:98:b7:bc:bc:4f:31:f4:c2:fe:7e:09:3e:
         88:35:8b:cf:8c:31:ad:0e:f2:bb:07:32:31:21:58:12:2c:22:
         30:91:12:61:85:5e:d5:8b:4f:79:39:ed:8f:27:13:78:59:e2:
         c9:8c:e3:f3:f9:34:9b:3d:fd:6b:31:4d:6d:49:48:4b:1c:5b:
         a2:15:a9:94:af:4c:bc:19:11:c3:ed:25:73:4e:9d:4c:aa:60:
         fa:b2:f5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 10:25:23 2025 by rpki-client