Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/97c023f1-83db-3711-916f-18fa4c5336b7.roa
File:                     97c023f1-83db-3711-916f-18fa4c5336b7.roa (raw, json)
Hash identifier:          NEd21L51BUMYFSsJ6yaEApK050MGNU9jU6RZLxLOHQI=
Subject key identifier:   A8:4B:62:72:E7:0E:5A:D5:75:21:8A:65:99:7E:CB:57:C6:22:94:EB
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584A1465946CAD3426069195BB30
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/97c023f1-83db-3711-916f-18fa4c5336b7.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     7342
IP address blocks:        2620:74:5e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:94:6c:ad:34:26:06:91:95:bb:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=ab7de81b-e6dd-410e-b254-23be5f220846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:60:d0:88:76:93:f6:77:96:34:d3:64:b2:18:
                    cd:60:5c:fa:97:b6:1c:7f:1d:77:db:eb:d1:4f:47:
                    1b:8f:57:bd:1f:53:8d:47:b7:f5:e3:83:95:16:8a:
                    13:4c:56:d4:cb:c0:4b:93:25:f0:fc:dd:9e:0a:99:
                    15:34:fa:d8:5b:54:da:6c:e6:eb:87:05:85:dc:35:
                    71:18:07:4b:59:e4:d5:83:6b:0c:b6:32:7c:98:28:
                    a3:33:45:61:a5:72:36:31:50:6b:45:33:67:7d:85:
                    c3:d5:d1:56:f9:81:b9:84:22:ff:51:2a:22:6e:04:
                    9a:76:af:8a:19:18:f5:62:e7:78:d8:52:16:bf:55:
                    dd:ac:91:3d:66:bd:f4:ae:2c:30:2f:b7:4b:5d:9c:
                    37:b6:3c:77:7a:4a:42:94:fd:e3:47:5e:b4:9c:50:
                    07:98:3b:5f:35:ec:91:02:87:b7:0f:f0:67:91:42:
                    ed:c8:0c:58:7b:2f:0a:3e:a7:20:03:49:71:a0:fb:
                    02:be:fb:c8:d5:28:f4:c6:2c:60:0b:26:dd:74:c0:
                    5e:82:a3:b8:3e:2d:54:7d:03:d0:ed:94:54:5f:02:
                    81:b3:81:38:00:4d:89:db:c0:1c:1b:ae:c0:dd:0a:
                    4e:e5:d1:bb:e9:d6:c0:a1:82:22:a9:04:a2:5b:fe:
                    b7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:4B:62:72:E7:0E:5A:D5:75:21:8A:65:99:7E:CB:57:C6:22:94:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/97c023f1-83db-3711-916f-18fa4c5336b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:5e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:b6:b0:a9:25:f5:f2:60:c2:9d:67:2e:5f:b6:f3:2e:5a:e2:
         7b:be:f0:3f:eb:e7:09:e6:06:c1:22:74:92:37:70:b0:a1:bc:
         ef:c2:56:7c:82:43:34:35:35:a1:03:38:ce:3b:c7:b7:60:5e:
         ef:d5:84:92:a8:11:4a:e9:2c:d0:3e:14:28:75:5e:91:ac:54:
         6e:29:8b:99:9a:28:7c:5d:41:e5:7d:a2:5a:b6:d6:f8:31:3d:
         d0:de:11:c2:3e:ee:95:5e:dd:ba:2a:19:3b:37:e9:e1:9f:62:
         0a:2d:3e:b3:e0:9f:85:ec:dc:60:a1:fb:f8:d8:49:02:35:8a:
         c3:47:ab:b4:83:5d:23:79:b9:d4:42:8f:ca:54:10:c2:e2:05:
         5d:88:ab:f3:e5:ff:37:90:40:71:e9:bb:65:67:f6:35:ec:ea:
         47:e1:bf:df:85:89:f9:e4:49:4c:73:a2:ba:0b:1a:60:3d:a1:
         3f:5d:f6:20:76:d5:ba:e3:6f:42:86:46:5a:fe:46:98:c2:80:
         8a:ad:38:12:23:41:01:ed:d2:4b:19:d2:12:71:e9:52:05:37:
         94:2e:a6:1f:d8:27:b7:76:50:c5:dc:e5:9a:5d:f3:09:99:0e:
         fa:df:48:41:b4:fc:27:f2:ea:7f:b3:9f:51:80:91:20:89:65:
         17:e4:57:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:10:13 2025 by rpki-client