Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/799178cf-d343-3dde-a5fa-75d1537cb8f2.roa
File:                     799178cf-d343-3dde-a5fa-75d1537cb8f2.roa (raw, json)
Hash identifier:          Sh5w9RTz50JOwWaHnN9w5ZXv6la4kIB8P9Dj58D+rEU=
Subject key identifier:   27:9A:97:A3:56:B5:74:E3:13:79:FE:A4:B8:D3:43:55:69:39:A4:A3
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584A90A0E43081AD182E850EC380
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/799178cf-d343-3dde-a5fa-75d1537cb8f2.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     36621
IP address blocks:        2620:74:2b::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:e4:30:81:ad:18:2e:85:0e:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=4eeee265-75a2-4213-ab80-75588e7ca704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c9:38:43:89:2c:90:55:ab:c9:6a:9a:3c:bb:
                    80:c1:1d:5d:ee:38:86:00:91:67:7b:de:e7:cf:2d:
                    28:32:6d:54:7e:26:56:84:93:04:b8:33:04:85:d7:
                    b2:14:15:0a:9a:15:df:2a:cb:43:0b:8f:a6:74:19:
                    b3:11:a6:af:e8:fc:ee:37:65:5e:67:54:05:d0:d1:
                    c4:66:88:63:ff:be:3f:2f:cf:6e:32:9a:92:f3:66:
                    29:6f:c6:73:f3:ed:5e:a6:a4:07:2f:ca:8a:3d:7f:
                    6b:dd:88:2b:16:75:a2:8b:65:34:bf:25:26:3c:e5:
                    d5:95:24:fc:46:b7:bf:b4:d6:a2:7a:f7:64:21:25:
                    86:2b:05:05:ca:8d:07:52:ec:15:79:65:47:b8:0b:
                    63:2a:50:75:76:29:c8:8d:76:8b:46:45:ea:65:44:
                    60:39:a7:bf:b4:51:ad:8c:60:0f:db:7e:e3:4c:94:
                    2a:e0:9d:b6:7b:bb:ed:58:6d:78:6a:a3:f6:00:d1:
                    93:a5:10:e5:61:fb:3b:a1:d6:4a:9f:17:08:07:72:
                    f7:a3:81:cf:d6:3d:8e:7b:b7:3c:5a:e4:b9:24:b1:
                    89:d0:e5:55:cd:6e:f9:5d:6c:61:87:e3:33:80:01:
                    10:66:7b:20:95:51:e0:6b:b5:f4:3b:03:5a:ca:ca:
                    73:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:9A:97:A3:56:B5:74:E3:13:79:FE:A4:B8:D3:43:55:69:39:A4:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/799178cf-d343-3dde-a5fa-75d1537cb8f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:fb:d9:81:60:a8:e2:96:52:27:c3:0e:c6:1e:1c:92:a0:0d:
         f6:f3:4d:bb:e6:fb:42:50:cd:72:2d:c6:5b:8d:2b:80:93:1c:
         8e:e3:a0:3b:ee:88:4c:5a:53:b3:f0:99:ec:5d:0e:38:0c:67:
         9f:2d:eb:50:96:a1:65:b1:7f:8c:82:23:35:b7:7d:25:d6:d4:
         51:a0:33:72:8d:73:a7:9c:2e:3a:af:e1:73:11:53:2c:2b:00:
         be:e6:2b:5c:f8:40:14:6b:e0:1b:d2:d2:e1:7b:08:0a:f0:9e:
         43:9f:41:4a:76:35:e6:2d:4c:7d:a2:04:9b:f4:e3:83:1a:3c:
         61:0a:c5:a4:b2:c0:d4:c2:bd:12:a0:cb:25:b9:dc:20:9b:26:
         f9:d6:40:06:4e:ba:0c:72:e3:21:6f:0f:4a:5d:86:06:a4:0f:
         b6:f8:8a:c1:56:9b:90:95:1d:a1:9a:48:0a:bb:b9:a7:96:a3:
         e1:49:e7:05:5c:9e:90:f6:b2:12:12:59:08:83:17:26:f0:0d:
         5e:79:42:2b:0c:91:fa:4b:c1:bb:7f:1e:dd:5f:3c:50:07:2e:
         78:b6:0f:f0:ee:fe:45:56:fa:48:5b:6d:f0:70:28:2d:cf:3a:
         4a:08:5e:50:a2:25:8b:a0:84:51:42:6e:27:f9:db:ea:0c:43:
         9e:69:55:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 11:43:42 2025 by rpki-client