Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9829d784-3d29-3474-8e16-a6975f237ae9.roa
File:                     9829d784-3d29-3474-8e16-a6975f237ae9.roa (raw, json)
Hash identifier:          cxYrVTN6DRtpUYCC66WDTUd3K8oQGtMS7AlQut0W5FA=
Subject key identifier:   3E:A0:48:E8:EC:40:F8:16:99:A7:64:25:85:AD:25:E3:AF:03:F6:00
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AD23C2E1C22F2986910D45080
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9829d784-3d29-3474-8e16-a6975f237ae9.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     397214
IP address blocks:        2620:74:1c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:2e:1c:22:f2:98:69:10:d4:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=19463210-c8b1-40a7-b111-be93d22353ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:80:d4:f4:72:11:56:c9:1c:0b:d6:d7:11:39:
                    22:8b:05:5c:a6:2c:6d:35:c7:95:64:47:55:2c:56:
                    fd:af:67:30:04:6d:2a:97:35:ae:bb:9b:e7:73:10:
                    2e:e0:95:bd:9e:ba:5d:d3:7f:5a:5a:dd:66:5c:aa:
                    5d:d6:75:f2:bc:1c:e1:7d:0b:d3:2e:09:7b:f3:b2:
                    a2:95:85:44:3a:1b:32:94:4c:06:8a:ad:f1:71:da:
                    88:18:4d:b0:70:71:32:df:b0:58:b3:18:ea:30:ad:
                    40:06:5a:7f:70:3f:ae:d6:91:aa:01:87:8b:e8:26:
                    d1:2f:2c:72:5d:19:10:8d:ff:0c:a9:dd:ac:8d:96:
                    47:21:c1:49:1d:aa:ca:ed:51:c5:b3:d7:be:56:cb:
                    2b:6d:ef:f0:c5:ef:b8:1a:06:e6:d5:09:06:7c:b3:
                    28:a9:8f:f4:f6:8e:ed:3f:15:69:98:ae:d2:6f:37:
                    32:62:79:37:90:c7:af:09:a2:31:71:9e:dc:06:33:
                    be:b0:3b:8e:08:f6:f6:cf:4a:0e:67:fc:22:ed:6b:
                    43:b8:01:f6:bc:f0:bf:ab:4a:eb:f5:95:48:af:53:
                    2a:6c:87:a8:44:13:fe:36:34:d0:b6:0c:31:36:ac:
                    d1:24:15:87:03:00:65:88:c6:35:0d:ec:9c:11:68:
                    2a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A0:48:E8:EC:40:F8:16:99:A7:64:25:85:AD:25:E3:AF:03:F6:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9829d784-3d29-3474-8e16-a6975f237ae9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:1c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:89:20:5d:e9:f6:6e:1d:c4:35:26:c5:22:db:e7:73:23:d6:
         fc:59:15:86:c8:c3:29:35:c6:dd:6f:06:29:c4:1f:79:59:6c:
         2a:b7:f2:dc:9c:3f:6b:f5:52:8e:d1:4f:f3:ac:bb:db:77:1e:
         a3:93:60:a6:9d:86:33:a3:26:1f:80:59:da:9f:fc:86:84:61:
         27:e1:9b:6b:71:2f:88:44:e7:ae:36:4c:26:31:66:2e:0e:88:
         6d:ba:42:04:fa:de:9e:16:8a:1a:6c:9f:66:23:49:b3:4f:88:
         27:2c:90:27:a7:6f:bd:ca:f0:cc:cf:98:dc:1a:c8:cf:21:a9:
         dd:a0:ea:75:94:56:11:bf:57:66:ec:27:d5:99:b7:6c:02:51:
         57:e6:b3:75:cd:ab:0a:ce:38:cc:7c:b1:be:d7:03:50:a3:e3:
         74:58:42:81:da:d6:93:bc:dd:f9:52:49:f1:6e:a6:7e:72:61:
         51:52:57:6a:28:e1:a0:4c:35:16:e8:16:5d:f5:22:76:17:e6:
         43:11:00:c8:dd:50:8c:fa:57:30:a1:a3:4c:a2:9b:15:27:d8:
         64:79:21:3d:97:f5:f2:7c:f6:06:1b:39:a3:af:86:46:77:a7:
         a1:6a:db:35:d9:8c:36:6d:ff:73:b6:6d:89:4f:ae:14:65:07:
         ac:d1:59:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:45:38 2025 by rpki-client