Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b8799f0-aa9a-35f2-a5cd-53f0bd116852.roa
File:                     0b8799f0-aa9a-35f2-a5cd-53f0bd116852.roa (raw, json)
Hash identifier:          Oiz9AfFFxQ0GYFH9zaJdxQmhvmBEqLK3oPp5hJf5YFg=
Subject key identifier:   99:CC:01:D1:27:ED:C0:BE:4F:69:3C:6A:AE:AB:0B:41:72:8A:F0:4E
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584A90A0EDA83A16ED962F739E00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b8799f0-aa9a-35f2-a5cd-53f0bd116852.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     396581
IP address blocks:        2620:74:2b::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:ed:a8:3a:16:ed:96:2f:73:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=0f5f74bd-33ef-4546-a29c-fa98f2da43c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:7c:5a:64:a6:bc:35:78:f8:b8:54:62:af:24:
                    dc:47:9b:20:1d:04:27:0b:5d:06:10:27:2e:4d:6a:
                    25:92:f7:16:7e:af:4a:34:37:a4:86:67:fc:5e:5f:
                    4b:e7:4c:f6:25:87:70:84:0f:50:b1:21:c5:48:2e:
                    83:87:69:81:b6:20:80:b7:b3:8c:6c:cc:d4:ab:17:
                    bc:e7:0d:db:0e:7c:aa:0d:e2:79:20:34:25:2e:37:
                    26:46:6d:64:0a:58:5a:8c:fe:75:21:74:45:84:6a:
                    74:4d:f3:d1:d9:87:ed:44:27:56:97:05:9d:00:e2:
                    09:fb:6f:68:a5:d2:8b:e9:0a:f6:5f:5d:3e:91:a4:
                    2c:7d:11:32:63:82:62:95:30:c0:37:fb:78:dd:a7:
                    2c:97:cb:06:bd:11:7e:3f:aa:67:25:53:17:45:be:
                    dc:b5:39:59:db:5f:a9:be:bd:c0:5f:68:75:a2:8d:
                    b6:ef:8d:02:6f:dd:b1:87:16:8f:76:05:c9:a7:0e:
                    a6:6d:3c:97:37:4d:bd:71:2d:fe:41:bd:01:a1:1e:
                    5e:41:1e:48:84:0b:bb:ab:a6:25:80:6d:02:45:6d:
                    83:d9:b1:13:e5:17:1a:75:2b:41:f6:dd:25:c8:bb:
                    0f:a7:2d:ee:b1:2e:49:45:91:77:fe:7d:46:ea:c6:
                    ca:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:CC:01:D1:27:ED:C0:BE:4F:69:3C:6A:AE:AB:0B:41:72:8A:F0:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b8799f0-aa9a-35f2-a5cd-53f0bd116852.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:31:51:5d:c2:39:f7:19:41:3e:da:76:ce:27:d9:9d:cc:19:
         7e:79:32:a8:06:05:c8:06:23:ff:d7:72:6d:ba:69:71:6b:33:
         5a:80:b1:7e:6c:54:ce:f2:04:ec:48:31:8b:52:e5:f1:62:b5:
         b0:a7:cc:39:31:51:cc:05:1a:69:e2:e3:50:df:bf:31:4c:97:
         6a:eb:df:55:f0:16:6d:8d:b1:7b:2c:88:82:cc:b2:65:83:27:
         bd:26:60:1f:a6:f4:05:6b:13:4b:ca:f2:d5:cc:57:cb:6d:1a:
         ce:b4:0c:68:61:fb:cb:74:be:bd:2f:b7:77:a7:ab:ce:bf:9c:
         85:e6:89:f5:35:46:c2:ff:cf:85:7e:4a:08:67:33:ec:dc:81:
         51:a9:e3:83:54:1a:c8:36:01:48:c9:cb:38:a3:ca:cb:a3:86:
         66:47:69:5b:43:62:0b:17:f6:05:7b:89:78:7e:9e:ca:0a:5d:
         bb:16:51:17:22:b9:cd:41:bc:cd:01:07:ab:b7:5b:87:8d:c6:
         1e:3f:7c:9b:a9:92:35:46:38:f4:03:a6:bb:d4:7e:81:50:0b:
         73:36:2e:90:28:d9:c9:60:46:3c:98:3c:3e:1c:6d:fe:4c:c1:
         6c:e4:ec:c1:6c:32:03:f7:67:d1:21:4f:12:ea:ab:ed:3f:88:
         c8:36:c5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 11:41:06 2025 by rpki-client