Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/63c2bcbb-58bf-3f62-b55c-e84f8f83a4d5.roa
File:                     63c2bcbb-58bf-3f62-b55c-e84f8f83a4d5.roa (raw, json)
Hash identifier:          F4cXYuzEFi4eeiKMIfMxypxWz9Pz6R+UeAblkCOzNPE=
Subject key identifier:   6A:BA:53:6A:B2:6C:D9:34:E8:C4:C2:D3:32:A6:EC:3C:0E:78:55:3B
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F18022683059DD8C46CF4880
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/63c2bcbb-58bf-3f62-b55c-e84f8f83a4d5.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     19905
IP address blocks:        2620:74:1b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:22:68:30:59:dd:8c:46:cf:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=aea6c800-2fc7-474d-ae86-88bb8cef5c44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:99:e1:96:af:de:c6:dc:a5:25:73:8f:52:bd:
                    17:c2:68:b6:9b:3c:46:b2:50:c0:d6:a1:1e:b0:46:
                    6a:12:20:46:01:7f:ff:7d:c9:f6:a7:84:a9:1c:9e:
                    71:3a:2f:a4:2f:2d:84:fc:9f:d4:2b:9f:94:c7:a0:
                    a7:58:bb:4f:af:7d:93:07:56:54:a3:a3:87:7c:83:
                    bf:55:40:f2:9b:f5:f6:d5:47:b9:23:e5:f1:cd:05:
                    0b:b1:ca:a6:71:4c:e4:3c:41:e1:69:4a:a2:63:c9:
                    11:73:3a:d2:10:fc:43:13:53:9f:05:f7:f4:50:e8:
                    fa:40:37:d8:73:01:c7:56:36:1d:c8:46:18:24:fb:
                    9f:7c:ee:98:aa:51:83:6d:06:db:05:f8:ad:e1:5f:
                    52:df:1f:c1:55:6f:c7:80:4a:7f:e3:3b:8c:5c:d1:
                    88:58:9c:bc:ad:93:5f:8b:38:79:35:11:68:f8:7d:
                    71:9f:57:ac:85:60:61:71:b0:ed:c8:ac:bf:34:47:
                    0b:dc:9a:4f:31:6d:78:f9:1e:67:78:c0:4a:90:0f:
                    24:32:8a:4c:f7:16:3e:f4:17:50:23:e9:e6:c2:7c:
                    e4:d6:83:96:a8:75:d1:99:97:a7:2e:23:49:db:85:
                    27:a1:7a:b1:51:82:23:b9:be:c3:75:95:49:36:0b:
                    59:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:BA:53:6A:B2:6C:D9:34:E8:C4:C2:D3:32:A6:EC:3C:0E:78:55:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/63c2bcbb-58bf-3f62-b55c-e84f8f83a4d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:1b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:ea:a1:ca:17:4a:13:7d:81:03:94:9c:a6:64:dd:37:54:98:
         5a:74:66:7b:91:fd:a8:33:5b:7e:1a:3a:f2:b5:95:68:89:b3:
         58:da:e3:82:25:52:d1:19:22:3a:62:d8:15:64:03:cf:a8:b5:
         a9:47:50:40:0e:9c:2b:36:c4:8f:7d:33:d6:e2:34:15:cf:8b:
         cb:96:85:0b:d3:f5:29:2c:aa:ab:0b:5e:79:0e:65:7f:1c:e8:
         d6:d8:c6:27:fe:5b:d3:02:36:52:de:42:57:da:69:7b:03:f2:
         d1:d7:26:10:a8:f6:c0:5d:90:9b:c4:b6:33:32:c7:0e:e1:5f:
         2b:5c:3e:16:48:12:29:42:d3:a5:b5:cd:74:5e:c9:13:09:d5:
         30:87:ae:34:74:db:a6:a8:33:1d:b4:c8:84:58:49:52:d6:04:
         69:33:f6:ce:26:11:5e:4d:7b:cb:b6:aa:ed:eb:33:99:18:15:
         a8:25:69:0b:d9:bc:d9:54:21:42:b5:31:2f:f6:fe:98:68:b9:
         0d:c2:b2:e0:da:69:b3:81:c1:d3:0d:84:ce:00:a3:1e:10:3f:
         d9:bb:94:3f:2d:1e:10:ed:c9:72:73:3a:33:81:76:87:e5:9e:
         8a:be:78:36:be:95:db:c0:e6:ee:28:43:a8:83:67:f9:75:5f:
         3d:1d:1b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:14:57 2025 by rpki-client