Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/61383942-1028-3049-87ab-ee114e28594a.roa
File:                     61383942-1028-3049-87ab-ee114e28594a.roa (raw, json)
Hash identifier:          5XWFNPqQJeIcDei3ykGrW9kHiVDRJc5vuwa5zXMnFw8=
Subject key identifier:   F3:FC:99:9B:F8:3E:79:73:71:A3:B4:48:75:40:99:5D:B3:0D:5C:05
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285849B14A29B8BD3D743500134B80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/61383942-1028-3049-87ab-ee114e28594a.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     397197
IP address blocks:        2620:74:2b::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:29:b8:bd:3d:74:35:00:13:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=3a1957d2-a2d5-41f1-870c-c74262223941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7f:1c:28:52:88:58:ef:fe:60:ab:08:9b:f5:
                    73:28:d6:b8:07:97:d8:5e:49:0a:a2:27:2e:e5:88:
                    32:ff:9f:cc:f0:41:2b:4a:da:e3:a1:9a:b1:ed:32:
                    ff:94:b8:c5:37:01:e8:a6:b7:06:ab:f9:e9:44:e8:
                    46:62:41:e4:68:c6:07:c8:03:79:c5:dc:a6:63:55:
                    67:00:6f:87:f2:fb:24:1a:19:0e:93:b8:a0:bc:7d:
                    b3:6d:96:09:06:6e:5d:d3:8a:b0:a8:a3:af:f7:5c:
                    e2:6d:04:7a:93:d1:00:df:c7:d0:55:bb:c0:24:a7:
                    03:89:2c:c5:94:38:ec:f9:0e:e6:21:66:1a:8a:cf:
                    17:22:88:3a:b3:ac:9d:fb:98:72:db:40:9b:2d:30:
                    03:47:d7:59:03:b7:95:07:36:fc:72:e7:35:d7:2f:
                    e8:0b:9e:ce:8d:e8:be:ee:d1:42:79:ba:1e:34:e9:
                    46:f2:31:bf:bf:e7:ad:2e:66:65:e1:a5:eb:f3:d4:
                    98:b1:c9:da:6d:ee:b9:f2:ba:77:21:74:12:bb:bf:
                    55:c5:b7:e6:3f:56:9f:0b:dc:bb:9d:e4:f8:e5:3c:
                    1a:37:4c:7b:43:ed:86:59:0b:7f:55:5e:85:ca:b4:
                    ce:b1:02:d3:eb:71:34:2c:9d:c3:36:fb:67:b9:11:
                    e7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FC:99:9B:F8:3E:79:73:71:A3:B4:48:75:40:99:5D:B3:0D:5C:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/61383942-1028-3049-87ab-ee114e28594a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:a6:45:c0:2a:f6:c0:99:c4:9c:02:fe:3a:2f:92:67:a7:9b:
         08:2d:8b:d1:dd:45:e9:bf:1c:e1:3c:67:48:15:e6:2e:6e:c6:
         14:57:b1:da:25:de:bd:41:7a:49:9f:cb:be:88:47:78:37:78:
         01:c9:44:b9:c0:bd:5d:9f:5e:05:39:cd:e0:23:c5:cc:bd:7b:
         81:3b:b2:dc:70:d4:51:4f:2a:a8:8d:29:1d:7e:a6:2c:88:dd:
         f5:ad:5c:3e:dc:c2:15:f3:99:f7:98:32:de:32:fd:5e:96:8e:
         ae:48:f7:fd:bb:f2:61:2c:b5:f1:7d:00:d7:2d:d9:c6:39:f5:
         43:f1:f7:ee:e1:f9:22:95:61:5d:db:a1:61:a5:67:c1:f7:c5:
         1e:aa:22:33:a1:27:0d:49:32:81:5d:4f:08:bb:39:ae:85:d3:
         22:e9:46:7a:8a:22:65:01:2a:75:13:a2:25:41:c5:7b:a6:9d:
         bd:fb:77:9d:4f:a7:f4:26:0b:a0:ae:e3:ed:d2:05:05:1e:07:
         37:b0:ae:e5:f0:68:5b:8a:ce:a9:ab:86:19:8c:e8:ee:9e:c7:
         88:42:9d:eb:aa:eb:66:87:7f:a8:b2:55:78:1d:ee:bd:c2:aa:
         8a:93:f9:f5:b8:a8:cc:ed:92:23:16:e1:eb:93:f1:d8:e2:2f:
         5d:e8:66:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:38:23 2025 by rpki-client