Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/20274ef5-a895-4a21-8558-063f5cf922b8/457b6738-f991-3981-8cbb-5f1607a3d8c4.roa
File:                     457b6738-f991-3981-8cbb-5f1607a3d8c4.roa (raw, json)
Hash identifier:          +GPZVkaTzQnQLQ8piYJzec73UVhzGClzBG74YNdtAbM=
Subject key identifier:   01:E1:96:98:89:06:B6:68:92:DC:88:FE:6B:97:D7:21:B5:2A:00:C1
Certificate issuer:       /CN=20274ef5-a895-4a21-8558-063f5cf922b8
Certificate serial:       010D0C9F43285849FE0FE93A8E01AD1B8B9ED3C0
Authority key identifier: 7D:34:DE:E2:FD:74:12:DB:62:8E:63:C7:28:16:F3:69:0D:82:89:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/20274ef5-a895-4a21-8558-063f5cf922b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/20274ef5-a895-4a21-8558-063f5cf922b8/457b6738-f991-3981-8cbb-5f1607a3d8c4.roa
Signing time:             Tue 27 May 2025 13:01:05 +0000
ROA not before:           Tue 27 May 2025 13:01:05 +0000
ROA not after:            Mon 25 Aug 2025 13:01:05 +0000
asID:                     17172
IP address blocks:        2620:a7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/20274ef5-a895-4a21-8558-063f5cf922b8/20274ef5-a895-4a21-8558-063f5cf922b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/20274ef5-a895-4a21-8558-063f5cf922b8/20274ef5-a895-4a21-8558-063f5cf922b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/20274ef5-a895-4a21-8558-063f5cf922b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:0f:e9:3a:8e:01:ad:1b:8b:9e:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20274ef5-a895-4a21-8558-063f5cf922b8
        Validity
            Not Before: May 27 13:01:05 2025 GMT
            Not After : Aug 25 13:01:05 2025 GMT
        Subject: CN=2dae12aa-8f1a-4fd7-b719-28f515e0ab02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a5:ab:4b:a7:71:71:69:31:f5:4d:54:36:85:
                    87:5b:78:1c:28:89:48:db:fb:72:46:96:4b:17:fe:
                    33:d6:b2:2a:d6:c3:af:46:5b:14:06:01:08:4c:3a:
                    2f:e1:5f:cf:b9:ae:59:e4:65:a8:b1:14:c0:89:51:
                    96:97:f8:79:03:c9:82:e6:fb:a8:ef:11:51:f2:d4:
                    86:e6:c7:98:59:59:6d:af:16:18:e6:10:e0:55:3e:
                    ee:b2:d5:f8:39:78:9a:5b:92:2b:d6:cd:32:5a:c6:
                    7d:85:ab:49:2b:66:8b:03:5b:33:b0:45:6b:97:49:
                    dd:42:12:86:7d:a7:44:a4:23:bd:a9:86:78:21:d4:
                    8e:1c:23:21:80:1c:e3:5d:64:0a:99:c0:a5:49:a4:
                    1c:08:ed:ab:30:77:f3:28:f0:1c:22:d4:11:ff:99:
                    82:5e:25:46:03:ee:bf:fa:23:26:ab:2e:82:14:17:
                    be:34:72:72:56:ea:54:1e:d9:99:8d:84:13:80:f6:
                    16:db:82:42:af:c0:3d:58:ba:22:b9:fa:02:79:50:
                    37:71:f0:bb:fd:5a:c2:13:9a:43:be:4e:c8:e1:98:
                    1d:85:1c:c4:b7:01:6e:db:3d:6c:23:16:b5:b8:98:
                    4b:02:5d:23:19:e3:84:fe:2c:d0:4a:85:54:36:6a:
                    ad:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E1:96:98:89:06:B6:68:92:DC:88:FE:6B:97:D7:21:B5:2A:00:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/20274ef5-a895-4a21-8558-063f5cf922b8/457b6738-f991-3981-8cbb-5f1607a3d8c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/20274ef5-a895-4a21-8558-063f5cf922b8/20274ef5-a895-4a21-8558-063f5cf922b8.crl

            X509v3 Authority Key Identifier:
                keyid:7D:34:DE:E2:FD:74:12:DB:62:8E:63:C7:28:16:F3:69:0D:82:89:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/20274ef5-a895-4a21-8558-063f5cf922b8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:a7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:56:58:06:bf:9c:b8:8e:67:a6:54:63:4c:58:fa:ac:aa:1e:
         f3:1a:63:fc:ab:e2:f8:96:81:e6:dd:c8:33:44:22:6e:d9:fd:
         64:55:bb:e6:4d:a5:28:72:b5:3e:16:1e:dc:c3:93:a4:bf:43:
         ad:21:8f:42:b9:0c:52:42:bf:c4:95:14:ba:80:e4:07:9f:f6:
         db:ba:c9:1a:a0:82:de:e0:12:42:a6:f7:0b:ec:31:2d:0a:ef:
         40:26:bf:41:18:1f:2d:af:a6:08:dc:f6:e7:e4:02:65:f5:45:
         d6:63:62:16:89:26:47:3e:49:9c:35:70:9b:1b:09:a3:2a:c6:
         69:59:c2:a2:e6:f0:5c:35:94:8d:4e:eb:f5:c3:f4:06:5f:6d:
         35:d7:46:3f:04:c3:a8:97:93:fc:9b:5b:5e:c9:22:2e:96:31:
         27:b0:c4:ca:fe:6e:0b:79:50:c3:08:c8:2d:d2:90:fa:e5:6a:
         40:e7:09:26:01:21:a6:51:f8:47:96:10:43:f8:38:4b:18:bd:
         b5:e3:b4:80:89:61:80:0c:d9:64:2b:62:6d:a1:79:04:7a:e4:
         08:3c:eb:14:27:5d:2c:22:dc:73:49:57:35:c7:0a:93:1b:26:
         48:1d:94:eb:55:0c:7f:53:b7:61:ec:62:a5:83:ae:6c:fa:0b:
         dd:52:bc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:39:10 2025 by rpki-client