Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ca45df2d-e297-344f-a76c-d96bde0ce4e4.roa
File:                     ca45df2d-e297-344f-a76c-d96bde0ce4e4.roa (raw, json)
Hash identifier:          Ldn5c/JWaJOHnaOUyrfCN2AUO92relw7Vp5WRSi+N2o=
Subject key identifier:   C3:7A:B6:FF:AE:F1:E3:DD:16:68:64:90:B5:4A:9B:F3:1C:02:2F:F6
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285849C4D4DEA77D59B9130EAEE800
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ca45df2d-e297-344f-a76c-d96bde0ce4e4.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     211369
IP address blocks:        2620:74:2a::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:de:a7:7d:59:b9:13:0e:ae:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=53316fa1-49f5-49fc-82af-ebfef21fa0a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:69:80:bf:05:e7:2f:9c:eb:ac:13:9c:6e:ac:
                    09:be:8c:d6:31:72:03:8c:58:67:89:48:d4:33:f2:
                    5b:ee:11:e8:7b:5c:78:17:9a:c8:87:79:d2:ce:c5:
                    9f:42:15:c2:8e:2f:1d:99:cf:2d:d3:e9:98:0e:fe:
                    c1:01:91:29:77:e2:f2:2c:48:57:a6:c5:24:c2:84:
                    b0:44:b4:ab:d3:43:f3:63:8c:48:7c:c9:f3:92:9f:
                    1d:0a:3f:dd:6b:0d:d5:3b:11:d1:ed:37:2a:fb:de:
                    eb:af:ac:c2:42:e8:62:5d:4e:5a:57:cf:ad:b6:c4:
                    eb:b8:d9:3b:c2:72:03:1d:c9:d9:3a:63:79:d2:ad:
                    44:92:5c:8a:f7:4e:c1:21:4d:0d:88:e3:da:ce:f0:
                    17:15:55:d1:30:0b:7f:9b:cb:9a:58:87:1c:03:de:
                    11:f6:11:51:88:3d:14:58:57:48:ee:7e:af:ae:d2:
                    99:23:07:10:29:65:c8:48:69:b8:24:7b:33:7f:ef:
                    1f:bb:33:1d:5e:db:f3:a7:6d:dc:4b:32:ad:fb:0e:
                    ef:14:57:d7:8c:c1:26:ab:a5:59:1e:79:e6:c5:6a:
                    6f:a6:1e:36:f8:72:c8:a3:95:ee:df:a8:20:5b:05:
                    2c:d0:23:b7:65:b4:20:d1:93:1e:e2:78:9d:ca:e6:
                    b3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7A:B6:FF:AE:F1:E3:DD:16:68:64:90:B5:4A:9B:F3:1C:02:2F:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ca45df2d-e297-344f-a76c-d96bde0ce4e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:9f:77:ac:83:07:7f:2a:ca:57:14:86:91:86:90:5c:9c:00:
         7d:bb:ba:21:05:93:7f:21:ad:4f:34:31:34:ec:9b:5c:4b:86:
         d0:f0:30:48:c1:20:14:83:90:02:a1:5c:ee:27:ba:81:66:c9:
         b0:af:37:e3:51:b0:b4:10:6b:37:49:3b:a2:9c:94:89:b9:08:
         22:c5:de:7d:6d:e9:9a:d7:3b:e7:e4:a9:d5:4a:a1:24:36:73:
         c5:a6:8b:fc:3f:fd:8e:03:b1:eb:ca:8d:93:68:f3:20:2d:a6:
         9e:80:9a:d2:08:15:fc:20:89:bc:8d:ff:6a:ad:75:f7:95:f6:
         b0:7c:07:99:fe:b8:f9:02:94:52:9a:76:c5:04:0b:e0:0c:65:
         f6:ed:a1:c4:09:16:dd:8b:05:51:86:43:45:0f:46:26:32:87:
         72:99:9a:ff:37:7a:a4:dc:d1:f2:7d:f7:81:7c:84:b4:0c:bf:
         e8:c1:e2:e6:7e:95:3a:d7:ef:1c:d3:33:0a:a9:94:12:62:15:
         7a:12:e0:c3:26:04:3c:ab:2c:77:1a:20:85:c7:5a:71:35:12:
         36:22:87:4a:37:20:7b:41:52:9b:f1:a7:f5:b2:11:30:f1:1e:
         f1:08:5d:c8:d7:94:bd:c5:8a:9d:d3:34:59:e1:ac:b4:22:6a:
         d5:5a:8a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:21:36 2025 by rpki-client