Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8a3571a-2ada-3d1b-9943-2355e2f82e3d.roa
File:                     c8a3571a-2ada-3d1b-9943-2355e2f82e3d.roa (raw, json)
Hash identifier:          pX/u95QXmf5NBBFpUELGwaAC9UHyxwWB3MYcl2Cl0QM=
Subject key identifier:   4C:BA:2C:81:EB:81:CD:8E:4C:9A:04:FA:85:21:F2:07:07:E4:B0:12
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584AD9366F35322AB1A299F25740
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8a3571a-2ada-3d1b-9943-2355e2f82e3d.roa
Signing time:             Thu 14 Aug 2025 01:00:33 +0000
ROA not before:           Thu 14 Aug 2025 01:00:33 +0000
ROA not after:            Wed 12 Nov 2025 02:00:33 +0000
asID:                     396566
IP address blocks:        2620:74:20::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d9:36:6f:35:32:2a:b1:a2:99:f2:57:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Aug 14 01:00:33 2025 GMT
            Not After : Nov 12 02:00:33 2025 GMT
        Subject: CN=ab529738-7378-4d20-814f-fd678c5c3f19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a3:66:74:6a:94:84:8e:27:49:f6:0d:30:60:
                    06:65:db:9d:86:75:3c:ba:37:a3:77:72:a7:de:06:
                    cd:43:94:f6:14:e0:86:7f:aa:21:6e:50:d9:37:d6:
                    6e:a4:56:29:46:ae:2b:b5:85:50:0d:bf:21:b3:3c:
                    92:4e:9c:b2:17:aa:13:b0:24:7d:68:d1:69:24:87:
                    e4:88:d5:0a:ba:be:bb:86:05:d1:14:49:82:7f:97:
                    7c:12:7d:a9:a1:aa:c0:f0:33:c0:4d:f3:c8:4f:be:
                    ee:51:f5:b2:4b:88:72:8e:eb:a2:d3:c3:ef:c4:0a:
                    9c:83:c1:4b:8d:e7:a1:6b:93:fd:f2:c2:da:cc:cc:
                    a0:ef:c0:d6:7a:73:ae:06:fa:74:c8:47:c7:98:22:
                    a8:04:12:34:95:c6:96:91:90:d5:49:94:b2:0e:85:
                    33:ae:cc:68:ea:b3:51:64:7a:e9:50:c1:24:a1:a7:
                    a6:9c:a9:23:e3:03:df:19:18:ee:f5:16:ae:69:fb:
                    88:ff:e1:f5:64:40:18:41:ca:ef:59:42:da:ca:84:
                    6d:e9:26:8a:5a:d9:10:04:8c:ed:f3:3f:45:ec:5b:
                    5f:10:ba:1b:d8:41:59:53:25:90:c3:f3:0d:b0:a6:
                    24:0d:6a:bb:66:03:2e:91:89:98:b0:79:b7:3b:c5:
                    2a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:BA:2C:81:EB:81:CD:8E:4C:9A:04:FA:85:21:F2:07:07:E4:B0:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8a3571a-2ada-3d1b-9943-2355e2f82e3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:20:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:38:ac:86:51:20:99:b8:3e:7e:56:66:a1:fc:19:cb:83:86:
         19:e3:3c:e4:04:e4:d3:d3:3f:87:14:d8:ca:3a:69:e1:88:a7:
         82:2c:fd:12:83:c9:2a:4d:5a:f4:a9:f8:37:68:15:da:cb:4b:
         77:84:d5:ed:3e:ce:c5:c1:b9:6b:c3:69:bd:17:b4:22:7d:1d:
         5d:ec:e4:4c:94:f4:f4:c3:47:ce:ab:52:f1:38:c3:61:2a:cf:
         61:4a:e7:d7:79:3b:53:ec:e1:0f:86:84:5d:6f:46:93:f9:e3:
         87:b4:6f:b5:9d:3e:8f:ca:61:5b:7e:8b:fb:55:5c:10:02:78:
         5f:ee:82:f2:fe:9f:40:07:80:cd:29:19:c1:92:eb:75:b0:1a:
         71:f4:4a:89:83:9f:ee:85:4c:4c:fe:24:c3:a2:c2:32:28:33:
         35:95:2d:d5:97:f7:fb:1f:c7:3b:5c:7c:41:02:28:59:5e:ff:
         62:b5:ef:44:94:46:ae:05:6a:d0:e7:c1:b1:b4:6b:f8:12:be:
         bd:0a:46:40:63:7b:1c:fb:b5:e5:d2:fa:9b:15:32:20:f4:3f:
         e0:60:79:d2:a5:4c:b4:34:7b:0a:ab:8a:f5:47:c5:c6:d7:a0:
         ed:b1:e0:09:ee:3c:2c:b8:e0:ee:a3:21:2b:57:8a:33:fd:5a:
         fa:cf:1a:48
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErZNm81MiqxopnyV0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk
YWI1Mjk3MzgtNzM3OC00ZDIwLTgxNGYtZmQ2NzhjNWMzZjE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaNmdGqUhI4nSfYNMGAGZdudhnU8ujejd3Kn
3gbNQ5T2FOCGf6ohblDZN9ZupFYpRq4rtYVQDb8hszySTpyyF6oTsCR9aNFpJIfk
iNUKur67hgXRFEmCf5d8En2poarA8DPATfPIT77uUfWyS4hyjuui08PvxAqcg8FL
jeeha5P98sLazMyg78DWenOuBvp0yEfHmCKoBBI0lcaWkZDVSZSyDoUzrsxo6rNR
ZHrpUMEkoaemnKkj4wPfGRju9RauafuI/+H1ZEAYQcrvWULayoRt6SaKWtkQBIzt
8z9F7FtfELob2EFZUyWQw/MNsKYkDWq7ZgMukYmYsHm3O8Uq5QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFEy6LIHrgc2OTJoE+oUh8gcH5LASMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzhhMzU3MWEtMmFkYS0z
ZDFiLTk5NDMtMjM1NWUyZjgyZTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAKOKyGUSCZuD5+Vmah/BnLg4YZ4zzkBOTT0z+H
FNjKOmnhiKeCLP0Sg8kqTVr0qfg3aBXay0t3hNXtPs7Fwblrw2m9F7QifR1d7ORM
lPT0w0fOq1LxOMNhKs9hSufXeTtT7OEPhoRdb0aT+eOHtG+1nT6PymFbfov7VVwQ
Anhf7oLy/p9AB4DNKRnBkut1sBpx9EqJg5/uhUxM/iTDosIyKDM1lS3Vl/f7H8c7
XHxBAihZXv9ite9ElEauBWrQ58GxtGv4Er69CkZAY3sc+7Xl0vqbFTIg9D/gYHnS
pUy0NHsKq4r1R8XG16DtseAJ7jwsuODuoyErV4oz/Vr6zxpI
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:57:21 2025 by rpki-client