Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/52f61cea-059a-3b97-8b1a-e4b9bcc7703b.roa
File:                     52f61cea-059a-3b97-8b1a-e4b9bcc7703b.roa (raw, json)
Hash identifier:          GT2Wp5dSAg2lMtSEG2iW3zP9Cy4n4K+ZEpGPAPEIKyc=
Subject key identifier:   83:0C:96:C5:D6:E6:75:70:4A:23:0E:30:17:8E:F5:19:90:3F:43:38
Certificate issuer:       /CN=c634bf2d-3875-4079-9788-431e36d8743a
Certificate serial:       010D0C9F43285849E7BA836DA3C497004F9BA900
Authority key identifier: 8F:39:E7:00:D8:69:92:10:87:82:FF:BB:46:16:9E:64:9A:86:D5:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/52f61cea-059a-3b97-8b1a-e4b9bcc7703b.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     400718
IP address blocks:        2620:73:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/c634bf2d-3875-4079-9788-431e36d8743a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/c634bf2d-3875-4079-9788-431e36d8743a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:83:6d:a3:c4:97:00:4f:9b:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c634bf2d-3875-4079-9788-431e36d8743a
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=5371d39b-c436-475d-b242-73f4dc430982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:10:c0:e0:4b:77:58:36:68:a2:4b:30:cd:44:
                    2b:0a:9e:91:5d:92:75:84:47:98:57:7f:f1:f2:d0:
                    51:bf:38:20:fe:32:5b:9e:a9:39:7d:b3:92:b1:ab:
                    a4:93:ee:ad:32:81:19:75:1d:cb:e8:3f:38:81:ff:
                    56:b6:48:11:38:49:19:2a:6f:af:57:11:75:69:da:
                    a0:39:09:b4:26:c9:ea:47:50:ec:21:58:c1:43:a7:
                    3c:e0:36:74:be:ff:c3:d0:af:6f:9d:83:7d:76:00:
                    c5:c2:f2:97:e5:3e:77:fd:de:d5:e6:7b:12:28:76:
                    2d:ae:fa:7f:a9:e2:2d:e1:5f:8d:eb:42:03:c2:99:
                    47:82:57:be:1d:f6:38:59:6d:de:84:44:89:7c:1b:
                    be:4e:18:80:8b:f6:92:51:70:42:a0:fe:0d:f7:db:
                    6b:95:13:e5:55:28:1b:78:70:d7:53:ec:d4:e6:73:
                    19:49:e0:3c:5b:0a:72:b3:62:6e:80:33:fe:fa:70:
                    e5:74:d4:d1:a9:9c:6c:c3:3e:a5:fc:20:d6:bd:d6:
                    92:c6:01:e4:75:d8:6b:62:10:b9:16:53:c6:b5:f8:
                    b4:3a:ca:dc:7d:19:09:ea:08:2b:88:f8:de:37:3e:
                    5d:e3:8f:7d:38:78:69:79:0f:d1:a4:f0:fb:de:ef:
                    95:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:0C:96:C5:D6:E6:75:70:4A:23:0E:30:17:8E:F5:19:90:3F:43:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/52f61cea-059a-3b97-8b1a-e4b9bcc7703b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/c634bf2d-3875-4079-9788-431e36d8743a.crl

            X509v3 Authority Key Identifier:
                keyid:8F:39:E7:00:D8:69:92:10:87:82:FF:BB:46:16:9E:64:9A:86:D5:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:73:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:97:3f:8e:a7:43:df:0d:61:3f:00:4b:bb:83:ca:49:13:e3:
         d9:78:2e:09:7a:69:8c:f4:98:97:f5:0d:06:b0:6d:2b:66:a3:
         b0:ca:e2:29:3c:04:d5:3f:cf:76:2e:b4:be:8d:9c:60:0d:06:
         2b:ac:e8:32:ab:19:2e:5c:e4:96:27:3f:cf:82:e0:b0:ba:2a:
         ce:9b:3f:52:22:b2:46:4f:ea:14:bf:8e:ee:a0:00:c9:51:32:
         17:5f:e4:47:ea:0a:42:06:49:b9:c4:73:27:33:26:db:8b:dc:
         6f:de:6b:3a:ae:53:72:74:c9:cf:46:9e:0f:31:0a:76:d0:7a:
         fe:b9:34:70:27:e9:e4:e0:31:ae:04:85:c6:34:42:e3:da:8b:
         fe:dd:7a:1c:81:b6:a4:4c:d6:a3:ea:4e:d8:fa:50:61:d0:74:
         c4:e1:05:5a:8b:bc:bd:95:a6:a8:c5:6e:3c:97:67:fa:6c:8e:
         7c:1c:14:8b:66:75:a6:82:ef:67:ad:07:ad:ff:46:82:3b:f4:
         a5:c5:e3:06:a9:f9:96:2b:ad:13:e5:3c:66:1f:89:81:84:04:
         71:84:ef:89:a6:a5:fe:32:67:77:80:c3:23:a0:07:a1:52:16:
         54:5e:b3:c8:70:37:8f:ac:8f:33:ae:cf:21:00:11:cc:bc:a2:
         07:0d:c4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 13:40:22 2025 by rpki-client