Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c/b1eaa5e7-4ba3-3476-b081-ee26daa7e597.roa
File:                     b1eaa5e7-4ba3-3476-b081-ee26daa7e597.roa (raw, json)
Hash identifier:          rqCvzis1YPywtl3YVTCvbG8AefDwe/9L69oRCPVLLOU=
Subject key identifier:   7E:EC:A5:21:1F:4A:B4:B4:7F:CB:36:71:3B:DB:64:93:4C:7A:1F:8F
Certificate issuer:       /CN=6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c
Certificate serial:       010D0C9F4328584A9FFBA124AE7B3116744A2700
Authority key identifier: 39:10:10:A8:A9:95:4E:EE:CD:01:64:C6:66:4B:66:9C:52:65:4E:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c/b1eaa5e7-4ba3-3476-b081-ee26daa7e597.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     32521
IP address blocks:        2620:124:b000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:a1:24:ae:7b:31:16:74:4a:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=a9a7776e-f3e8-428e-b82a-4e1d62b48a39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1c:dd:8e:1f:b8:86:c8:5c:56:e9:51:a3:34:
                    be:0b:49:c6:a2:2a:bc:cb:0d:f6:dc:a5:aa:21:94:
                    0e:37:47:8e:58:fa:33:ab:cb:a6:23:e6:eb:30:53:
                    4b:f7:cb:f5:5b:aa:90:04:b3:78:c2:56:39:ce:af:
                    8c:4e:dc:85:a7:b0:d2:43:c8:43:a8:a0:fd:d2:c5:
                    c4:38:c9:1a:77:8f:de:87:ad:b6:0c:64:25:f2:7e:
                    1f:d0:2f:a1:a2:8f:eb:df:9f:6f:89:1c:1b:65:9f:
                    59:c3:f8:c8:8b:23:ea:87:bc:a7:35:47:a6:89:33:
                    8f:49:20:ce:06:0d:5f:4d:21:ee:45:df:37:84:65:
                    9d:94:cb:7d:fe:f6:e4:bf:bd:26:47:18:67:cc:83:
                    58:a1:07:3b:c9:b4:f9:54:d7:be:e5:db:5f:07:98:
                    78:b4:df:1f:f5:76:4b:b5:9a:08:30:4d:4e:71:d0:
                    7b:ea:bf:66:60:74:b0:f3:80:f7:a8:d0:b9:03:97:
                    9a:c7:05:3b:98:c4:4e:cf:0e:0d:33:7b:d0:c8:95:
                    69:87:17:1b:a9:8d:36:74:2c:64:0d:a5:87:74:8e:
                    4c:27:2f:8d:63:32:f4:e2:38:f9:f1:f0:e8:4f:b8:
                    9c:36:88:66:d1:09:c2:16:b1:c0:c2:01:04:a6:c6:
                    08:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:EC:A5:21:1F:4A:B4:B4:7F:CB:36:71:3B:DB:64:93:4C:7A:1F:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c/b1eaa5e7-4ba3-3476-b081-ee26daa7e597.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c.crl

            X509v3 Authority Key Identifier:
                keyid:39:10:10:A8:A9:95:4E:EE:CD:01:64:C6:66:4B:66:9C:52:65:4E:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:124:b000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:c4:1a:e0:3c:ff:f1:61:e8:94:cb:9c:58:16:1c:60:11:0c:
         52:74:cf:2f:32:9b:a2:ea:a4:af:41:f0:67:10:c1:17:14:d0:
         bc:07:58:d9:6f:9d:fe:1c:1d:d4:f4:6d:fc:e8:ed:1a:ad:20:
         65:cc:8b:14:ab:95:4e:0a:3d:17:bc:f3:12:41:09:e5:83:92:
         af:72:5f:8c:d0:b3:61:08:25:51:45:de:81:a9:05:2e:3f:e6:
         3b:51:45:c5:bf:fc:51:56:8d:ca:47:0d:47:d7:cc:61:37:e3:
         1f:ce:41:38:32:bd:33:f4:30:99:a9:db:86:f1:98:0d:9b:28:
         f3:9b:d7:eb:90:03:9f:59:d5:67:af:b1:e8:ba:b3:a8:79:9d:
         83:65:4d:4b:c0:13:27:d0:e3:2a:70:98:ce:93:75:1f:02:66:
         a7:a5:47:ba:9b:44:62:7b:cf:07:62:3a:6f:da:a6:4c:c8:14:
         10:7b:94:e2:72:85:2b:c5:02:17:48:fe:b3:0e:5a:a4:38:fc:
         3d:27:28:5b:4d:b9:ee:65:b9:c1:49:51:59:8e:d7:36:52:4e:
         d4:2f:f4:52:d3:9b:8a:61:91:9a:11:a2:99:cf:ae:07:46:ba:
         d1:2b:8a:3b:82:65:d2:bc:64:98:a2:f2:b8:7e:d7:87:08:cf:
         8d:a0:3a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:08:13 2025 by rpki-client