Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/b9fed38b-7833-339a-a34b-0e0e40f943aa.roa
File:                     b9fed38b-7833-339a-a34b-0e0e40f943aa.roa (raw, json)
Hash identifier:          0p70HDgSrM4UT2l23v7IIICWQvbgY6lzsh5VQjJ5PfQ=
Subject key identifier:   4D:BC:A9:CA:D1:75:A4:E4:9C:FE:91:3C:09:09:56:4B:8D:EF:56:50
Certificate issuer:       /CN=7245cdbf-97d7-4376-9d8d-298cda5d3854
Certificate serial:       010D0C9F4328584A43DAFC5EAA03BF294EDB51C0
Authority key identifier: 16:E1:82:B0:4E:45:0C:2A:9E:DD:0D:F0:AA:AC:06:28:3E:D9:97:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/b9fed38b-7833-339a-a34b-0e0e40f943aa.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     32726
IP address blocks:        2620:12f:2000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/7245cdbf-97d7-4376-9d8d-298cda5d3854.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/7245cdbf-97d7-4376-9d8d-298cda5d3854.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:da:fc:5e:aa:03:bf:29:4e:db:51:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7245cdbf-97d7-4376-9d8d-298cda5d3854
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=e076e9b6-afe4-4cc8-95e4-aa8e9a243ec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c5:cc:d1:25:9d:38:04:a1:0f:aa:0b:5a:82:
                    3f:86:b3:6e:cf:b4:ac:c7:f6:b5:e8:15:b2:f4:88:
                    08:55:1b:c1:ef:4b:d3:de:14:35:bd:8d:4a:c7:74:
                    95:e3:16:6c:4f:76:eb:64:2c:9b:3a:34:69:79:3e:
                    9b:f7:7f:4b:a5:b4:a0:a6:c6:bd:8c:02:bc:70:38:
                    3e:b7:4d:8d:d7:40:76:47:82:11:15:de:df:8f:b7:
                    d9:69:74:15:ce:8f:0e:33:d0:e2:e5:a5:84:1a:ce:
                    d6:93:a4:ee:72:6c:91:e0:fd:47:18:7c:d2:78:51:
                    41:37:91:c7:39:42:c6:35:06:87:28:dc:d1:a2:f1:
                    ae:35:c2:d3:e6:6b:08:4f:ca:69:54:28:36:ba:02:
                    e6:cd:90:69:a0:76:12:5e:5e:7f:0f:21:2c:1b:9b:
                    6c:e3:63:f1:f4:8a:da:ba:ff:9c:a3:fc:ca:39:15:
                    ca:4a:9d:66:e1:cd:5e:9d:b6:a7:14:20:f7:dd:a6:
                    87:35:a5:68:8b:27:e8:4c:65:00:bd:80:2d:6d:76:
                    74:3e:34:15:84:8f:55:72:5d:17:87:9c:34:e3:ef:
                    1a:53:e7:bf:0a:69:d2:44:d4:8c:6e:26:ef:c5:82:
                    a7:1b:f5:e6:b0:6f:07:7e:c2:31:34:70:88:e1:75:
                    e8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:BC:A9:CA:D1:75:A4:E4:9C:FE:91:3C:09:09:56:4B:8D:EF:56:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/b9fed38b-7833-339a-a34b-0e0e40f943aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/7245cdbf-97d7-4376-9d8d-298cda5d3854.crl

            X509v3 Authority Key Identifier:
                keyid:16:E1:82:B0:4E:45:0C:2A:9E:DD:0D:F0:AA:AC:06:28:3E:D9:97:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:12f:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:d8:6f:42:88:ff:20:0b:d7:a7:d8:fe:05:a1:03:52:a9:67:
         02:8e:6a:90:ac:af:1c:04:5e:cd:47:b2:d6:34:b6:d8:2d:89:
         7a:85:84:7a:b7:8c:a3:4a:9b:72:9a:37:11:8f:8f:6f:e7:14:
         4c:28:75:8c:a5:d6:9f:25:39:8b:c7:cf:71:8d:e3:ca:a6:a2:
         4f:1e:9f:b6:c4:a6:b7:2f:0c:db:5c:4e:17:99:f8:4b:36:30:
         7c:9a:cf:69:fe:98:69:29:66:6e:2c:2f:ab:88:c2:77:1d:f5:
         e8:a8:86:5b:09:be:24:a1:8d:ac:c1:06:93:77:bc:f6:88:3b:
         44:1d:01:ca:93:29:e8:48:9f:c4:df:58:f8:fa:1c:69:88:9f:
         c3:2b:db:4f:77:23:0a:8c:51:a4:94:85:f4:5a:b3:91:b7:e9:
         c3:5b:e1:62:d6:5c:e8:0c:4f:be:e7:29:05:61:f3:78:7d:fa:
         f4:23:17:10:37:88:5b:ac:fc:61:01:74:19:2e:23:c0:b8:e8:
         c1:14:c4:b9:20:86:1f:4b:7a:15:3d:b9:ff:66:ce:25:df:03:
         41:9d:c2:dc:7a:28:53:cd:8a:69:f4:21:65:4a:ea:11:a1:35:
         9b:18:cb:5a:f4:7f:8c:1c:0d:21:3f:56:19:a4:4b:a0:4b:de:
         15:b0:1f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 14:45:34 2025 by rpki-client