Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aa2aecad-9abe-3f36-8a1f-61992f732f3a.roa
File:                     aa2aecad-9abe-3f36-8a1f-61992f732f3a.roa (raw, json)
Hash identifier:          WE4EsuIVSzIsX/x/cPe7wz9cU3UGXDWvLCKWEXVFwis=
Subject key identifier:   69:5F:CB:04:CC:3C:CC:29:5A:05:4C:51:39:9D:C2:70:43:D2:18:63
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AD23C2D24F4C9CD2E985BCF80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aa2aecad-9abe-3f36-8a1f-61992f732f3a.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     397232
IP address blocks:        2620:74:1b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:2d:24:f4:c9:cd:2e:98:5b:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=1af22f8b-ba56-4e5e-9eca-c7f25f357518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:29:f7:e9:ec:a0:d9:d7:80:2f:58:ad:54:ed:
                    9f:44:9a:f8:aa:19:b8:52:40:da:f1:3a:47:3c:f3:
                    37:79:72:4a:5e:88:60:9a:33:13:f1:9b:92:1b:3d:
                    33:f4:ea:75:e8:7a:f5:c6:75:f9:52:a7:b7:41:2d:
                    e6:6f:3f:46:dd:c4:26:54:81:70:19:7c:78:99:b1:
                    8b:fd:f2:0f:d4:ed:22:a0:d5:ad:f2:5f:c4:1b:c6:
                    5b:22:8b:a0:97:1d:00:cf:f9:93:ce:6f:6e:4a:e1:
                    0d:78:66:cd:9a:f5:02:a5:f3:9f:c0:f6:75:3a:da:
                    63:1d:2b:bd:8f:84:98:46:29:a5:73:b2:cb:e5:94:
                    4b:07:02:07:95:12:ab:05:ed:f0:0d:14:71:77:02:
                    a7:eb:a9:e6:a9:a6:0b:ef:53:6e:79:71:0b:d0:08:
                    12:7b:4f:9c:ed:a8:f6:53:42:9d:9f:69:a9:96:14:
                    55:56:d0:98:44:7c:f3:73:be:18:53:2d:59:62:7b:
                    6a:15:0f:3d:25:fb:ad:04:be:0f:cb:9c:a1:c4:db:
                    65:0b:bc:d8:4c:2d:1c:99:de:2a:ad:0e:55:59:da:
                    bf:e7:97:6a:6f:58:a3:2b:0c:e0:49:10:1a:5b:78:
                    cd:73:a4:cd:19:81:96:c1:71:f0:83:75:a4:d0:5e:
                    75:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:5F:CB:04:CC:3C:CC:29:5A:05:4C:51:39:9D:C2:70:43:D2:18:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aa2aecad-9abe-3f36-8a1f-61992f732f3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:1b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:7e:36:a6:2b:cd:1c:be:6a:46:0c:46:86:e4:77:c4:06:df:
         5e:fc:24:1e:00:79:ed:ef:c0:aa:93:4b:6b:4d:b7:e1:1a:05:
         43:af:07:f4:10:17:a9:11:c9:9a:a0:c9:aa:19:f8:79:43:8f:
         a8:53:8d:75:64:03:e5:54:47:c2:95:99:2d:82:b2:cd:a7:ad:
         28:6b:ef:ae:8d:ce:44:b9:ee:8c:3a:30:3d:13:ff:a4:10:4d:
         8d:35:3d:6c:fe:30:9d:b1:00:cb:b1:31:f0:45:95:85:9d:bf:
         8f:b3:bc:af:e4:90:5f:c2:43:70:96:57:83:a9:58:0b:1c:2b:
         27:20:67:04:24:f4:ad:a9:c8:f0:e6:bf:74:4a:50:1f:6e:bc:
         85:95:a2:3e:09:3c:ca:90:ae:52:b0:c8:fe:45:3c:5e:63:cd:
         de:6b:83:0d:6e:91:5d:57:97:2f:4a:88:77:d4:8f:41:c9:57:
         9f:ed:1c:59:54:a7:7b:72:38:f1:87:53:6c:51:7e:c8:6e:8c:
         93:08:a3:7f:cd:8e:42:51:c5:b2:36:59:dd:0c:27:77:bd:b2:
         04:ed:78:69:69:94:9f:df:e4:33:66:ad:a3:7d:9a:88:4f:83:
         46:b7:0f:78:78:b0:e7:e2:3f:c8:05:32:9d:2a:00:29:15:97:
         b1:cc:f1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:11:09 2025 by rpki-client