Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21812b5d-b2b3-398c-afb7-221a71c32c32.roa
File:                     21812b5d-b2b3-398c-afb7-221a71c32c32.roa (raw, json)
Hash identifier:          1/88lmUDzAV3r/3blKttPzOppzb1rZ0swnuFlPOThsc=
Subject key identifier:   D4:0B:12:50:A7:40:6A:72:8A:30:3C:AF:8C:36:C7:FF:A4:34:65:94
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584AB91BE7C5C89B14AD245E5120
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21812b5d-b2b3-398c-afb7-221a71c32c32.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     396575
IP address blocks:        2620:74:21::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:e7:c5:c8:9b:14:ad:24:5e:51:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=b77465ff-4370-424b-856b-53010c0b2962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b5:84:f9:5a:ef:d0:e2:54:e1:e0:e3:d5:de:
                    0c:98:8d:53:c8:2a:74:e5:a0:33:c0:0a:33:22:62:
                    19:4c:ad:41:40:ff:2b:db:38:a7:43:bf:81:e0:4b:
                    14:58:fd:97:a2:08:3a:e2:1f:09:e6:e4:4d:b8:54:
                    74:1a:5d:dc:86:f7:98:d7:96:f1:62:c7:91:59:95:
                    a3:e5:56:ca:f1:f5:3d:dc:be:27:e9:69:cc:07:12:
                    36:81:26:15:39:52:30:37:da:24:39:43:51:45:6b:
                    95:21:a6:85:be:64:f2:9f:06:47:30:ed:8c:ff:e4:
                    64:e2:31:98:cf:ca:35:95:bc:cc:e8:68:6f:7f:76:
                    4c:70:39:c4:55:48:60:0f:c7:f8:b2:0e:4c:25:e8:
                    d6:4c:b6:03:c2:b3:33:0e:bf:3d:e4:2a:c3:93:df:
                    c0:5b:ce:d2:20:a8:87:5c:e6:14:b8:b7:f2:85:53:
                    c2:4e:6b:62:ac:30:dc:70:21:bd:1b:7c:2b:a1:8c:
                    6a:62:27:bf:17:9c:7d:61:c7:c6:24:31:d2:58:bc:
                    f1:27:09:eb:2c:17:92:7c:d9:46:63:06:b1:f4:a0:
                    2f:9a:d6:2b:7f:21:34:5b:8e:34:6a:5d:bd:64:ca:
                    20:6e:5e:a6:0e:d3:33:eb:69:46:c4:89:df:37:61:
                    82:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:0B:12:50:A7:40:6A:72:8A:30:3C:AF:8C:36:C7:FF:A4:34:65:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21812b5d-b2b3-398c-afb7-221a71c32c32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:23:01:d1:2f:a0:5c:d1:74:02:03:03:d1:77:3b:94:e7:73:
         37:5a:01:06:f8:f0:1e:ad:8a:d7:a2:f1:d2:1a:89:fe:da:d6:
         fd:34:67:71:a4:65:a9:3f:8e:60:fb:44:aa:52:c3:8c:69:71:
         43:5b:20:45:66:4d:15:bc:c3:61:2d:95:ad:53:ce:d8:c2:fa:
         fb:61:5f:90:27:99:f9:be:c5:81:c5:b9:7e:da:9b:06:ae:d8:
         84:49:f2:10:d2:1b:6a:d8:8d:42:51:31:e3:79:0f:92:9a:c7:
         5b:a8:35:fd:c2:2b:68:97:fa:75:13:e5:f1:17:e6:18:11:c5:
         8e:30:22:4a:95:17:02:43:4f:5f:61:44:64:2f:c5:0d:e3:7c:
         f7:74:32:41:63:5e:69:15:30:3e:0b:1a:f5:77:b6:44:8f:ea:
         f8:a7:51:03:57:50:1b:ea:55:40:02:14:5a:62:ae:27:94:c9:
         b0:30:7e:6f:62:e2:3b:b1:f1:cd:9a:d3:19:27:89:22:bb:8f:
         52:33:92:52:ca:29:c4:83:c2:0c:0c:34:c6:32:eb:a8:d2:36:
         26:b5:cc:63:54:18:31:c9:6b:e9:c5:2c:94:83:db:cf:be:f1:
         80:fb:61:dc:b8:17:4f:71:9c:e5:da:67:db:77:eb:47:14:ad:
         39:f9:f0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:02:33 2025 by rpki-client