Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/73fa706f-955a-33d3-927d-050c17047b65.roa
File:                     73fa706f-955a-33d3-927d-050c17047b65.roa (raw, json)
Hash identifier:          HLBKm4J8gGsAZdTmZDbq0D1X3meBbEQvCAODzPDlGiA=
Subject key identifier:   C8:4D:64:AA:A1:42:50:07:3D:66:81:0E:B5:82:2B:7B:B7:D5:76:70
Certificate issuer:       /CN=74c7f30e-70be-4f8c-bc8f-60b85d1b68f7
Certificate serial:       010D0C9F43285849F2E532AF7391EEE9C4AAAD80
Authority key identifier: BD:3F:1D:DF:2E:F0:4E:EF:1F:5E:35:46:81:7C:54:13:E1:A5:ED:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/73fa706f-955a-33d3-927d-050c17047b65.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     16509
IP address blocks:        2602:80c::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:32:af:73:91:ee:e9:c4:aa:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74c7f30e-70be-4f8c-bc8f-60b85d1b68f7
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=c735a564-0744-494f-93a2-8384b2433827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:24:5c:bf:2d:f1:d0:b7:31:7b:6e:b3:d7:28:
                    b7:68:49:87:26:1a:1b:97:58:b0:d1:79:2d:46:b7:
                    0b:75:c7:e7:9d:39:f2:3f:9d:87:e3:bf:3c:a0:98:
                    48:f8:23:8a:95:9c:df:97:b3:1a:b5:33:56:d6:89:
                    fe:c1:4b:50:8b:49:7b:cb:fa:4b:67:5c:7e:20:7e:
                    0f:ff:3c:0d:cf:68:75:b6:e5:48:6d:96:7d:fc:e4:
                    fa:c1:54:7d:64:4f:4d:78:41:4a:fb:49:e4:e9:03:
                    fc:29:32:40:a7:f8:c3:e3:7c:10:f0:dd:06:6a:14:
                    9b:29:17:90:f3:e5:66:3b:7c:45:49:3b:48:69:46:
                    20:3c:c4:6a:9a:52:ea:d0:52:62:c8:1c:d7:2f:15:
                    c5:fb:f1:39:b9:d3:d8:ec:5d:eb:6e:03:8b:0f:8b:
                    ff:2d:b4:9b:19:37:df:fd:77:e3:59:7d:55:20:6a:
                    ac:9e:79:7d:f0:7d:3c:53:29:f2:27:c0:d5:d5:b4:
                    27:65:71:6c:47:9d:a0:3a:85:7a:1e:da:ae:5d:4d:
                    f8:05:9e:3d:b4:de:f3:8d:ad:ef:e4:64:5a:0d:2b:
                    e1:8d:a9:05:7a:92:b7:b8:28:88:9b:ea:b4:1f:a1:
                    b0:b8:81:1c:25:df:e1:07:b4:27:2a:df:0a:a4:11:
                    eb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:4D:64:AA:A1:42:50:07:3D:66:81:0E:B5:82:2B:7B:B7:D5:76:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/73fa706f-955a-33d3-927d-050c17047b65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.crl

            X509v3 Authority Key Identifier:
                keyid:BD:3F:1D:DF:2E:F0:4E:EF:1F:5E:35:46:81:7C:54:13:E1:A5:ED:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:ad:93:af:b8:ed:6a:b0:b3:8f:2e:ba:96:e6:42:cd:a5:18:
         95:6a:63:57:a0:7e:d2:d8:60:02:77:77:aa:72:7c:f9:fb:fc:
         c1:fe:1f:80:98:ac:44:fa:e0:ec:5c:91:89:34:f5:12:c2:1b:
         85:b4:67:fa:ce:d4:14:ce:53:b5:da:cb:ec:1c:67:5e:2d:ea:
         d4:3a:a1:70:7e:be:e9:df:ee:2e:f7:38:2c:56:de:6f:63:c3:
         62:22:7c:24:22:b9:b7:11:8e:c7:90:6e:51:69:ff:2e:11:82:
         da:5f:db:72:5f:41:4c:b0:6e:ca:c3:14:92:e2:29:f1:ce:a5:
         9b:eb:15:a4:f5:69:06:9e:38:e1:7c:e4:6c:78:47:5f:2a:71:
         7c:f1:42:29:3a:87:fa:69:bf:7d:40:0b:f3:3e:d6:60:3e:d6:
         41:9f:b8:9a:c4:26:80:07:b4:a7:3f:5d:ec:98:2d:31:9c:39:
         2d:32:89:90:73:03:f9:22:63:9e:08:73:80:e0:bd:33:fc:49:
         5f:88:e2:1c:fa:67:54:5a:ac:dd:ed:7b:4e:51:a5:94:39:ab:
         cb:57:15:06:92:59:d2:41:c9:79:e7:04:66:28:b2:cc:a9:68:
         db:76:31:8a:33:fb:08:bf:4b:43:ab:b9:20:31:a3:36:78:7c:
         4b:7d:22:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:16:25 2025 by rpki-client