Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/481d97c4-7e9a-3cea-bb3f-dbd78665a0ca.roa
File:                     481d97c4-7e9a-3cea-bb3f-dbd78665a0ca.roa (raw, json)
Hash identifier:          kqBq13xOvr3vkV1Cjzd/pHYo1HKuEkJZ88Netniarj0=
Subject key identifier:   CD:35:62:E9:A6:2E:4D:5F:84:99:8C:39:7C:04:8D:C1:5B:25:97:E3
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F4328584A936B5F80F2E2BB08467CE500
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/481d97c4-7e9a-3cea-bb3f-dbd78665a0ca.roa
Signing time:             Sun 20 Jul 2025 01:00:50 +0000
ROA not before:           Sun 20 Jul 2025 01:00:50 +0000
ROA not after:            Sat 18 Oct 2025 01:00:50 +0000
asID:                     1288
IP address blocks:        2620:171:25::/48 maxlen: 48
                          2620:171:26::/48 maxlen: 48
                          2620:171:b1::/48 maxlen: 48
                          2620:171:f7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 31 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:93:6b:5f:80:f2:e2:bb:08:46:7c:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Jul 20 01:00:50 2025 GMT
            Not After : Oct 18 01:00:50 2025 GMT
        Subject: CN=e79b037d-016d-4e98-905a-b3d18d239507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:af:50:cc:f9:37:65:99:4e:88:51:73:91:91:
                    65:56:d1:21:48:f7:63:70:19:8f:34:a6:ae:c5:6f:
                    c2:fc:53:9a:69:1a:26:f4:f3:9a:ce:45:e8:19:de:
                    48:23:6c:f9:f7:8f:11:b2:8f:c6:5e:d9:f8:ee:85:
                    1d:50:5d:36:5d:b6:3b:2e:c1:70:5d:55:8b:9c:e8:
                    07:98:97:b4:9f:7f:0b:b1:9d:ff:e5:aa:76:b8:de:
                    aa:fc:7b:cf:9e:ce:e5:c8:b5:88:8a:76:9b:9b:24:
                    62:c9:42:94:cc:e7:8b:2c:5f:9a:d4:78:f5:76:73:
                    f4:b8:b5:75:4f:8e:7f:f9:51:a3:e7:be:d1:19:02:
                    37:f4:09:09:74:39:c7:9e:d6:7a:be:7a:68:95:8f:
                    8b:6b:88:39:3c:05:01:46:68:0e:c1:e8:bf:b6:b7:
                    26:27:e3:52:9c:3f:11:53:b0:50:74:3a:86:07:3a:
                    74:6a:ba:ae:93:94:71:fd:ae:9e:a0:68:8f:02:26:
                    50:fe:dd:46:73:2b:c4:64:bb:10:ad:83:22:61:22:
                    e7:48:a4:dc:e4:be:32:a0:e4:8b:2b:cf:53:9e:12:
                    45:c2:6f:17:aa:5b:27:8d:90:be:01:94:48:c9:43:
                    0c:ef:f3:c3:56:72:ed:7e:90:9a:24:2f:0d:01:93:
                    b5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:35:62:E9:A6:2E:4D:5F:84:99:8C:39:7C:04:8D:C1:5B:25:97:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/481d97c4-7e9a-3cea-bb3f-dbd78665a0ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:171:25::-2620:171:26:ffff:ffff:ffff:ffff:ffff
                  2620:171:b1::/48
                  2620:171:f7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:da:94:94:80:68:46:ec:d1:f5:bb:28:07:52:31:39:15:4c:
         51:bf:29:b1:da:b8:e4:1f:68:b8:5b:b6:a6:53:2a:35:b8:8b:
         15:ae:18:1e:f5:09:f1:15:4c:f2:27:aa:57:99:85:aa:9a:a7:
         bc:30:6c:64:88:29:23:13:5b:39:85:79:ce:b4:35:ca:40:40:
         0a:73:49:1d:aa:b7:0e:9d:c6:77:b3:3c:0d:e1:e6:cb:2e:4f:
         1d:c1:93:e4:f2:7a:1a:4a:33:a4:0a:20:a3:04:a0:61:61:7c:
         fd:44:21:8e:5c:1c:0e:60:dd:45:91:ba:38:67:7d:b1:5c:3f:
         a4:6c:35:f0:22:4c:a4:38:4c:62:c5:e0:7e:af:33:84:03:8c:
         be:f5:28:56:49:0a:2a:34:23:aa:68:ce:d3:64:72:ad:28:fd:
         eb:9d:4d:9a:31:79:47:ea:3f:81:75:a0:4f:46:4b:3c:57:a4:
         04:e0:68:8e:eb:48:1f:20:d9:0d:c5:a2:c6:26:0d:9d:02:61:
         21:8e:ed:12:4e:88:30:15:e8:39:f6:18:23:c5:b2:af:8d:06:
         61:48:d7:4e:56:c4:c2:18:2f:ed:4a:63:44:3d:16:28:e8:82:
         d4:70:ee:60:83:07:4e:eb:aa:b1:e6:3e:2d:bf:e7:45:cd:21:
         ff:72:2d:b9
-----BEGIN CERTIFICATE-----
MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWEqTa1+A8uK7CEZ85QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3
MTAzMB4XDTI1MDcyMDAxMDA1MFoXDTI1MTAxODAxMDA1MFowLzEtMCsGA1UEAxMk
ZTc5YjAzN2QtMDE2ZC00ZTk4LTkwNWEtYjNkMThkMjM5NTA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkK9QzPk3ZZlOiFFzkZFlVtEhSPdjcBmPNKau
xW/C/FOaaRom9POazkXoGd5II2z5948Rso/GXtn47oUdUF02XbY7LsFwXVWLnOgH
mJe0n38LsZ3/5ap2uN6q/HvPns7lyLWIinabmyRiyUKUzOeLLF+a1Hj1dnP0uLV1
T45/+VGj577RGQI39AkJdDnHntZ6vnpolY+La4g5PAUBRmgOwei/trcmJ+NSnD8R
U7BQdDqGBzp0arquk5Rx/a6eoGiPAiZQ/t1GcyvEZLsQrYMiYSLnSKTc5L4yoOSL
K89TnhJFwm8XqlsnjZC+AZRIyUMM7/PDVnLtfpCaJC8NAZO1bwIDAQABo4IDdTCC
A3EwHQYDVR0OBBYEFM01YummLk1fhJmMOXwEjcFbJZfjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy
NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvNDgxZDk3YzQtN2U5YS0z
Y2VhLWJiM2YtZGJkNzg2NjVhMGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4
ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj
NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2
MGRlYzcxMDMuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmMBIDBwAmIAFx
ACUDBwAmIAFxACYDBwAmIAFxALEDBwAmIAFxAPcwVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAbdqUlIBoRuzR
9bsoB1IxORVMUb8psdq45B9ouFu2plMqNbiLFa4YHvUJ8RVM8ieqV5mFqpqnvDBs
ZIgpIxNbOYV5zrQ1ykBACnNJHaq3Dp3Gd7M8DeHmyy5PHcGT5PJ6GkozpAogowSg
YWF8/UQhjlwcDmDdRZG6OGd9sVw/pGw18CJMpDhMYsXgfq8zhAOMvvUoVkkKKjQj
qmjO02RyrSj9651NmjF5R+o/gXWgT0ZLPFekBOBojutIHyDZDcWixiYNnQJhIY7t
Ek6IMBXoOfYYI8Wyr40GYUjXTlbEwhgv7UpjRD0WKOiC1HDuYIMHTuuqseY+Lb/n
Rc0h/3ItuQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:03:01 2025 by rpki-client