Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0d5997d6-230c-35ca-b1c9-d17b043913b7.roa
File:                     0d5997d6-230c-35ca-b1c9-d17b043913b7.roa (raw, json)
Hash identifier:          iT2JCMuEdo/0Xabs9GCu5t2ZRzWeoYDD+/yYGt2JN4w=
Subject key identifier:   47:40:4D:77:AB:4B:E4:E8:72:3F:16:74:B2:B7:9B:9D:78:25:5C:44
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584A90A0ED520857974911BED080
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0d5997d6-230c-35ca-b1c9-d17b043913b7.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     396578
IP address blocks:        2620:74:2b::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:ed:52:08:57:97:49:11:be:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=e5d4c122-a938-446d-8b90-d1462eed6b44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:0c:bd:45:50:06:3d:be:74:04:ec:ee:0f:66:
                    fa:f3:3c:ec:63:83:b7:4c:3d:fe:f4:2b:1e:0c:71:
                    f0:c1:bb:8b:a6:93:fe:c1:f3:79:a3:51:d9:ae:9d:
                    e9:63:0f:4e:39:5b:c2:db:dd:cc:10:da:0b:f4:0c:
                    94:ae:9d:49:39:40:c4:0d:d7:e1:39:3c:79:02:72:
                    b7:77:d1:f2:ac:a4:ab:fa:12:ad:d1:7c:0b:c7:fb:
                    ec:9a:4e:2f:b1:32:17:7a:57:5c:bc:cc:74:d0:f6:
                    32:0e:94:71:3c:d6:f8:e7:9b:be:de:46:35:94:d6:
                    d3:5b:26:2f:ad:b6:9e:50:bf:2d:8f:25:d7:58:5b:
                    0c:10:3b:bf:02:03:90:15:0a:21:75:b8:ff:04:4d:
                    e1:f3:7e:ba:33:d2:c6:40:8d:5f:05:b4:d1:d9:9f:
                    a8:2f:a4:60:30:12:dd:60:86:95:82:81:8f:9c:74:
                    67:7e:2e:8d:13:61:c8:76:88:c5:92:54:69:7d:ce:
                    af:1d:bd:b5:66:b3:5e:72:29:e5:e7:c7:a5:15:b2:
                    84:39:d7:d3:e0:ca:93:1e:75:42:45:e6:42:c7:94:
                    a7:f6:02:f9:fa:b2:6e:b4:9c:e4:b2:34:5a:2d:e5:
                    5b:c7:98:3e:ed:45:81:67:86:f3:c5:3a:6a:e5:99:
                    75:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:40:4D:77:AB:4B:E4:E8:72:3F:16:74:B2:B7:9B:9D:78:25:5C:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0d5997d6-230c-35ca-b1c9-d17b043913b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:6a:b5:5b:d3:bf:22:83:c5:d2:ae:36:c5:52:98:57:12:3f:
         46:8f:74:e9:fe:73:a3:28:c1:0e:e7:79:4e:75:3c:12:b1:d7:
         25:61:ab:88:30:a1:5d:41:59:c3:23:42:ef:cb:d1:eb:55:da:
         7e:eb:59:5a:7e:5d:6b:f0:62:63:dd:88:0d:7b:31:f9:18:9c:
         93:ae:d2:e8:9a:d3:d4:10:17:02:e5:98:cd:f6:5d:c8:96:6f:
         e5:4a:12:94:d4:bf:a4:fd:82:6d:b4:e6:dd:b0:ba:2f:eb:42:
         e6:b4:1d:91:f2:fa:2d:da:b1:99:dd:ca:3e:c5:c4:86:b6:9d:
         41:5c:49:c4:16:69:33:74:49:de:c1:94:42:94:9c:80:ff:9d:
         8c:a8:0a:33:96:06:14:06:9a:4c:37:a6:ba:ce:aa:71:2f:f4:
         86:0c:f5:f9:d5:80:d3:34:da:77:58:d5:1f:dc:9d:a0:14:80:
         2e:15:2c:4e:72:36:e7:bd:cf:a5:3c:63:d1:77:45:8e:51:26:
         9b:43:13:53:9e:d9:4e:e2:0e:c0:14:af:e7:91:12:f5:16:07:
         d2:d4:76:d5:c0:3a:47:ab:93:62:f3:6d:8e:d7:e9:20:a2:3e:
         e9:86:31:aa:ed:fe:57:31:10:bc:8c:61:c2:80:69:ca:91:81:
         08:85:e2:0d
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqQoO1SCFeXSRG+0IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk
ZTVkNGMxMjItYTkzOC00NDZkLThiOTAtZDE0NjJlZWQ2YjQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wy9RVAGPb50BOzuD2b68zzsY4O3TD3+9Cse
DHHwwbuLppP+wfN5o1HZrp3pYw9OOVvC293MENoL9AyUrp1JOUDEDdfhOTx5AnK3
d9HyrKSr+hKt0XwLx/vsmk4vsTIXeldcvMx00PYyDpRxPNb455u+3kY1lNbTWyYv
rbaeUL8tjyXXWFsMEDu/AgOQFQohdbj/BE3h8366M9LGQI1fBbTR2Z+oL6RgMBLd
YIaVgoGPnHRnfi6NE2HIdojFklRpfc6vHb21ZrNecinl58elFbKEOdfT4MqTHnVC
ReZCx5Sn9gL5+rJutJzksjRaLeVbx5g+7UWBZ4bzxTpq5Zl1nwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFEdATXerS+Tocj8WdLK3m514JVxEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGQ1OTk3ZDYtMjMwYy0z
NWNhLWIxYzktZDE3YjA0MzkxM2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr
AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQB8arVb078ig8XSrjbFUphXEj9Gj3Tp/nOjKMEO
53lOdTwSsdclYauIMKFdQVnDI0Lvy9HrVdp+61lafl1r8GJj3YgNezH5GJyTrtLo
mtPUEBcC5ZjN9l3Ilm/lShKU1L+k/YJttObdsLov60LmtB2R8vot2rGZ3co+xcSG
tp1BXEnEFmkzdEnewZRClJyA/52MqAozlgYUBppMN6a6zqpxL/SGDPX51YDTNNp3
WNUf3J2gFIAuFSxOcjbnvc+lPGPRd0WOUSabQxNTntlO4g7AFK/nkRL1FgfS1HbV
wDpHq5Ni822O1+kgoj7phjGq7f5XMRC8jGHCgGnKkYEIheIN
-----END CERTIFICATE-----
Generated at Wed Jul 23 11:43:10 2025 by rpki-client