Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/c29cd6d6-48c5-3504-be27-36da993c905d.roa
File:                     c29cd6d6-48c5-3504-be27-36da993c905d.roa (raw, json)
Hash identifier:          0LufyGkkYyTsc0oT/pwZAIuTHqm8IaX+19A4WyQrmKg=
Subject key identifier:   9D:33:E8:A4:57:E5:E1:F3:77:48:A9:17:2D:73:3A:7A:E2:29:C0:81
Certificate issuer:       /CN=7daa4589-66d8-4675-8538-e075ba80ecd3
Certificate serial:       010D0C9F4328584A8B0B55B502D04EFEB690F080
Authority key identifier: BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/c29cd6d6-48c5-3504-be27-36da993c905d.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     19054
IP address blocks:        2620:133:8000::/48 maxlen: 48
                          2620:133:8001::/48 maxlen: 48
                          2620:133:8002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:55:b5:02:d0:4e:fe:b6:90:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7daa4589-66d8-4675-8538-e075ba80ecd3
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=c7b036e3-89f8-4a2e-94b3-472e5c65d2f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:37:82:de:da:26:80:2d:5b:eb:03:0c:1f:15:
                    ab:44:65:d1:ce:75:a5:f8:79:a1:85:25:63:1c:16:
                    f0:45:40:d4:37:a2:b4:88:7a:ee:93:1b:69:a6:57:
                    ee:ad:6d:49:82:04:2b:4e:f4:dc:f2:c1:ee:b6:72:
                    1d:7d:37:05:09:bd:39:5c:09:7e:36:ac:1f:46:d6:
                    2a:6f:c0:24:3b:e2:9b:fc:de:ba:00:93:ce:fe:4e:
                    25:bd:cd:9e:14:ea:c2:05:22:8c:b8:c8:19:41:b4:
                    5e:ce:f1:5d:ec:c3:47:11:55:dc:f6:8c:95:d0:96:
                    19:38:6c:74:99:a0:56:5c:87:88:55:90:18:97:ec:
                    d2:2d:3f:c1:3c:e5:a6:17:cb:13:77:9c:ca:59:c8:
                    ee:82:d6:31:70:45:fe:29:c0:c5:7f:e3:e3:fe:cd:
                    98:fe:c0:70:58:61:55:9a:4d:0e:54:03:af:ce:a4:
                    02:00:20:51:5a:1f:91:8d:31:93:c9:68:3e:a3:da:
                    57:5e:82:34:4a:fc:ba:60:b4:40:2c:cd:99:9f:70:
                    b6:2c:fb:63:db:a0:c5:c9:f6:55:e1:bd:fa:dc:e2:
                    02:f1:9f:2e:8f:0b:20:ba:03:5b:59:1f:d4:e6:44:
                    d0:f7:72:09:1b:06:df:fd:3c:5c:91:4c:55:6b:97:
                    72:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:33:E8:A4:57:E5:E1:F3:77:48:A9:17:2D:73:3A:7A:E2:29:C0:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/c29cd6d6-48c5-3504-be27-36da993c905d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl

            X509v3 Authority Key Identifier:
                keyid:BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:133:8000::-2620:133:8002:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:7f:a1:be:ab:8b:ad:25:b7:a7:d8:17:98:b4:54:3d:5b:85:
         a1:f3:b7:64:f6:24:ab:a4:d9:94:db:ca:0d:55:5a:c1:74:fe:
         c0:aa:83:c4:a7:b6:8d:c0:29:8a:2a:e9:6c:4f:58:90:1a:55:
         d4:be:61:40:ba:39:65:d8:6f:60:e2:36:9f:f7:8f:bc:2e:2b:
         70:51:d5:31:11:47:c6:54:a9:34:1f:39:73:4d:88:a3:6e:b8:
         e9:56:e6:63:aa:4d:17:3b:27:f2:f4:40:ed:8c:f3:6e:05:c0:
         1c:85:a3:34:cc:95:26:1a:cc:e4:0d:1c:af:63:6b:1f:02:0e:
         84:f1:56:3e:19:6b:88:72:53:21:dc:fc:26:71:01:00:4d:13:
         1b:20:fe:c8:92:96:8b:25:ee:71:ae:bb:2a:94:1b:14:b6:88:
         38:32:61:8a:6e:36:86:49:84:64:23:4c:6f:55:eb:b7:0b:38:
         cc:e3:70:61:bf:e9:e0:95:3e:aa:f2:7f:38:3e:a1:38:df:46:
         96:9e:70:9d:0c:4d:24:cc:d6:e4:64:30:2d:50:18:a6:4f:86:
         5a:1e:09:5f:59:c3:6b:95:e3:26:16:8c:55:65:74:67:39:bc:
         9a:d6:6d:cc:2b:c0:fa:e6:10:17:39:3c:3f:55:c7:e0:b3:60:
         8b:12:e7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:21:26 2025 by rpki-client