Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd2209f3-37ce-32d6-97ec-3d99ffc6dc3b.roa
File:                     dd2209f3-37ce-32d6-97ec-3d99ffc6dc3b.roa (raw, json)
Hash identifier:          QG731Qebb8iZcbtupmqTSfGUBBskr7Jbli6tKvT6prM=
Subject key identifier:   BB:26:51:E5:FC:91:28:C3:90:CA:0B:22:13:3F:93:60:77:02:4F:4D
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584A00DADAFE82F79728C35169C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd2209f3-37ce-32d6-97ec-3d99ffc6dc3b.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     7342
IP address blocks:        2620:74:6a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:da:fe:82:f7:97:28:c3:51:69:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=6407aa62-b56c-472b-adc0-18115ae083a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:74:29:d1:14:01:8f:0c:43:e5:72:64:64:86:
                    23:83:a3:4b:a8:db:f5:af:34:89:db:75:aa:9f:27:
                    97:53:98:21:c0:4b:9e:fd:8e:2e:e1:f4:0b:08:1e:
                    1c:5c:7f:04:70:04:89:27:0d:c9:f3:cd:78:70:5c:
                    25:e4:f9:bf:7e:f8:26:98:05:3c:9d:8f:aa:a5:ad:
                    7b:47:01:3c:e5:bd:04:2d:ad:01:10:e7:cf:2e:69:
                    7c:c6:25:55:54:40:96:c2:3f:91:18:1f:30:50:d0:
                    00:ca:e0:d4:35:a4:7a:85:e4:e2:fd:01:e0:ad:26:
                    0b:49:96:f9:e2:08:81:8f:b1:dd:34:75:89:5e:53:
                    cf:e4:02:62:fd:17:c0:0f:b7:da:7e:8e:60:6e:22:
                    ce:3f:bc:5a:97:7e:e7:07:43:c2:7b:b6:33:14:e6:
                    bd:6b:ff:e9:09:a8:5e:e4:55:08:ee:da:4e:69:60:
                    c1:27:7e:38:57:d2:a6:84:6d:23:92:19:34:23:d7:
                    60:70:a5:b0:89:07:ad:2c:27:af:0b:3b:2c:7e:92:
                    83:59:c4:54:8c:fd:e2:e5:e2:27:3a:16:f3:c8:db:
                    b2:56:5a:9a:51:f4:56:52:10:11:17:c2:16:79:23:
                    c3:1f:47:87:cc:7b:5b:19:3e:da:13:c1:00:b8:32:
                    9a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:26:51:E5:FC:91:28:C3:90:CA:0B:22:13:3F:93:60:77:02:4F:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd2209f3-37ce-32d6-97ec-3d99ffc6dc3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:6a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:94:f7:30:e2:a3:5c:a4:ef:07:55:97:af:11:d3:67:dd:54:
         74:4c:c4:da:33:54:78:a8:ca:23:3c:17:b0:7f:34:e9:fc:a0:
         8a:4e:ba:20:0f:a5:a7:56:03:dd:34:4d:78:ce:3f:0c:6c:75:
         bf:d0:87:73:c7:2a:41:c1:8b:02:75:0b:0a:32:d1:b2:c1:05:
         ad:39:0f:af:f1:0c:a2:93:2a:06:f1:61:89:01:cb:c9:c8:b7:
         ea:88:f0:99:34:03:25:06:38:c8:ab:b1:a8:28:ce:b3:01:99:
         dc:1c:29:6e:57:0c:1d:38:c8:db:66:13:bc:e9:a6:07:33:4b:
         62:5f:cd:c7:1a:fa:f5:cb:a5:69:df:c9:cd:9b:ac:a6:b2:77:
         e9:d9:f9:cb:32:ba:57:42:1f:6a:20:ca:c5:f0:bc:6a:2d:69:
         b7:4f:36:19:d2:23:39:b9:99:1e:da:93:6b:22:51:1e:df:a9:
         e0:c3:27:4c:69:25:ab:54:dc:0b:bc:0b:82:36:c1:28:6c:db:
         a6:a4:7e:dd:01:d3:81:99:67:23:d2:6c:8c:36:a8:f4:51:a3:
         6d:2b:a0:5f:eb:fd:df:de:97:b9:fb:91:3e:9f:de:3d:a2:d5:
         49:32:c0:f2:51:5f:b0:db:bb:b0:c3:88:de:13:ce:41:9a:20:
         9c:c6:0f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:08:16 2025 by rpki-client