Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6c2d2760-5778-357b-bdc5-df68956e915e.roa
File:                     6c2d2760-5778-357b-bdc5-df68956e915e.roa (raw, json)
Hash identifier:          +OGeve478ESTpMONAc3EdsGo1VYyfAJCyULEQwOJiVM=
Subject key identifier:   A7:94:BF:D4:BE:A4:36:77:49:04:BD:42:5B:89:E6:58:97:AB:10:69
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848D2111340A0B036A6B468F900
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6c2d2760-5778-357b-bdc5-df68956e915e.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     36625
IP address blocks:        2620:74:2b::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:13:40:a0:b0:36:a6:b4:68:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=2b8bb129-49f3-406c-a256-a14f240f6390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7a:b9:bd:5c:ad:19:e9:cf:41:e9:11:59:e1:
                    4a:4f:bc:5e:17:35:6d:37:09:92:7c:e0:08:8d:5e:
                    ca:d5:55:7d:75:27:4f:e5:de:15:87:58:48:59:1f:
                    fb:99:a4:d8:72:b7:60:18:07:e8:5f:f6:08:c3:2a:
                    7a:13:53:40:32:03:54:91:07:cf:43:50:0a:50:84:
                    e1:0e:1f:d9:17:f3:8f:59:5f:f1:fc:cb:12:61:da:
                    cc:d8:54:05:fc:16:c5:d2:a4:c4:2b:da:ea:23:dc:
                    84:e0:a3:b8:08:ee:9f:e0:43:08:61:0c:90:13:3e:
                    ab:9d:e5:48:d5:36:eb:cb:f5:c0:3b:bf:62:c9:1a:
                    19:25:95:12:97:de:e0:98:c9:29:50:a4:60:f7:98:
                    11:1c:86:80:e1:da:9d:b8:d3:f9:db:09:a0:fa:df:
                    89:ff:52:0a:7d:51:43:89:ac:1d:9b:32:94:2b:9a:
                    46:f3:f8:83:8b:99:b2:da:25:6c:b5:69:50:2a:aa:
                    a8:fb:7a:21:57:12:24:4e:a5:20:58:93:f7:63:e4:
                    86:a5:4b:aa:fe:96:a7:a5:8b:45:80:85:57:98:ea:
                    eb:c5:e0:5c:a6:09:32:6f:51:a6:4c:a6:7f:31:6d:
                    3c:3e:db:e8:f7:78:7a:b5:ad:1a:76:a7:5f:87:14:
                    46:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:94:BF:D4:BE:A4:36:77:49:04:BD:42:5B:89:E6:58:97:AB:10:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6c2d2760-5778-357b-bdc5-df68956e915e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:2f:1e:4d:03:7a:9a:72:12:0e:3f:c1:91:f9:9b:ea:f9:c4:
         dc:32:22:91:3c:7e:a3:fe:a0:d7:13:2e:86:f7:81:d3:25:d6:
         58:f4:49:9c:6a:88:ed:a7:cf:c3:60:5c:5b:6c:28:30:c2:97:
         48:65:bf:94:dc:fb:d8:9d:88:8f:a2:9c:86:f7:aa:40:36:24:
         c9:b5:90:37:9f:94:43:7b:ea:cf:6c:e1:f1:22:9d:18:cd:cd:
         25:09:0f:eb:08:d1:1e:86:6a:c2:e4:ea:96:89:5b:a9:aa:2b:
         53:8b:a6:7f:83:96:85:16:51:4d:9d:29:0a:1a:df:9e:c9:84:
         34:4b:02:26:94:15:25:14:52:58:79:6d:c2:0c:47:26:3f:bb:
         3a:0c:4a:e3:91:60:4a:b6:69:f8:72:7d:ef:e7:79:ae:d7:e3:
         f5:9a:cf:0a:59:68:d3:06:2d:ed:7e:9a:26:22:73:41:66:75:
         d0:de:48:25:14:94:ff:a8:cc:c7:30:12:66:ec:3f:38:e0:6c:
         de:60:9a:ec:85:3c:f0:31:a3:03:15:c8:a6:c6:b4:e4:cc:25:
         b6:3f:fe:26:f1:1f:1c:3d:94:85:d6:c9:21:f9:38:d2:25:73:
         c4:3c:a6:70:80:13:47:63:bd:6c:f7:7f:00:32:b2:70:32:de:
         55:f1:55:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:03:33 2025 by rpki-client