Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/7c3c1da1-21fd-390c-8ec1-7380c91429e4.roa
File:                     7c3c1da1-21fd-390c-8ec1-7380c91429e4.roa (raw, json)
Hash identifier:          wdPB1e3JtFr3N9W+b9CQp7Y6zQjD/qfNx1qCrUHt7To=
Subject key identifier:   67:4F:E6:EE:D6:EA:CA:7C:C7:2F:B3:04:2E:AA:81:12:EB:9E:41:A3
Certificate issuer:       /CN=4091c99f-9cd5-4db2-8733-67e22036ebb5
Certificate serial:       010D0C9F4328584A4F05C958D4793B3E9AD0DEC0
Authority key identifier: 9D:EE:31:DA:BE:20:EA:2A:96:A5:4D:36:81:FA:52:AB:BE:72:25:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/7c3c1da1-21fd-390c-8ec1-7380c91429e4.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     32274
IP address blocks:        2620:11b:1000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/4091c99f-9cd5-4db2-8733-67e22036ebb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/4091c99f-9cd5-4db2-8733-67e22036ebb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:c9:58:d4:79:3b:3e:9a:d0:de:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4091c99f-9cd5-4db2-8733-67e22036ebb5
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=acb9048b-1d04-41bf-9a77-987c5fc7b7c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e1:8b:e3:f8:2f:0a:40:d4:c3:4a:88:e7:22:
                    7e:2a:00:8c:be:bb:c6:11:31:5a:00:5e:c4:2f:3f:
                    39:4a:20:d9:3f:f3:89:db:d9:b0:60:f4:17:c6:95:
                    e4:b3:35:30:8f:9a:d2:06:82:c1:4b:79:d3:1a:be:
                    79:6b:28:bd:93:dc:a2:43:11:7c:3f:5d:e2:d3:10:
                    f4:2b:e5:62:ed:b8:a7:51:6d:1b:68:fe:5e:01:a2:
                    82:d5:9f:47:70:eb:77:f4:31:c9:cc:ae:42:f9:2b:
                    8d:70:be:34:e4:c4:76:19:70:d4:56:a6:6a:b6:6e:
                    48:e1:04:f4:14:39:16:63:58:a0:a9:a5:99:a1:00:
                    f3:3f:8c:38:04:48:b0:2f:d1:88:d9:13:a2:0d:93:
                    2d:8c:43:aa:e5:46:4a:2a:6b:6a:c4:22:f2:90:4e:
                    fc:4e:9b:50:58:8a:4f:ac:cd:33:49:ff:99:b1:b3:
                    33:e7:59:64:9c:bd:85:c3:78:06:9a:09:b0:df:76:
                    1d:92:5b:6f:bc:e9:26:06:ee:a3:ea:0f:5b:9b:74:
                    f7:b1:f5:6c:eb:0e:0e:95:60:17:09:fd:ba:8b:69:
                    e5:4c:2d:25:a8:e3:35:63:fe:eb:ce:11:15:9d:b0:
                    7f:b4:32:56:3d:84:ac:4b:ce:ba:e1:d9:1a:13:95:
                    3a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4F:E6:EE:D6:EA:CA:7C:C7:2F:B3:04:2E:AA:81:12:EB:9E:41:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/7c3c1da1-21fd-390c-8ec1-7380c91429e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/4091c99f-9cd5-4db2-8733-67e22036ebb5.crl

            X509v3 Authority Key Identifier:
                keyid:9D:EE:31:DA:BE:20:EA:2A:96:A5:4D:36:81:FA:52:AB:BE:72:25:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11b:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:4f:1c:81:9b:42:1a:62:9e:52:d7:11:8b:99:33:1c:ca:9c:
         46:8f:10:5d:25:13:1b:56:ca:8c:93:4f:89:bd:4f:29:12:c7:
         5b:b0:6a:75:79:10:85:17:ae:f0:f6:97:d7:a3:1d:9a:7c:d3:
         e8:38:ef:6a:d0:99:4f:d3:c9:79:7f:24:e8:53:c4:31:ba:8f:
         79:56:db:42:c7:67:ee:e1:6f:bd:ec:44:25:5b:f1:66:1c:7e:
         2c:91:3e:38:87:f7:84:18:10:64:0d:4b:88:15:dc:9d:d5:df:
         91:a4:14:29:f9:10:30:1e:6b:41:3a:93:dc:68:09:db:48:a1:
         28:69:b5:89:74:fc:30:87:1f:15:31:b3:77:93:49:57:4c:66:
         be:c2:0c:1b:a6:93:31:83:83:75:a8:1b:3a:19:41:98:69:54:
         6d:ed:74:90:a4:e1:3c:28:2f:8f:ce:61:c0:10:9c:ac:1c:1f:
         e7:bb:ff:5d:8f:b7:37:b5:12:29:53:2f:b8:c7:bb:e2:90:17:
         f1:8c:99:1e:e6:b7:87:3c:ed:50:53:41:86:d9:06:51:97:f1:
         74:09:07:87:df:b8:e0:e5:69:80:76:5b:da:ea:9c:27:ce:83:
         35:04:07:4d:ce:2b:22:9e:0d:c0:9c:13:ee:2e:20:ba:b0:68:
         63:10:91:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:04:40 2025 by rpki-client