Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/58ff9e0f-4c70-3be4-a64f-c7c43e8fcaa6.roa
File:                     58ff9e0f-4c70-3be4-a64f-c7c43e8fcaa6.roa (raw, json)
Hash identifier:          AjpDfnXsONv8tRxo/7U3pm1osf9N7S1sQURrJS/AnK0=
Subject key identifier:   24:37:4D:37:79:A3:49:0B:C7:46:BB:3A:58:FF:DF:27:B3:DD:44:18
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AAB2666F343A1DB07D8FD3EC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/58ff9e0f-4c70-3be4-a64f-c7c43e8fcaa6.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     0
IP address blocks:        2602:107:2400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:66:f3:43:a1:db:07:d8:fd:3e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=46656084-7ba5-42a5-8c93-443dbc90dfd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:75:6e:93:86:11:b7:1f:8f:02:b6:5a:7a:d0:
                    a5:cb:16:64:f6:ea:ca:81:0f:19:0e:1d:cc:c7:2a:
                    a4:2c:f4:05:dc:f8:1d:d2:72:d9:9e:cb:41:2b:2e:
                    12:1f:00:09:d2:0d:71:e4:fa:ae:60:63:3c:fd:70:
                    d1:a3:ad:8d:a3:95:1f:04:f5:a4:ef:e7:57:f6:16:
                    a0:33:ac:11:d9:d9:26:0d:b4:a8:0c:f6:83:e2:17:
                    06:42:d3:00:0c:16:84:d1:da:d1:c3:a1:07:21:03:
                    fb:4b:8a:02:16:a9:5e:33:84:38:b1:ac:54:2d:1d:
                    9c:dc:40:82:58:b0:44:a1:ba:0f:71:f8:71:74:e4:
                    4f:e8:19:57:a5:a4:0a:1a:89:f2:ca:1b:31:23:4a:
                    8f:1a:2e:b4:28:7a:bc:29:40:42:0e:16:ca:63:ab:
                    37:d5:db:dd:12:f4:0e:03:b0:1a:cd:38:30:9e:d5:
                    67:9a:29:12:d2:d7:0d:43:30:85:1b:52:c6:35:78:
                    f9:71:89:1e:1f:f0:aa:45:3e:70:7b:95:b1:ef:66:
                    35:a0:7f:37:8a:07:0e:f0:01:55:6e:30:87:5e:86:
                    42:57:4f:bc:63:41:9f:02:17:c2:4f:41:3c:4c:b8:
                    2e:cc:1d:c2:6e:2c:9a:db:6b:3c:3f:6c:b5:93:81:
                    58:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:37:4D:37:79:A3:49:0B:C7:46:BB:3A:58:FF:DF:27:B3:DD:44:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/58ff9e0f-4c70-3be4-a64f-c7c43e8fcaa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:107:2400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:5d:bf:10:ec:8d:56:8b:25:45:ff:56:e8:44:a2:0b:16:b4:
         05:3c:8f:5f:1b:9f:7b:13:55:ce:17:9d:38:4d:0d:db:21:37:
         5d:cd:f2:0c:df:78:2d:2c:15:a0:47:1c:cd:3f:c6:18:44:9e:
         11:3b:cf:b3:c1:a8:8c:d2:6e:4e:65:66:2f:8a:f1:d5:67:e1:
         02:cc:07:34:9b:a9:5f:80:14:ab:00:37:83:56:86:d1:51:91:
         f8:e2:f2:72:3e:88:8b:c7:f0:55:a1:f0:4f:cd:c0:c9:8a:23:
         ba:83:da:a5:24:00:27:5c:e4:d1:38:8a:21:77:eb:e2:4a:e4:
         d3:c1:96:36:78:b5:16:fb:8f:fb:e4:6d:6c:99:92:6c:c8:e0:
         15:af:21:1a:d9:ed:80:aa:5b:0c:48:2c:60:54:fb:b5:5a:e8:
         26:fd:2f:44:1a:82:df:42:ba:9d:a3:cd:a9:20:d0:c3:35:b0:
         04:9d:e3:39:f4:71:79:a9:a1:7c:81:b8:a7:cb:41:e1:07:1a:
         5c:b7:de:68:da:cb:ee:64:bd:d1:c4:51:46:82:fb:36:17:9b:
         6b:65:ec:53:ce:9a:8b:c5:5b:d0:d6:44:79:66:b9:7e:44:51:
         df:6e:12:d6:c3:da:00:4a:02:d2:97:34:74:44:09:29:65:c2:
         9c:b1:96:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:43:48 2025 by rpki-client