Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4d4ebf20-3566-3a19-b71e-a09c44df9065.roa
File:                     4d4ebf20-3566-3a19-b71e-a09c44df9065.roa (raw, json)
Hash identifier:          62S6LbhP/Lg0oWOR6FJs1Z8XrbWWMNS375x/eG64V8E=
Subject key identifier:   5C:FC:C3:F4:6F:B7:56:FD:23:94:C7:73:8B:75:D8:CC:39:35:E5:D0
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584A90A0E7EEF03CCD4404092E80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4d4ebf20-3566-3a19-b71e-a09c44df9065.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     396574
IP address blocks:        2620:74:2b::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:e7:ee:f0:3c:cd:44:04:09:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=d209981e-104c-4875-9ecc-3f526826af49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b6:18:61:11:5d:72:42:f9:9f:43:e3:41:f7:
                    ef:21:23:0b:49:70:40:54:7a:bc:43:97:82:64:5d:
                    67:c1:df:d8:08:05:23:3f:bd:a9:f0:15:e0:78:00:
                    55:ba:ed:a3:24:30:39:de:e9:58:25:1b:69:dd:74:
                    76:1d:f3:9f:24:50:27:94:ff:09:26:16:0e:d1:3d:
                    98:03:b5:a4:10:99:dd:e3:94:fd:95:37:d1:70:b6:
                    91:5a:76:c3:d8:40:37:ce:d3:ae:aa:78:bd:c7:1d:
                    79:74:3f:74:fa:30:a5:89:e7:c6:73:46:ed:cb:cc:
                    d1:eb:b6:5d:9e:d6:58:c1:c5:c6:b8:2d:74:27:04:
                    1e:1e:70:5e:9a:23:c0:a3:c9:6e:87:c9:0c:2d:dd:
                    63:ee:55:31:c0:e8:f7:5d:8f:76:fc:92:59:06:0c:
                    03:06:47:5d:3c:d7:ea:8e:cc:ea:32:23:b9:a5:51:
                    12:04:51:b3:67:55:46:84:ed:e4:5e:29:7e:77:c5:
                    01:af:37:71:c3:02:3b:27:0a:9b:74:32:b3:a2:d8:
                    ec:f9:6a:22:4f:19:e4:02:ce:06:5e:87:6c:63:dd:
                    a2:67:43:d2:fd:77:5d:67:67:7c:83:89:13:6d:99:
                    81:77:78:97:6b:96:fd:07:e9:52:ae:92:72:75:94:
                    8a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:FC:C3:F4:6F:B7:56:FD:23:94:C7:73:8B:75:D8:CC:39:35:E5:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4d4ebf20-3566-3a19-b71e-a09c44df9065.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:28:6f:4d:c9:01:65:76:84:b5:46:ea:64:16:3c:7d:e3:a4:
         e8:3f:ae:7e:79:6e:91:e3:61:69:7f:e5:93:58:52:cd:94:0b:
         18:07:07:77:91:b5:1b:2f:7c:a0:db:9d:26:0d:78:ee:f0:1a:
         8b:17:39:5b:99:b6:3a:a4:fa:33:60:f3:0b:5d:0a:16:e4:56:
         90:6b:78:fc:ca:07:95:1f:7e:66:9e:1e:4b:c8:6c:1b:4e:8d:
         b8:6a:c0:7e:ac:d3:b3:54:52:97:40:cc:54:13:06:e1:2d:b4:
         2f:c3:09:d3:cb:64:b6:43:d4:69:89:66:f4:0f:59:3b:7a:35:
         54:45:2f:b0:f1:ea:0c:2b:17:af:fc:ba:98:ad:57:c8:09:22:
         84:0c:39:ff:53:f6:42:6d:f8:c7:7a:14:cc:1c:fd:f4:83:3d:
         d6:e8:06:dc:8b:bf:2f:3d:9c:22:09:83:23:1d:a3:6e:48:e0:
         62:71:5e:c4:d7:f7:76:c6:a5:ac:60:96:e2:54:b3:58:63:5c:
         ac:7c:5e:9f:67:66:e0:31:a0:82:84:fc:5c:aa:d4:46:61:b4:
         73:e7:17:37:ae:1b:ba:c5:77:f8:d4:77:66:b7:a8:cb:7b:83:
         4f:31:9b:41:c0:fb:9b:1f:c8:3a:22:a4:1a:eb:13:d6:18:b3:
         96:3b:8d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 11:37:12 2025 by rpki-client