Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/bf844c72-9e09-3fe8-92ad-235d85ea729b.roa
File:                     bf844c72-9e09-3fe8-92ad-235d85ea729b.roa (raw, json)
Hash identifier:          7j0GbCUVduQ7Hr1T3GGM3nq/NSEosTYjfFqrCDDvNOo=
Subject key identifier:   B7:CC:72:7B:8B:05:E6:E8:7F:48:5B:79:C5:CF:A2:78:CB:50:D9:72
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F43285849CBCF84BF022D4857BCA8D680
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/bf844c72-9e09-3fe8-92ad-235d85ea729b.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     715
IP address blocks:        2620:171::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:84:bf:02:2d:48:57:bc:a8:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=d6d81295-edfc-4e9a-8fda-b71c57c9fa2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:93:97:43:12:6c:a0:a4:bb:39:7e:09:3c:2e:
                    5e:16:bf:35:6f:d8:16:40:45:34:6a:f6:6e:05:5d:
                    2e:ea:03:56:1d:37:4d:44:94:7f:78:1d:a2:2f:ae:
                    e8:f8:f4:39:8d:1b:36:34:46:75:36:3e:a2:36:36:
                    93:72:70:12:3d:ed:61:4d:25:0c:45:be:76:85:f2:
                    f9:0e:ee:d2:ee:8b:02:e8:ef:ab:3f:f0:07:5d:00:
                    53:5b:61:4e:7e:b3:bf:fe:bb:65:5a:ae:3b:d9:8b:
                    b1:77:39:28:02:5b:e8:d3:7a:d9:f0:4a:7a:b1:6e:
                    9b:03:31:cb:f0:da:0d:29:f7:39:ff:13:d9:a6:37:
                    5e:29:c0:dc:36:8b:16:d7:02:7c:d8:fe:c8:78:8f:
                    e2:bc:f1:1f:c5:2a:78:f0:14:cb:45:0f:3b:c9:94:
                    a9:cb:6a:ef:31:2e:6a:d2:80:eb:00:e4:c7:0f:ac:
                    fe:d6:b6:97:11:79:49:58:9a:cd:77:63:3b:00:e0:
                    31:9b:28:58:0f:c4:f3:de:c2:b4:08:5a:ab:66:ae:
                    a1:e4:71:a1:65:e6:dc:d9:0e:17:b0:7c:e5:8c:77:
                    57:62:d6:9a:4b:a9:0a:e8:10:99:27:09:b1:aa:6e:
                    ff:85:2d:3d:80:14:4b:49:cb:fc:cf:97:2c:6e:22:
                    43:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:CC:72:7B:8B:05:E6:E8:7F:48:5B:79:C5:CF:A2:78:CB:50:D9:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/bf844c72-9e09-3fe8-92ad-235d85ea729b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:171::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:aa:8e:cc:78:e0:5d:06:10:19:d7:5a:05:ef:ac:25:55:5e:
         5c:7b:04:26:9b:9a:df:2f:fc:41:d1:4a:a0:16:05:e4:1d:f1:
         e6:d2:80:85:e3:04:58:b0:a6:60:f0:1c:24:fa:6e:3a:50:54:
         67:9a:1b:a6:63:e6:f4:aa:5f:45:2c:0d:b6:c2:10:bd:0e:b3:
         76:f4:40:c6:0f:8b:0f:32:c1:33:da:18:fc:34:59:66:f3:38:
         41:b4:21:cf:62:d1:4e:06:18:1c:53:32:55:86:a6:58:a3:11:
         c0:35:2f:2e:f7:89:d5:36:4b:76:81:04:93:44:8f:88:3e:be:
         8b:51:73:f5:97:fb:12:71:09:1c:14:9e:54:33:71:23:f1:e3:
         3c:c1:6d:ff:32:25:8d:19:8c:26:6f:59:43:1e:91:f9:6a:23:
         86:19:bf:79:5e:73:bc:9b:61:f8:01:64:20:79:4c:69:ca:47:
         ef:3b:47:3f:5d:34:65:48:17:fa:5b:5a:3c:22:e6:17:ef:61:
         3a:bb:2b:6d:31:95:f9:72:a8:0f:68:5f:29:47:28:18:63:eb:
         c7:ba:15:1e:b8:ad:32:e2:de:01:0a:39:ec:3b:f6:fb:ba:74:
         80:bd:1a:a5:e9:b9:a7:85:23:11:ab:43:91:53:be:5c:38:19:
         05:0b:8c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:30:04 2025 by rpki-client