Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e9fba4a-ed0e-3f6f-8ea7-1d449adeb1af.roa
File:                     3e9fba4a-ed0e-3f6f-8ea7-1d449adeb1af.roa (raw, json)
Hash identifier:          4/agzTvVVgGZLmSrQSXnKOH7K0dFHXpFxClaFtn1dWI=
Subject key identifier:   C2:DF:05:E3:93:DC:0E:94:17:B1:EE:B6:8A:D2:BC:39:25:00:7C:1B
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584A6825E50691E681C87027D700
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e9fba4a-ed0e-3f6f-8ea7-1d449adeb1af.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     397198
IP address blocks:        2620:74:2c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:25:e5:06:91:e6:81:c8:70:27:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=e8ae41e3-661c-4459-8a80-d1810f8d3d6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:55:c6:d9:2d:f0:c0:bf:d6:5a:e6:19:60:39:
                    7e:2f:a9:38:17:c9:9f:18:c6:bb:ad:3e:ed:36:1e:
                    ef:6d:51:13:1e:d5:d4:0d:62:38:de:bd:cf:84:18:
                    0c:a5:aa:9f:66:73:dd:d9:2e:66:5c:3a:40:51:f9:
                    e0:7c:53:45:18:62:ee:79:77:cb:5b:82:39:8b:a2:
                    84:d3:4b:3d:da:ff:72:0f:94:69:20:13:34:65:5e:
                    58:21:19:c2:a0:c8:6c:d2:14:79:93:09:c7:97:02:
                    cc:b0:3f:c1:f2:1b:86:cf:83:2d:19:68:34:bb:c5:
                    76:a5:52:e4:bd:00:2c:ff:20:36:9f:0f:c8:bf:27:
                    85:40:8e:77:2b:76:5b:88:dc:86:11:f0:ad:fb:86:
                    27:5f:d0:6c:43:45:6f:b9:09:ae:05:b7:d4:73:1d:
                    ff:37:84:bc:33:bd:bd:29:a4:05:2c:29:75:77:77:
                    bd:61:01:46:ee:ed:64:65:8e:78:1f:28:9c:3c:db:
                    2f:d0:af:f5:19:f3:f8:c4:0e:e5:45:f3:b1:56:6f:
                    7c:62:ea:32:83:fa:04:09:35:ce:88:bd:41:b2:6a:
                    77:08:14:7a:56:e0:11:47:16:d6:04:d4:bb:9b:e1:
                    cc:d5:60:ee:1a:f8:49:2a:f3:09:af:13:3f:08:1b:
                    71:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:DF:05:E3:93:DC:0E:94:17:B1:EE:B6:8A:D2:BC:39:25:00:7C:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e9fba4a-ed0e-3f6f-8ea7-1d449adeb1af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:b5:62:72:cc:8e:ae:c0:0e:90:80:fd:90:43:b5:b9:76:be:
         9c:fe:e5:55:a3:2e:e6:09:6b:45:88:ca:d2:5f:fe:75:7b:7e:
         9e:14:7b:a4:3f:7e:f0:c9:bb:08:bf:16:20:5e:12:02:05:9f:
         0e:f3:fb:2c:1f:1d:0d:dc:43:a2:dd:dd:48:af:ce:91:c4:1c:
         76:da:cc:04:f9:39:f4:ce:44:c3:81:78:71:72:ff:1f:84:72:
         4d:7e:11:ab:46:8a:8c:41:58:39:50:cd:52:2a:ad:7f:b5:35:
         a5:23:7c:a8:66:cd:94:6d:7a:0f:e9:94:09:1f:fd:ca:48:da:
         c5:9d:82:6c:f9:25:3c:44:94:4f:2c:e9:1a:c2:90:a6:10:19:
         5b:67:56:f6:84:1d:89:9c:09:31:82:a2:e9:7b:c1:5f:d1:3b:
         68:de:b1:6c:41:84:b6:bd:75:31:7d:1c:69:6c:55:5a:fe:11:
         38:d9:d5:31:f6:75:14:68:83:5b:2a:f5:4a:6f:ea:6d:1f:e4:
         a3:95:49:20:65:c2:0d:69:45:a4:87:91:b8:c2:58:91:9d:d3:
         f3:48:9c:12:87:d2:e6:cb:eb:ec:f1:f8:c0:1c:46:5b:0c:56:
         69:b7:50:32:b7:3b:24:71:b1:34:23:33:64:22:3e:f6:87:f1:
         17:67:4f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 11:38:53 2025 by rpki-client