Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db4c71a8-97dc-378d-930c-482311834625.roa
File:                     db4c71a8-97dc-378d-930c-482311834625.roa (raw, json)
Hash identifier:          3CJgmNLl+8rfajlnEovjE+XAR7s6ip606FtHIP7pAdk=
Subject key identifier:   AF:E4:64:22:88:8A:20:08:60:DA:7F:09:26:BD:08:4B:12:E2:8C:B2
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584AA42B9845569BCE57CE686780
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db4c71a8-97dc-378d-930c-482311834625.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     396582
IP address blocks:        2620:74:2a::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:98:45:56:9b:ce:57:ce:68:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=5a54fbf5-dd85-4d9c-a7e9-f648901d2dc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:49:f4:25:49:42:21:77:72:b8:19:a1:41:b6:
                    f9:33:2d:05:53:1f:e2:7b:18:eb:13:21:e0:b9:e5:
                    70:c3:3c:e6:34:54:fe:1b:ba:73:2f:0f:2d:38:59:
                    bf:56:4a:f1:5e:9c:98:84:f1:2b:78:b0:40:ee:04:
                    31:64:e7:12:66:15:cc:da:a8:eb:13:6b:a1:3d:e4:
                    5b:33:74:ae:cc:ad:b8:f5:13:67:3f:df:b8:2d:26:
                    45:0e:a2:aa:ff:a8:42:0a:77:1d:01:13:fb:c0:53:
                    77:49:00:ce:29:bb:73:74:4d:9a:c5:12:90:a8:7f:
                    88:f1:32:55:4b:6f:23:a6:f5:5c:6d:22:d7:d6:8a:
                    02:03:1e:89:84:5e:aa:e1:c6:ae:22:97:1b:26:af:
                    0f:d8:c9:39:5d:6d:60:b0:4e:42:35:e2:06:8c:7d:
                    70:70:59:44:3e:2a:e8:f3:1a:fd:22:10:d8:18:4e:
                    71:8b:b0:13:27:6b:7e:d3:3a:66:4f:3e:2a:d6:0f:
                    82:83:44:5c:9f:3f:bc:f5:41:29:69:a8:e8:78:39:
                    a8:db:0b:4c:ce:dc:5a:4d:b2:d5:70:5d:ce:ef:4d:
                    b3:90:3f:1f:d2:d8:b0:13:9c:9f:e5:39:32:05:16:
                    9c:50:3d:85:0a:6d:d7:20:b4:ac:d2:c2:47:5c:09:
                    aa:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E4:64:22:88:8A:20:08:60:DA:7F:09:26:BD:08:4B:12:E2:8C:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db4c71a8-97dc-378d-930c-482311834625.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:d3:22:f5:23:e4:7a:68:2d:2b:af:aa:58:2a:a4:a8:d5:55:
         81:56:e6:ba:d2:51:bd:fa:1b:55:15:42:5e:a2:42:80:80:0e:
         a4:6d:6a:d1:49:bc:85:33:7e:d6:a6:a5:b9:b8:f6:fd:9a:d0:
         b7:17:ad:6a:4d:85:d5:0f:3a:63:93:d6:37:59:15:bc:e1:ad:
         0b:34:85:bb:2c:0b:32:8d:2c:99:33:f0:30:4f:75:69:2e:8e:
         98:eb:66:05:d2:01:d8:17:60:bc:35:46:2d:b8:2e:25:f3:69:
         9e:a7:bb:fa:bf:0d:73:c4:1b:13:8a:ff:3b:1e:8d:f0:9e:71:
         b0:27:9b:fd:ce:1b:13:20:f8:0d:a0:ab:9c:3f:19:7d:b3:92:
         2a:4f:8f:00:24:3a:65:26:e3:11:d1:cc:08:2d:df:d3:0f:c2:
         9a:05:4a:24:c9:55:7d:f5:f2:4a:69:0c:bf:ef:96:38:82:67:
         c9:0a:38:9c:93:93:96:e9:f5:99:5c:f7:1f:3f:9e:2d:cb:f8:
         13:f9:db:56:58:c1:02:96:a6:cf:12:e9:b4:58:92:04:31:fa:
         1e:fc:90:61:27:7f:6e:85:ec:b3:d5:1b:4f:3e:fe:23:bb:b9:
         42:5e:d4:e6:6a:80:7c:31:1c:b4:f1:84:81:44:8b:a0:7a:ed:
         17:40:87:0f
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqkK5hFVpvOV85oZ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk
NWE1NGZiZjUtZGQ4NS00ZDljLWE3ZTktZjY0ODkwMWQyZGMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUn0JUlCIXdyuBmhQbb5My0FUx/iexjrEyHg
ueVwwzzmNFT+G7pzLw8tOFm/VkrxXpyYhPEreLBA7gQxZOcSZhXM2qjrE2uhPeRb
M3SuzK249RNnP9+4LSZFDqKq/6hCCncdARP7wFN3SQDOKbtzdE2axRKQqH+I8TJV
S28jpvVcbSLX1ooCAx6JhF6q4cauIpcbJq8P2Mk5XW1gsE5CNeIGjH1wcFlEPiro
8xr9IhDYGE5xi7ATJ2t+0zpmTz4q1g+Cg0Rcnz+89UEpaajoeDmo2wtMztxaTbLV
cF3O702zkD8f0tiwE5yf5TkyBRacUD2FCm3XILSs0sJHXAmqEQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFK/kZCKIiiAIYNp/CSa9CEsS4oyyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGI0YzcxYTgtOTdkYy0z
NzhkLTkzMGMtNDgyMzExODM0NjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq
AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCE0yL1I+R6aC0rr6pYKqSo1VWBVua60lG9+htV
FUJeokKAgA6kbWrRSbyFM37WpqW5uPb9mtC3F61qTYXVDzpjk9Y3WRW84a0LNIW7
LAsyjSyZM/AwT3VpLo6Y62YF0gHYF2C8NUYtuC4l82mep7v6vw1zxBsTiv87Ho3w
nnGwJ5v9zhsTIPgNoKucPxl9s5IqT48AJDplJuMR0cwILd/TD8KaBUokyVV99fJK
aQy/75Y4gmfJCjick5OW6fWZXPcfP54ty/gT+dtWWMEClqbPEum0WJIEMfoe/JBh
J39uheyz1RtPPv4ju7lCXtTmaoB8MRy08YSBRIugeu0XQIcP
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:37:39 2025 by rpki-client