Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6515379e-337a-4a35-ab2d-5403f98d4c33/74d9292f-0232-361d-a896-b4096e43e2d4.roa
File:                     74d9292f-0232-361d-a896-b4096e43e2d4.roa (raw, json)
Hash identifier:          cznJ+JYvxQp/WXk23Lu7ARqA8ZGfhJs24vA5J+rDuHE=
Subject key identifier:   3F:90:A8:98:C3:8E:36:75:B0:BF:F6:7E:EF:58:8C:7E:D1:16:44:4F
Certificate issuer:       /CN=6515379e-337a-4a35-ab2d-5403f98d4c33
Certificate serial:       010D0C9F43285849F7151FC5FD5736E6DA8F0600
Authority key identifier: 8E:B2:1D:FA:52:7E:5B:64:73:FE:C4:C5:F5:A7:BF:E2:FA:47:46:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6515379e-337a-4a35-ab2d-5403f98d4c33.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6515379e-337a-4a35-ab2d-5403f98d4c33/74d9292f-0232-361d-a896-b4096e43e2d4.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     396443
IP address blocks:        2607:480::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6515379e-337a-4a35-ab2d-5403f98d4c33/6515379e-337a-4a35-ab2d-5403f98d4c33.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6515379e-337a-4a35-ab2d-5403f98d4c33/6515379e-337a-4a35-ab2d-5403f98d4c33.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6515379e-337a-4a35-ab2d-5403f98d4c33.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:1f:c5:fd:57:36:e6:da:8f:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6515379e-337a-4a35-ab2d-5403f98d4c33
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=b1d64d48-7901-4d58-9648-4e36c01505bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cf:e4:b1:76:eb:05:04:86:8f:ce:fc:52:81:
                    2e:dd:65:67:a1:3c:bb:6b:8b:a4:dd:e7:8f:33:6a:
                    36:10:ac:ad:11:56:7e:41:5a:fe:9a:2d:38:5d:89:
                    29:0d:99:8a:e4:73:d5:07:44:70:a9:4b:69:dc:d4:
                    2f:62:53:9d:44:30:2a:ee:a6:dd:b2:18:40:09:e4:
                    a6:f4:09:c2:28:ef:35:c0:28:f1:8e:64:cd:47:5b:
                    9b:c3:c4:63:af:b5:15:9a:8e:81:d4:12:2b:6c:46:
                    e2:00:ef:07:a7:1f:60:61:e8:e2:84:18:bc:45:c1:
                    56:79:73:51:cd:a7:7c:9e:83:52:fe:bd:c1:c5:87:
                    d8:78:03:32:e6:35:44:de:8d:b7:3e:87:81:56:53:
                    13:e5:0b:d2:61:55:79:35:83:64:0d:28:b8:0a:52:
                    bf:09:39:28:24:4a:31:df:e2:f6:c5:bd:06:d4:aa:
                    b9:e8:8f:33:2e:10:3d:04:0f:c8:1d:e7:de:70:19:
                    2f:b0:33:1d:d2:87:a6:53:b3:1b:52:0a:98:45:a2:
                    5e:8b:d7:8f:21:93:0d:17:c9:83:53:ab:40:34:04:
                    6e:05:cd:07:d4:8d:02:af:42:ba:21:c8:98:cb:6a:
                    38:b5:92:2c:a6:7c:be:b5:ac:c9:13:50:26:1f:cb:
                    3f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:90:A8:98:C3:8E:36:75:B0:BF:F6:7E:EF:58:8C:7E:D1:16:44:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6515379e-337a-4a35-ab2d-5403f98d4c33/74d9292f-0232-361d-a896-b4096e43e2d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6515379e-337a-4a35-ab2d-5403f98d4c33/6515379e-337a-4a35-ab2d-5403f98d4c33.crl

            X509v3 Authority Key Identifier:
                keyid:8E:B2:1D:FA:52:7E:5B:64:73:FE:C4:C5:F5:A7:BF:E2:FA:47:46:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6515379e-337a-4a35-ab2d-5403f98d4c33.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:480::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:9f:72:1e:ff:0a:f3:ac:33:0a:a6:ea:10:23:f6:1e:e6:03:
         13:90:6a:ce:79:4b:55:8b:31:a9:f8:cf:49:68:5e:f8:41:a1:
         8a:db:eb:fc:1f:30:c6:4d:07:32:c2:8a:21:8d:0f:32:aa:b9:
         c3:f8:ec:08:c8:15:67:da:db:40:a9:58:6a:1e:84:a3:1e:ed:
         f6:51:e1:79:a6:ab:ac:2b:12:27:d2:45:b8:3b:87:30:a5:8c:
         65:e0:cd:e8:2b:0b:82:f6:71:ea:34:6f:5d:d3:ae:92:fb:25:
         f2:1a:c2:ed:0e:a7:68:6b:55:c0:b4:45:88:88:f3:64:be:79:
         6f:06:2f:41:6b:e3:74:26:2b:1e:04:9e:37:e9:24:d9:39:c2:
         0b:10:ee:9e:f5:f2:33:a6:d4:03:d4:46:2d:70:de:80:32:17:
         01:2a:83:a8:f0:86:af:b7:d9:47:48:a5:6b:7a:69:68:a4:38:
         a2:24:1c:43:9e:56:58:34:7d:77:d7:ee:2c:54:dc:0e:32:09:
         17:b4:36:f9:e4:51:79:2b:0e:65:ae:72:89:69:b3:91:7f:9d:
         78:3d:b9:1d:da:58:25:2e:b0:69:8a:50:bb:7f:0b:a2:20:b8:
         4d:94:31:8f:89:0a:c3:5c:02:9b:d2:7c:9a:f0:8a:1f:3a:8b:
         31:bb:11:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 03:41:06 2025 by rpki-client