Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9c2ccfb5-9353-321f-968e-661d2b876795.roa
File:                     9c2ccfb5-9353-321f-968e-661d2b876795.roa (raw, json)
Hash identifier:          iOMw4ANFC0/nqBAP/chX/q4bXRt9W4E8xvJCkPk6Aas=
Subject key identifier:   75:62:86:43:D0:42:EB:6A:71:F7:C3:56:A6:43:46:58:E4:DA:F3:3F
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584A6825E265D470CB954F9C8C80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9c2ccfb5-9353-321f-968e-661d2b876795.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     396550
IP address blocks:        2620:74:2c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:25:e2:65:d4:70:cb:95:4f:9c:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=d1049abb-d980-48a1-8891-84c1f8ca955c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ab:5f:50:06:62:ce:9d:d9:df:b7:3b:c1:ab:
                    1d:e2:2d:87:9d:4d:b8:29:78:12:53:48:76:74:83:
                    61:e4:0d:62:6a:be:26:f6:cc:0c:c7:ad:78:69:cd:
                    f0:9f:60:e8:a1:c0:82:89:30:ff:ea:95:46:8d:f9:
                    88:f3:16:9c:28:3c:9e:73:31:91:9a:1d:81:ee:2c:
                    1b:28:c7:10:78:5e:9e:53:ba:0d:0c:cb:f5:0e:49:
                    0d:a8:c9:b7:e1:dd:b9:75:70:37:ed:26:62:35:b4:
                    6c:2a:96:df:6a:9a:d3:a3:d3:b9:71:4d:b9:9b:cf:
                    6d:67:ad:b9:a6:f3:33:6f:6e:d7:75:ad:41:18:ec:
                    b4:86:07:8c:39:94:9e:ca:59:8d:be:7e:54:b2:f8:
                    c0:a4:cb:96:f9:c4:ac:df:7a:3a:ba:77:9f:8b:ca:
                    83:7d:c0:e2:72:91:f7:02:78:d3:b1:fb:64:90:75:
                    76:2e:8f:89:48:44:a7:36:1b:20:59:61:1c:48:fd:
                    48:94:4c:c8:7a:e5:30:bf:d9:8a:99:e1:b3:2b:85:
                    60:99:7f:fd:23:81:49:60:7a:10:57:dd:e6:14:79:
                    19:55:9d:28:2c:dd:a3:59:66:ca:97:46:f0:d0:7a:
                    5a:3d:bc:6e:c6:3d:e8:e3:45:35:48:f9:8d:36:01:
                    9b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:62:86:43:D0:42:EB:6A:71:F7:C3:56:A6:43:46:58:E4:DA:F3:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9c2ccfb5-9353-321f-968e-661d2b876795.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:2e:bd:cc:36:f2:1e:79:08:b2:6f:ea:20:5c:2c:47:d1:de:
         64:16:ea:15:2a:66:20:8e:98:b2:c5:e9:c7:eb:8f:af:d4:dc:
         15:75:e8:48:09:61:12:03:57:5e:0d:eb:a2:9a:08:8c:ba:f5:
         4a:8e:ed:a1:9c:0f:9c:55:c3:96:81:bb:a6:a3:1c:9c:29:9b:
         7a:77:9a:cf:20:4c:d8:aa:46:43:57:5a:c9:4f:90:f6:58:02:
         ef:43:dd:82:ae:30:43:c8:9d:cf:c8:61:85:83:6f:bd:78:89:
         dc:72:8f:e9:28:7e:7b:fa:d6:ab:de:fd:af:52:8c:2a:a9:fb:
         8e:cb:88:fc:e6:27:55:f8:53:42:bc:e9:6e:18:a0:ab:48:aa:
         8c:b6:22:58:9a:80:fb:c4:52:e2:e6:d5:86:d7:84:4f:37:7a:
         83:02:29:14:f0:63:29:d8:a2:0f:fd:97:27:ec:38:56:32:54:
         ab:69:fc:3d:c2:18:c7:12:1d:9a:08:7e:fd:4c:7c:59:cf:ce:
         ed:22:37:48:ad:44:2d:6e:08:e3:43:3b:33:ed:43:a4:77:c9:
         9a:82:e7:ab:95:f7:7a:bf:98:21:94:a9:d9:90:1e:5e:f7:c6:
         98:3a:57:fa:98:1f:49:d6:e9:2a:c5:a0:87:e6:19:99:7c:16:
         f8:3e:1a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 11:47:54 2025 by rpki-client