Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db8c3fe7-6cfd-3eb5-98db-7727fd6fce4b.roa
File:                     db8c3fe7-6cfd-3eb5-98db-7727fd6fce4b.roa (raw, json)
Hash identifier:          XPaXPMkhTsoVJ5hb+S8hd7SfEW+xXQjpi9zEjcExp+o=
Subject key identifier:   E7:9D:51:0C:B2:62:0B:61:44:1B:04:47:B5:B3:98:58:8E:69:71:A5
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584AA42B945476D911FB75C40880
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db8c3fe7-6cfd-3eb5-98db-7727fd6fce4b.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     36618
IP address blocks:        2620:74:2a::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:94:54:76:d9:11:fb:75:c4:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=3b56267f-99b6-469c-8a0a-136dc83a31a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:da:4d:ce:6f:d5:37:b7:ad:35:8e:2c:31:37:
                    90:f9:ef:33:07:23:bf:14:0c:11:1b:fc:71:52:17:
                    b3:4e:3e:47:48:d0:4e:6f:ba:cf:99:4c:1f:9a:1a:
                    a2:43:fb:7a:85:ee:ce:93:a3:65:23:5c:d7:eb:f1:
                    31:0a:61:03:b8:de:44:67:1b:4d:1e:88:d0:92:a0:
                    25:39:97:72:7d:fb:da:bc:19:85:f6:9c:73:fa:c1:
                    9c:9a:34:76:4f:46:e7:06:41:e3:ef:3c:4d:74:d7:
                    3d:dd:b6:e0:2a:c7:59:b2:df:83:86:98:98:b4:8a:
                    49:18:8c:ea:19:2b:56:99:95:11:3e:6e:b7:06:fd:
                    a7:73:b5:69:e1:13:0a:51:34:35:ce:4b:70:97:de:
                    33:89:c9:fb:e1:4d:92:2c:41:66:17:d6:6c:27:f0:
                    4c:30:99:3c:bf:32:1a:88:de:28:cb:91:85:e0:72:
                    8e:b6:74:94:c9:8d:28:60:25:54:6a:6b:1c:3c:3d:
                    f4:c2:66:94:cc:27:69:dc:98:15:4b:c6:91:ce:ba:
                    2c:64:d1:52:49:6d:47:2d:7e:34:60:b5:bf:43:18:
                    3b:98:d2:bf:66:12:87:26:35:c2:7d:43:95:b6:79:
                    3a:3f:a9:e3:2c:fd:38:2b:53:7a:65:c3:4e:e4:4c:
                    cf:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:9D:51:0C:B2:62:0B:61:44:1B:04:47:B5:B3:98:58:8E:69:71:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db8c3fe7-6cfd-3eb5-98db-7727fd6fce4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:e8:1c:05:d8:7e:16:f9:cf:48:bd:fb:80:eb:95:5f:e4:d7:
         60:49:90:21:94:f9:7a:e3:d5:98:17:eb:09:1c:28:ff:af:10:
         b0:cc:84:95:0a:2e:c4:73:06:cb:e6:54:c9:41:81:83:ca:ca:
         15:d3:3a:4a:32:9f:71:70:4f:ab:f2:ce:b0:a6:c9:c3:d7:c7:
         00:49:ca:fc:d1:c5:8f:e9:95:f5:4f:bd:19:54:bd:ee:f2:55:
         ce:f7:99:41:7b:1e:f4:25:91:6d:a1:40:23:73:7a:73:6d:f1:
         37:7a:c3:ef:a7:8d:7c:04:0a:82:b3:76:6b:c2:49:09:e4:a2:
         cc:6e:e8:33:49:47:72:4c:ec:c1:53:36:ac:0d:4e:30:bc:bb:
         18:15:a1:2b:8d:a6:b6:b5:b1:a8:6b:8e:5e:f0:79:1f:9a:e8:
         98:45:06:4d:40:64:16:de:0a:bc:cc:1d:4f:d1:6f:6b:21:71:
         6d:8f:ce:7b:fa:c6:44:59:85:34:f3:a1:04:bb:13:7a:78:2c:
         37:22:ab:93:df:e0:32:23:71:a8:10:2c:5d:36:89:c1:b9:38:
         14:c6:a6:00:b5:10:65:36:e6:25:29:7e:68:b6:4d:37:9d:3e:
         60:49:70:73:ca:4b:7b:59:b9:c9:48:20:31:ae:9a:6e:04:aa:
         60:ac:d4:ff
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqkK5RUdtkR+3XECIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk
M2I1NjI2N2YtOTliNi00NjljLThhMGEtMTM2ZGM4M2EzMWEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNpNzm/VN7etNY4sMTeQ+e8zByO/FAwRG/xx
UhezTj5HSNBOb7rPmUwfmhqiQ/t6he7Ok6NlI1zX6/ExCmEDuN5EZxtNHojQkqAl
OZdyffvavBmF9pxz+sGcmjR2T0bnBkHj7zxNdNc93bbgKsdZst+DhpiYtIpJGIzq
GStWmZURPm63Bv2nc7Vp4RMKUTQ1zktwl94zicn74U2SLEFmF9ZsJ/BMMJk8vzIa
iN4oy5GF4HKOtnSUyY0oYCVUamscPD30wmaUzCdp3JgVS8aRzrosZNFSSW1HLX40
YLW/Qxg7mNK/ZhKHJjXCfUOVtnk6P6njLP04K1N6ZcNO5EzPAQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFOedUQyyYgthRBsER7WzmFiOaXGlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGI4YzNmZTctNmNmZC0z
ZWI1LTk4ZGItNzcyN2ZkNmZjZTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq
AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBu6BwF2H4W+c9IvfuA65Vf5NdgSZAhlPl649WY
F+sJHCj/rxCwzISVCi7EcwbL5lTJQYGDysoV0zpKMp9xcE+r8s6wpsnD18cAScr8
0cWP6ZX1T70ZVL3u8lXO95lBex70JZFtoUAjc3pzbfE3esPvp418BAqCs3ZrwkkJ
5KLMbugzSUdyTOzBUzasDU4wvLsYFaErjaa2tbGoa45e8HkfmuiYRQZNQGQW3gq8
zB1P0W9rIXFtj857+sZEWYU086EEuxN6eCw3IquT3+AyI3GoECxdNonBuTgUxqYA
tRBlNuYlKX5otk03nT5gSXBzykt7WbnJSCAxrppuBKpgrNT/
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:53:31 2025 by rpki-client