Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/beb7944d-325c-3b7f-b25b-0b9ffcae3e66.roa
File:                     beb7944d-325c-3b7f-b25b-0b9ffcae3e66.roa (raw, json)
Hash identifier:          k7Yfh6ISY3+/asYG/E54zIjsyW4nmklHUrPaQCZNfyk=
Subject key identifier:   FE:D2:B4:7A:45:27:68:3A:FB:32:96:86:70:C9:69:BB:8F:85:F5:05
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584A1193D3E86E4A1EC1BD838DC0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/beb7944d-325c-3b7f-b25b-0b9ffcae3e66.roa
Signing time:             Tue 03 Jun 2025 12:47:22 +0000
ROA not before:           Tue 03 Jun 2025 12:47:22 +0000
ROA not after:            Mon 01 Sep 2025 12:47:22 +0000
asID:                     396567
IP address blocks:        2620:74:21::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:93:d3:e8:6e:4a:1e:c1:bd:83:8d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jun  3 12:47:22 2025 GMT
            Not After : Sep  1 12:47:22 2025 GMT
        Subject: CN=24b11c2a-a6a2-4ac2-b884-9ca349a7ded5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fb:83:e0:d1:4c:39:fb:13:7b:ba:bb:36:ea:
                    da:0f:c9:4a:f0:d7:98:e6:43:17:98:15:11:55:bc:
                    d1:5c:95:69:97:8e:84:e7:d0:15:fe:d6:9b:4a:56:
                    c4:60:0a:22:c7:a0:96:53:26:ef:44:a3:20:d3:67:
                    9a:f6:6c:aa:d8:26:f3:60:b4:9e:71:fb:b2:dc:e0:
                    a9:b0:87:f6:66:f9:d2:a0:c4:42:36:2c:47:fd:46:
                    ce:c8:47:f4:da:ab:e3:c7:71:20:8e:ac:92:7c:bd:
                    2f:2d:d1:b0:58:ea:46:9e:5c:35:2f:22:92:0e:fc:
                    77:16:d7:56:75:fd:82:ed:c1:75:ff:14:6b:69:81:
                    70:56:bf:9b:fa:df:3f:d6:d0:19:03:4a:08:75:48:
                    b6:03:38:ce:d8:0d:66:17:59:cb:22:07:32:7c:95:
                    28:60:96:19:ce:4a:f6:fb:3f:0e:1d:c6:93:01:d4:
                    0c:07:61:c1:20:c7:5c:d8:c4:fe:c3:40:a1:11:7e:
                    46:62:90:50:77:95:42:44:92:51:97:3a:35:7e:36:
                    5b:a0:cf:8a:11:e8:a5:ff:a3:32:4a:a1:be:30:bb:
                    fe:03:06:10:a1:e0:73:9b:22:41:0e:b8:ba:8e:0f:
                    53:4f:66:ab:b9:fb:49:10:de:d6:58:72:f2:3f:fb:
                    0a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D2:B4:7A:45:27:68:3A:FB:32:96:86:70:C9:69:BB:8F:85:F5:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/beb7944d-325c-3b7f-b25b-0b9ffcae3e66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:b2:94:ee:11:c7:1c:ef:bb:57:e0:7e:b4:cb:02:f0:ab:e8:
         a9:36:72:3d:2e:9f:4c:76:57:51:75:51:14:9e:2d:a0:2a:37:
         01:4a:c0:cd:f9:63:8b:7d:49:a5:17:f8:28:91:cd:a0:4a:cf:
         59:53:1b:f0:b2:39:51:2c:a5:bd:fe:3b:de:92:62:4b:ca:8c:
         78:f8:7e:8a:37:a0:72:ca:41:59:b3:91:fa:73:58:10:70:54:
         6b:8a:36:89:c8:53:82:68:83:5c:c3:a2:b1:71:85:54:ed:fc:
         4d:f0:a3:cd:4e:e8:7b:25:35:98:fb:1f:2f:a1:e9:54:91:73:
         48:20:4e:4c:3f:e2:f4:70:b3:a4:f4:77:c0:34:8d:37:99:fc:
         9c:20:b3:44:b2:65:14:48:df:0e:36:c9:71:58:0a:53:c7:57:
         be:85:16:23:26:d4:5c:65:c7:8f:31:fc:85:39:6d:9e:23:f6:
         d9:42:39:04:e1:c5:f2:24:64:ea:d1:3c:37:d4:71:9b:f6:55:
         49:d9:3a:85:25:27:52:d0:47:3f:81:12:b2:24:25:d3:79:0c:
         97:bc:63:d5:ac:c3:79:97:26:d1:4f:d4:42:29:49:b8:9d:07:
         23:91:db:eb:dc:a1:dc:4d:ce:e7:53:9f:c1:05:2c:8d:cf:84:
         86:66:bf:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:05:13 2025 by rpki-client