Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fab68e01-f3f8-3a5c-87e7-e04ec443763b.roa
File:                     fab68e01-f3f8-3a5c-87e7-e04ec443763b.roa (raw, json)
Hash identifier:          MLGLx76HdxBzTfboTpzyoh1Giox2TehbhZAWlXT+GQ4=
Subject key identifier:   33:24:DF:55:D9:83:BF:A2:31:11:4B:08:19:41:A7:CE:40:18:64:9F
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285849B14A2E593F32BB526F537880
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fab68e01-f3f8-3a5c-87e7-e04ec443763b.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     36623
IP address blocks:        2620:74:2b::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:2e:59:3f:32:bb:52:6f:53:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=aec3d36a-ad4d-41da-8bc7-e85b3b72b175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ef:cf:0e:57:6d:27:90:2a:9a:80:60:19:ab:
                    a9:6e:05:b7:59:2d:9c:39:c1:9e:ad:b9:3a:53:ca:
                    62:82:a2:5f:c9:f5:4e:fe:ed:b7:d0:47:72:ab:e8:
                    e2:07:ad:90:43:40:c9:f3:b4:a5:51:7f:92:1c:c9:
                    e8:a5:22:8e:f9:1a:06:1b:52:01:8a:64:68:51:af:
                    e3:2f:6b:32:53:7c:fe:b9:37:17:5b:e1:6b:19:19:
                    7c:97:8d:80:6a:05:b3:2a:be:c1:b1:f0:25:80:69:
                    12:ba:52:de:54:b6:90:84:11:1c:6f:07:22:43:ba:
                    97:16:b3:15:61:6b:0d:76:b7:b6:58:4b:e1:92:39:
                    eb:65:dc:3f:e5:69:b8:1a:99:4d:65:b8:b3:cc:42:
                    2e:e5:a9:94:f1:80:a2:d9:09:c1:08:2a:2a:60:08:
                    d3:a3:90:52:cd:12:75:59:6b:3f:be:38:58:e5:06:
                    77:d5:d1:d7:e5:f7:58:65:c3:3f:8e:ba:3c:01:e5:
                    80:70:16:13:74:61:e8:ce:ac:5f:fa:31:e6:79:7d:
                    f4:2d:53:15:21:2d:98:8c:d9:c9:21:8e:df:a5:ad:
                    52:e8:b0:a8:ec:a5:75:7a:22:0d:be:b5:df:89:77:
                    0f:69:bb:0c:6b:63:f0:70:57:6c:fe:e3:f6:fc:40:
                    7c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:24:DF:55:D9:83:BF:A2:31:11:4B:08:19:41:A7:CE:40:18:64:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fab68e01-f3f8-3a5c-87e7-e04ec443763b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:aa:af:78:db:57:e3:2e:38:38:dc:47:4c:96:94:f3:0a:9c:
         84:65:b6:a3:ee:91:e4:d2:3a:4e:9f:72:41:be:53:58:cb:b9:
         91:43:0f:99:2a:2b:fe:bf:fd:03:6e:f4:e5:0c:5c:e3:b2:2e:
         30:54:97:db:d1:df:0e:9e:7a:ba:05:0c:8c:b7:d3:35:81:c5:
         2b:12:a2:62:6c:05:7b:c6:44:34:21:ab:47:08:26:0d:e7:84:
         c4:7c:4a:9e:8b:df:56:5e:0d:e8:7e:82:64:dc:90:bc:31:11:
         5c:7c:00:21:15:99:fd:d4:58:d7:03:cc:bf:4a:a8:73:16:dd:
         08:51:70:fb:8c:d3:94:86:7f:fb:ad:cf:a1:a5:cf:56:88:9c:
         ac:c7:5e:2f:bf:12:6c:3f:a9:9e:3c:a1:f6:dc:cc:e5:2a:1f:
         67:5a:75:ce:c9:44:20:02:fc:6e:67:cb:cb:0e:d6:bc:f9:47:
         5f:82:ce:30:38:86:28:e0:2d:8e:4c:32:05:2d:7a:3b:e6:30:
         f6:90:c5:27:60:c3:27:14:10:88:d3:ec:d2:61:70:18:3a:2f:
         fa:31:5b:38:43:a6:fb:74:05:f2:56:db:d0:d6:9a:2b:94:be:
         ca:d8:fa:ed:a9:7f:5e:e9:c2:ee:1a:64:52:86:c0:80:4f:ab:
         0d:c3:23:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:32:04 2025 by rpki-client