Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/59d8e4fb-a3d9-31f2-ba7f-ae15c7c2d43d.roa
File:                     59d8e4fb-a3d9-31f2-ba7f-ae15c7c2d43d.roa (raw, json)
Hash identifier:          8YC8/xyRumy5bR/DPmLPy6QfKW692PUXpCCjgF0yDS8=
Subject key identifier:   C6:50:57:53:C2:FA:D0:8E:5C:B3:E1:F9:62:76:65:EC:10:B2:7C:DA
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584A6825E5CE933CDC7C1D038720
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/59d8e4fb-a3d9-31f2-ba7f-ae15c7c2d43d.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     22547
IP address blocks:        2620:74:2c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:25:e5:ce:93:3c:dc:7c:1d:03:87:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=a294f94b-e5da-4c6e-9c3f-92965d5ae1d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4a:73:0a:99:db:cb:9b:09:9d:6a:c2:d4:a4:
                    d4:52:fd:c9:1f:d0:64:6e:ff:d9:60:83:a4:b7:27:
                    2d:7e:b0:ef:75:cf:35:62:4d:cd:92:88:5c:a4:73:
                    a9:2d:f6:c2:39:55:79:09:75:06:d8:0c:08:77:ac:
                    7a:8f:1f:0c:2e:05:cb:5c:bd:ee:e1:29:f7:39:2a:
                    f6:10:69:83:05:6e:d6:d2:6a:95:db:bb:72:d0:a8:
                    b5:93:82:e9:29:ed:c7:44:5e:c1:d5:7a:f8:0f:bf:
                    c4:a2:f9:81:49:aa:0c:02:3f:52:db:9b:f1:0d:b7:
                    3c:fb:32:40:84:60:56:07:fe:36:bc:e0:5a:4d:a0:
                    db:ad:5b:23:a7:d4:2a:9f:e4:e3:1a:3c:9c:00:34:
                    4f:bd:37:16:88:e6:34:75:13:80:0a:f0:4e:b2:3d:
                    b5:d1:bc:67:e3:fe:fa:d3:0f:6d:14:52:e7:fb:26:
                    46:ef:62:41:14:28:bd:32:a4:a6:03:c8:33:f2:38:
                    62:2f:0f:48:2b:f6:41:95:c7:96:e1:57:4a:a3:a0:
                    0f:e4:5d:51:ec:84:12:fd:59:9f:4c:01:6b:f8:e0:
                    a5:46:9e:95:b0:bd:68:a1:cc:4e:06:99:9d:a1:06:
                    10:8c:70:0c:2b:8f:96:7c:94:c2:aa:ca:dc:70:5b:
                    64:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:50:57:53:C2:FA:D0:8E:5C:B3:E1:F9:62:76:65:EC:10:B2:7C:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/59d8e4fb-a3d9-31f2-ba7f-ae15c7c2d43d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:1b:8e:07:81:18:5b:37:09:ab:95:fd:3a:aa:ba:ba:ab:3a:
         98:f9:9d:f5:1b:1b:84:bc:19:c8:51:a7:b4:46:92:24:f4:e4:
         c8:33:cc:dd:5b:f0:df:57:37:a8:bf:de:5e:70:c4:ed:48:84:
         3c:89:a7:af:ce:d7:b7:7d:99:3d:c4:27:75:92:f2:cf:0a:0e:
         d1:c0:9e:d5:e0:37:ff:9c:85:1a:be:a8:4a:b6:c1:1b:60:2a:
         29:e7:03:66:47:ea:dd:9a:4e:65:5a:30:d3:04:ce:4b:d8:79:
         29:da:ee:1d:b8:05:08:e0:0a:46:61:bb:db:98:79:1a:3c:99:
         b3:36:74:38:c0:55:04:fb:54:82:19:10:1f:02:b9:33:9a:8a:
         ed:e3:4a:39:ac:54:7b:48:ac:b4:57:15:57:d4:d0:cd:2a:c7:
         01:96:05:86:50:23:64:9f:6a:d0:d5:4e:96:8b:f9:a7:c9:6f:
         9c:3e:62:b8:71:68:d0:60:06:ce:a7:4f:01:3c:0d:19:b9:84:
         5b:58:81:e6:c2:7d:35:41:90:ad:70:5e:72:78:be:b3:99:0f:
         24:20:2a:94:a5:b2:13:31:19:20:c7:f9:1f:2c:4e:c0:11:6c:
         64:6a:d9:e2:66:5c:1c:f2:61:d8:b8:98:dc:f7:58:98:50:3b:
         18:cf:0b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 11:36:14 2025 by rpki-client