Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4f204abf-977f-364d-9bb2-57d4a7b1ab31.roa
File:                     4f204abf-977f-364d-9bb2-57d4a7b1ab31.roa (raw, json)
Hash identifier:          inKvP9pFIG24ycDxjDJhVJ8ke9SDtCG/r6j39HXWpO0=
Subject key identifier:   CA:30:E2:97:2A:18:83:C8:3A:03:64:2A:B3:63:B3:7F:09:A5:D7:40
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA16217E83A8750A69E4A7400
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4f204abf-977f-364d-9bb2-57d4a7b1ab31.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     33588
IP address blocks:        2602:107:e7a0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:62:17:e8:3a:87:50:a6:9e:4a:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=afe7eb7f-bdea-4d15-a978-6e02d2f9e87b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4f:dd:77:e6:8e:50:1e:e1:b3:40:37:d8:28:
                    f2:53:09:02:4b:8e:a3:bd:bd:32:7e:de:10:de:1c:
                    d5:5f:ee:d6:e2:45:dd:b8:07:b2:7d:10:75:06:e6:
                    68:e3:c2:63:f1:6d:1d:1c:1e:c8:33:4a:bf:80:f5:
                    ba:c3:c5:d1:3a:44:ce:31:c8:ef:c6:5e:ca:eb:16:
                    9c:42:b6:6e:26:52:cd:06:72:60:01:89:9e:c8:03:
                    62:86:3b:15:c1:0d:58:29:1b:20:3e:ba:d9:60:92:
                    72:fd:25:7f:ec:8b:8d:31:ef:dd:a3:02:79:98:07:
                    ce:db:9a:19:f6:6e:ae:89:b4:7c:c8:37:99:2e:5a:
                    bc:67:0b:49:24:6b:a6:65:8c:b4:ab:3f:19:37:41:
                    01:66:7b:f0:bf:00:5a:a7:86:e6:68:75:51:25:1b:
                    68:71:52:f5:f3:7a:6b:18:a1:36:40:01:51:3b:a7:
                    c3:75:af:54:b4:d0:2c:c5:c2:fe:e1:fe:35:a1:c7:
                    ab:93:ca:ee:7b:8c:78:a6:c7:be:a9:6e:a8:62:38:
                    05:9c:0f:b1:4d:dc:21:52:ac:80:a4:fa:74:63:bd:
                    7b:86:ff:71:3d:4b:43:80:e7:ef:06:ed:24:28:5c:
                    cd:cf:c5:13:e8:58:bd:ee:86:d7:54:68:af:49:3a:
                    0b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:30:E2:97:2A:18:83:C8:3A:03:64:2A:B3:63:B3:7F:09:A5:D7:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4f204abf-977f-364d-9bb2-57d4a7b1ab31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:107:e7a0::/43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:e6:68:86:af:21:8b:e5:e1:ec:c3:6c:95:eb:9c:ec:ff:c9:
         b3:2b:46:90:b6:b2:2f:82:2a:c5:e9:5e:25:0c:0d:68:f4:ea:
         1f:8a:17:9f:43:fa:04:93:01:5e:31:81:07:36:82:2f:58:4d:
         a0:40:7a:f0:0a:8c:78:d1:d4:13:a5:0c:dc:2f:e6:28:0c:41:
         7d:4e:ba:26:c2:30:12:7a:49:a3:71:68:78:f0:7a:e6:98:e6:
         5e:d7:09:2b:dd:87:63:eb:ee:c9:46:bc:43:f5:cf:77:3b:4a:
         3d:4c:9f:c1:d6:a6:6f:3f:c8:71:20:f9:68:9f:c7:18:25:97:
         15:6d:d5:1d:c7:77:1e:af:be:75:27:ad:8d:7f:b9:12:8d:88:
         ba:3e:39:62:17:17:d5:c6:59:52:d6:63:d1:a0:4a:48:70:1e:
         de:99:76:e6:02:ee:a0:d9:b3:64:5d:b8:b5:87:3c:3a:ec:9c:
         57:00:08:9a:e2:81:ea:8b:db:72:d6:76:c7:f1:04:1b:1d:86:
         c4:65:b4:54:c9:90:d4:0d:cb:bf:b0:3a:b9:ae:48:68:30:42:
         bc:bb:d5:61:fa:da:cf:bc:d7:ef:45:97:73:ee:24:e9:71:96:
         dd:fc:7e:1f:78:94:02:de:e2:99:e6:ed:17:92:0b:23:1a:8f:
         4f:c6:25:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:07:10 2025 by rpki-client