Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b6a982bb-d61e-34f3-bb81-71cc3e5ed574.roa
File:                     b6a982bb-d61e-34f3-bb81-71cc3e5ed574.roa (raw, json)
Hash identifier:          q41v/IwIWn0U6OzmHW7gi/jJgOru4rR/WxsrwE3Cz44=
Subject key identifier:   A5:4E:3E:6D:02:62:F8:88:D8:02:03:9E:64:64:D8:A3:C8:68:B6:94
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584A814634E3C86D9C766535C700
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b6a982bb-d61e-34f3-bb81-71cc3e5ed574.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     396585
IP address blocks:        2620:74:2b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:34:e3:c8:6d:9c:76:65:35:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=49645719-d4f9-4418-8b87-29f21470808f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b5:3b:10:ab:63:17:1a:9b:eb:bd:ef:1c:b5:
                    8d:f8:21:77:50:e3:8d:25:02:f8:04:03:51:93:17:
                    1c:83:49:c3:d4:69:20:09:b3:ac:a3:12:bf:9b:6d:
                    2c:9c:bb:09:93:51:68:5b:aa:06:5b:45:c8:b4:ce:
                    5c:4c:ef:1a:35:49:81:02:dd:a8:c3:19:87:04:1d:
                    c2:87:09:5a:48:a9:14:56:85:b0:b3:26:88:7d:29:
                    20:0d:46:a2:7b:05:e6:3b:cb:4c:c5:af:48:ca:c3:
                    74:5f:b8:7b:1c:b5:f5:05:f5:5e:33:72:3f:49:30:
                    7c:45:93:89:f6:89:a4:42:f2:69:a3:4c:d7:97:1e:
                    50:81:ca:9d:c1:f0:ac:c1:b2:fd:31:fe:c9:dc:91:
                    7b:98:de:6e:56:5e:fc:49:b0:cb:e5:20:2b:27:2f:
                    4d:a9:90:75:f5:c1:64:29:48:88:e4:c8:6f:ed:fe:
                    d1:d6:56:7c:94:88:3d:e7:9a:d1:9d:d0:9d:8b:c1:
                    70:2c:90:da:4e:87:f8:79:4a:a3:e8:64:e1:b8:82:
                    3a:56:e3:29:65:e5:7f:a5:ba:ec:60:75:fd:1c:fd:
                    9f:9a:9b:24:db:b1:f9:51:d4:f6:2b:99:28:a0:19:
                    67:a9:35:f4:9b:31:ba:6f:0d:83:f0:73:5c:98:80:
                    63:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:4E:3E:6D:02:62:F8:88:D8:02:03:9E:64:64:D8:A3:C8:68:B6:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b6a982bb-d61e-34f3-bb81-71cc3e5ed574.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:c3:e0:e2:3a:7f:cf:1c:48:3c:e4:d2:05:ed:6e:cc:99:db:
         36:43:76:72:a8:18:9c:21:54:ae:7c:7c:5b:51:4d:d1:2a:dc:
         36:b8:ee:0a:d3:22:bd:78:29:4d:c7:dc:8d:29:a7:35:4d:60:
         9a:1a:9e:cc:5a:28:2f:88:ed:6c:7a:29:6c:a1:97:2b:28:e4:
         14:5b:77:d1:64:41:2f:97:b4:32:10:1a:d1:9c:a7:da:6a:e6:
         b4:8a:40:ab:7d:08:96:13:91:66:2c:d7:81:a2:a1:1c:1e:6a:
         86:c9:9c:3d:03:15:7b:cc:30:f1:78:6d:ee:6c:3c:31:a6:6e:
         ca:83:e3:8e:51:c6:d3:3f:47:4a:a8:dd:60:65:63:d1:2a:98:
         60:67:19:c6:be:f7:d3:8c:bb:60:4f:75:70:b4:b8:af:9e:78:
         39:75:b2:d9:86:c8:38:61:84:08:89:34:fd:9e:96:6f:0a:74:
         33:51:1a:e4:30:d2:62:3d:50:68:b3:b4:ef:80:c1:1a:66:c6:
         f8:5c:8f:32:1b:25:21:b7:d3:13:7a:56:5c:ce:b5:ac:96:7e:
         d7:3a:2e:7a:1b:b5:05:90:51:42:76:1b:fb:48:ba:12:74:cd:
         26:da:65:6d:ac:d3:e0:d3:af:cb:bc:aa:2a:80:8c:60:5f:fe:
         c3:6a:28:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 11:43:12 2025 by rpki-client