Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c829f13a-5138-3d62-88ec-0fead7230e02.roa
File:                     c829f13a-5138-3d62-88ec-0fead7230e02.roa (raw, json)
Hash identifier:          sdL85RKZH9ho4Ig0srVgcWluNJJCdkfnK2BgUWlos/Q=
Subject key identifier:   59:9D:9E:06:B1:C5:FE:44:BF:EB:1A:5B:9A:A4:4A:AA:99:2F:53:E6
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA161BDA63D3BA6870D684780
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c829f13a-5138-3d62-88ec-0fead7230e02.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        2602:107:4820::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:bd:a6:3d:3b:a6:87:0d:68:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=70c5be40-572e-414c-91f5-239e97aa170a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f5:01:f5:e2:c4:7a:38:ff:b5:d1:c9:8c:69:
                    c4:17:b1:63:fc:79:1d:06:da:dc:e1:46:f4:53:d9:
                    89:63:30:25:61:a4:0a:26:48:50:31:5b:7e:0e:32:
                    79:8d:8f:17:bd:0e:26:48:df:87:74:be:0a:90:2f:
                    08:ef:98:17:37:15:9e:e4:3d:ea:cc:7f:d5:c9:c5:
                    73:f7:bd:73:52:26:b3:d2:fd:26:9d:91:cd:dd:f1:
                    8a:46:ed:83:8a:1f:7d:c6:dc:64:1a:46:a1:10:79:
                    cb:f1:2b:5f:16:b4:5f:a9:f8:a5:79:3b:0b:a2:0f:
                    bb:4f:90:d2:b6:7f:64:87:83:c7:86:90:89:62:79:
                    01:b2:98:08:47:07:af:27:2d:65:34:7a:8a:bc:c9:
                    7c:74:f7:ac:83:50:67:77:b8:73:0e:9a:20:62:1f:
                    5e:49:8c:43:1c:63:1a:e1:b5:66:1c:d4:31:5f:60:
                    6b:12:2c:2c:f9:1a:cb:58:35:6b:2c:46:29:d2:9c:
                    06:c9:75:4e:a3:e4:c8:d4:a7:50:ce:c9:8f:64:0b:
                    8c:a7:04:89:0b:aa:96:39:49:08:fa:3e:e7:ad:a0:
                    d9:f5:aa:9d:e2:90:f6:cf:11:e9:46:6d:dc:4c:15:
                    80:cd:34:2d:d2:c1:8e:6e:cf:b5:48:94:04:b4:35:
                    41:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:9D:9E:06:B1:C5:FE:44:BF:EB:1A:5B:9A:A4:4A:AA:99:2F:53:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c829f13a-5138-3d62-88ec-0fead7230e02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:107:4820::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:89:1c:49:42:da:10:57:9f:48:a3:3e:f6:34:cd:7b:22:36:
         73:5f:4e:1a:2b:b0:4c:75:20:34:24:76:96:0d:19:9f:b5:85:
         9c:bf:0e:de:1c:d7:ad:9f:3a:17:7f:a4:38:5a:2d:d1:bc:7d:
         30:c3:cb:de:92:89:bc:8f:86:92:aa:a7:36:c8:1a:60:af:32:
         64:30:df:3a:c5:b8:83:40:ca:a7:74:a6:87:cd:bf:a1:01:01:
         3e:b3:5b:e4:4a:d9:06:ed:c5:4a:d5:a1:ef:b2:57:f1:8c:06:
         0b:0b:67:95:11:e3:70:3b:b9:a7:f0:61:e3:90:d1:0b:33:5c:
         65:f9:aa:46:61:1d:d0:02:5e:14:68:67:9c:12:ea:21:ab:6f:
         bd:51:76:51:5b:8e:ed:4a:1d:7a:05:97:1e:41:cd:33:20:2b:
         04:ac:d8:01:6a:f0:b3:0f:95:72:b6:55:56:bf:20:97:98:c0:
         91:15:c5:fc:15:73:07:33:45:33:6a:98:68:9f:9b:25:4e:29:
         61:55:b1:bc:46:3f:51:b7:83:c2:40:f9:5c:be:b9:7e:99:eb:
         43:b4:ba:e9:9a:fa:81:dc:9d:fb:c8:97:0d:f0:47:e9:05:ed:
         91:7f:a1:8a:4c:55:09:e1:6d:60:6a:b1:dd:3c:df:64:c2:10:
         6b:55:cd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:28:44 2025 by rpki-client