Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be198c7f-6d71-3b66-96c8-1a3e613fc7be.roa
File:                     be198c7f-6d71-3b66-96c8-1a3e613fc7be.roa (raw, json)
Hash identifier:          g93oeApBJB/nBjeHRA2oTTd5c8IFBZ5MSGmjBZm1mUQ=
Subject key identifier:   D8:09:60:FB:E8:7A:22:7E:61:19:56:DE:56:A0:D7:EC:26:A3:41:D6
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584A90A0E1D7DE7F5792E973C580
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be198c7f-6d71-3b66-96c8-1a3e613fc7be.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     20172
IP address blocks:        2620:74:2b::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:e1:d7:de:7f:57:92:e9:73:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=6b59bbaa-0ec1-4fee-963c-ebd6fa8a2747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0e:64:69:08:9a:55:7a:7f:09:9a:5d:15:76:
                    7f:dc:4c:ec:38:06:dc:5e:cd:0b:ba:e1:61:a5:2e:
                    56:6f:d6:66:cc:a8:7c:b6:32:b1:cc:48:c5:46:5e:
                    16:6b:28:a2:fe:9c:53:3f:44:6c:df:95:74:a6:0f:
                    9f:a5:7f:88:e4:0b:cd:df:19:77:0d:80:c2:cb:ea:
                    97:91:5a:b6:bf:54:c9:3e:dc:67:ea:70:70:a7:49:
                    08:3d:37:70:3f:21:c5:b1:a4:39:b7:7b:17:e8:1f:
                    01:f6:fd:35:f7:6d:bc:d6:cf:69:62:e8:2e:c1:0b:
                    40:03:b9:38:44:85:39:d3:31:c4:33:50:1e:74:d7:
                    7e:32:ad:87:84:5f:34:45:ed:54:91:9c:50:ed:08:
                    a9:02:d0:dd:cf:c9:90:25:b2:63:dc:c5:8e:ee:b5:
                    11:97:9d:b0:f1:e1:1c:eb:81:4d:c3:34:86:2d:67:
                    e4:70:55:d8:ae:32:bd:2b:f1:14:2b:84:59:ca:9a:
                    96:6d:b7:80:a4:40:e5:48:35:18:7d:69:11:e5:a9:
                    28:dc:53:8f:c6:c2:c8:54:74:cb:12:9d:16:51:2d:
                    7c:1e:7a:a7:32:3b:82:78:0e:f8:aa:aa:8f:39:7b:
                    7d:b4:85:59:05:86:57:af:5e:c3:27:41:31:6f:15:
                    0d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:09:60:FB:E8:7A:22:7E:61:19:56:DE:56:A0:D7:EC:26:A3:41:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be198c7f-6d71-3b66-96c8-1a3e613fc7be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:a4:b7:48:01:34:c6:cd:5e:2b:d2:5a:5d:5a:f8:53:9f:e6:
         8e:fd:27:aa:2f:ff:67:38:b9:17:e0:36:85:a4:2d:9c:45:45:
         4e:c0:6f:c8:b6:bc:f9:c7:5a:90:83:32:a8:df:ab:4d:c0:20:
         3e:e8:ca:5c:09:a5:dc:e1:99:65:e0:a2:23:5e:be:84:da:90:
         5b:c1:b9:99:18:8d:81:a1:3d:15:f4:57:b6:f2:7e:a3:20:26:
         a5:77:5a:a0:04:aa:63:15:11:2f:5e:6d:07:e8:98:36:59:cf:
         ca:49:a1:b1:19:12:9a:ce:af:ab:76:e8:90:85:fb:4b:6e:47:
         68:03:bf:c6:b9:45:0e:ad:12:83:3c:1d:7c:9e:28:ee:b2:93:
         28:4d:af:6f:39:07:1f:26:c0:c8:34:c9:0f:6c:7d:c4:66:da:
         a4:23:ed:a2:0d:9b:0c:07:2e:08:3b:9a:c4:66:99:9f:d7:7e:
         3c:f5:33:18:25:73:19:f5:e8:60:44:58:77:ab:ba:05:24:d4:
         d7:f7:7b:a5:57:78:55:5d:4d:66:cf:ca:71:4c:07:76:e4:06:
         d5:18:7a:af:13:0b:f0:1b:2e:d1:2d:e6:e9:a2:0c:04:b2:33:
         b9:34:5f:0b:73:30:18:9b:26:07:37:c8:6c:17:23:63:8c:c2:
         55:ad:5a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 11:42:44 2025 by rpki-client