Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd928b15-90f3-3fc9-921f-17c8f74b3ebf.roa
File:                     dd928b15-90f3-3fc9-921f-17c8f74b3ebf.roa (raw, json)
Hash identifier:          AFJGYzFiuxp8N6QCOU7jQNZp2viWf+UGw0orc46PYwQ=
Subject key identifier:   04:0C:9D:5F:87:6E:A6:DF:12:BA:CE:1F:A7:13:95:21:47:41:F8:D9
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285849A1E386A73A29B1C754627500
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd928b15-90f3-3fc9-921f-17c8f74b3ebf.roa
Signing time:             Thu 24 Apr 2025 12:37:24 +0000
ROA not before:           Thu 24 Apr 2025 12:37:24 +0000
ROA not after:            Wed 23 Jul 2025 12:37:24 +0000
asID:                     397194
IP address blocks:        2620:74:2b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:e3:86:a7:3a:29:b1:c7:54:62:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Apr 24 12:37:24 2025 GMT
            Not After : Jul 23 12:37:24 2025 GMT
        Subject: CN=61613538-c65b-4acd-8cdb-4cbde5f0a28f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:86:4e:56:ed:61:23:82:55:b7:38:fe:21:61:
                    93:08:c6:58:9d:a7:f0:6c:36:c6:93:1b:aa:17:68:
                    41:31:41:88:bb:2c:34:1d:1d:09:48:6d:dc:f5:72:
                    62:65:bc:5e:43:cb:1b:38:9c:a3:74:a1:ba:49:ae:
                    b7:c3:aa:41:23:74:15:34:2d:28:97:d1:b1:52:fb:
                    01:b4:92:cf:ab:3e:cf:a3:c7:dc:57:71:f4:3d:33:
                    5e:23:10:bd:56:70:5f:78:be:4a:4c:eb:27:20:cd:
                    50:91:af:e0:03:55:1e:31:6c:3f:8d:cc:66:2b:ee:
                    37:fa:a3:ec:00:53:35:f3:fb:59:61:d9:12:7b:5b:
                    ec:e1:4a:d0:73:84:5d:96:72:80:0f:48:00:c5:cd:
                    3f:89:6d:c5:f2:97:9d:6e:4a:be:19:89:dd:b2:c1:
                    40:ab:15:2b:0a:03:c0:f1:64:bd:ec:97:8a:2d:3f:
                    f7:3f:c6:a3:23:fe:56:34:fa:2f:14:a5:bd:40:dd:
                    04:73:37:74:9d:6e:ff:f3:e6:be:81:2c:48:b1:7b:
                    ea:fc:b0:2a:e7:38:00:b4:f3:d4:c7:83:b2:34:96:
                    56:9b:68:23:b1:20:b4:73:5e:6c:a4:66:69:1b:19:
                    9b:4f:a5:11:20:55:37:ff:82:15:9e:bc:e7:e5:fc:
                    99:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:0C:9D:5F:87:6E:A6:DF:12:BA:CE:1F:A7:13:95:21:47:41:F8:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd928b15-90f3-3fc9-921f-17c8f74b3ebf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:66:2c:aa:25:0b:0c:ab:a9:7e:80:eb:02:2d:db:9b:bf:d3:
         62:49:97:ea:62:21:33:34:95:5c:39:1d:b0:62:dd:c6:a1:b7:
         1e:ec:af:9f:f7:a1:81:0a:68:fc:87:87:2c:2d:32:6d:98:a2:
         bb:62:d6:e9:a0:59:5e:7d:cb:31:da:9c:86:d3:37:d7:be:45:
         74:7d:ca:0a:1d:e3:27:b3:b7:50:fb:44:8e:c8:13:e2:2f:4a:
         15:8f:62:a6:58:74:c8:07:b9:18:79:03:ab:fb:71:5f:b1:38:
         01:af:ed:6d:61:c7:90:74:94:a5:e7:63:58:fd:69:bd:f9:bc:
         88:80:7b:24:91:7e:65:af:91:18:e7:fa:30:ec:17:fd:a2:6f:
         a9:2d:99:ac:e2:cf:7c:27:53:a1:71:a6:fb:aa:7f:c9:8b:ef:
         51:6a:3e:f5:85:e7:24:8f:ec:de:08:bb:ba:e9:6a:e9:11:d4:
         5d:55:ea:67:3f:52:08:b4:14:d3:b4:fe:fa:11:53:f1:e8:00:
         11:4c:be:c4:b3:1d:00:73:fa:0d:67:7a:31:01:6d:82:70:38:
         bd:5e:fe:2c:7c:7b:38:62:c6:3d:45:0c:a8:9f:6f:fc:75:4e:
         49:f4:23:36:1d:1d:72:37:06:fa:0d:81:82:1f:4c:48:19:6b:
         f4:20:2e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:23:11 2025 by rpki-client