Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da4622cf-2073-3cfa-8aef-0aab700d93ad.roa
File:                     da4622cf-2073-3cfa-8aef-0aab700d93ad.roa (raw, json)
Hash identifier:          iq4VBIxOkP0aC6Ahs6xWcsT43lTJ6vcAZUG4UEzZSkM=
Subject key identifier:   F1:96:AA:DE:43:85:C3:3B:F7:AF:16:FB:EA:DE:31:2E:26:E9:62:A8
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584A90A0E4FB41EB7583C6684480
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da4622cf-2073-3cfa-8aef-0aab700d93ad.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     397205
IP address blocks:        2620:74:2b::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:e4:fb:41:eb:75:83:c6:68:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=9057d5bb-146e-4237-97ec-5e15722f1d02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:25:df:6d:76:0c:4d:41:ec:1d:e0:b9:10:01:
                    50:21:4f:6c:37:9a:9f:d5:3c:4a:e0:0c:92:43:e5:
                    ac:d2:2e:53:3a:f2:50:a0:6b:0c:9d:13:a0:65:6b:
                    31:3a:80:ab:45:dd:bd:01:21:b1:ff:f6:3c:02:1f:
                    db:59:c0:60:48:8e:33:31:55:66:b0:f0:f4:04:ad:
                    b6:1e:ad:74:46:d5:26:4c:31:41:14:a8:1d:9a:2e:
                    fe:99:41:03:54:59:91:e9:f7:76:a9:4c:c8:32:72:
                    73:97:2f:26:b6:62:22:dd:24:27:65:10:3d:97:ee:
                    75:2f:06:5c:98:66:ce:ba:90:2c:fb:8a:e1:27:3a:
                    27:ed:88:e3:69:87:6b:39:0d:f5:ab:53:35:76:83:
                    58:f4:41:2e:5d:f8:61:19:bd:4c:69:55:95:dd:33:
                    e1:8e:1b:87:c7:7f:3b:32:4a:43:b4:19:d8:f6:f6:
                    3b:10:bd:92:34:bf:90:9d:45:e9:6b:38:b8:d4:0b:
                    9e:d4:d1:fe:3b:8a:50:13:fe:d3:7c:cb:ec:35:38:
                    98:e3:0a:32:8c:25:e1:d9:4f:dd:d4:39:c5:7d:c7:
                    57:fd:8a:48:0d:c2:96:fe:97:a5:c5:b1:f6:e0:5c:
                    c8:7d:23:fc:86:b8:3c:29:3c:d9:3e:c5:18:4a:fb:
                    2e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:96:AA:DE:43:85:C3:3B:F7:AF:16:FB:EA:DE:31:2E:26:E9:62:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da4622cf-2073-3cfa-8aef-0aab700d93ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:d9:b0:91:b7:8a:cc:bb:57:c6:7b:0e:e8:60:d7:06:b3:cc:
         56:64:6d:7c:1c:8b:31:00:8c:9e:6f:44:8a:17:15:e5:bf:23:
         54:b6:d9:4f:b0:9a:d6:18:2a:cb:b8:05:31:e0:a2:11:32:7b:
         89:51:79:cd:eb:f8:42:3e:d8:7d:3e:5d:3d:24:6e:e5:68:ae:
         8b:9a:e3:92:b0:81:2e:a8:2f:57:88:92:79:73:ec:0d:cf:51:
         69:36:e3:c3:df:d2:9b:ed:6c:93:3d:5c:e5:40:de:ca:ca:9c:
         c2:10:95:d1:83:d0:3d:8b:aa:21:90:10:61:5f:96:57:fd:15:
         90:27:07:e6:c7:76:ff:58:95:a6:fa:db:da:fd:ea:82:51:72:
         bd:e4:d0:1a:56:c9:72:46:c7:7a:f9:80:78:cf:51:ef:72:ee:
         49:7d:31:b0:5e:5c:19:f9:63:ce:f7:d5:db:a8:df:84:56:ba:
         24:cc:d0:12:ac:06:5b:75:44:a6:c9:53:6d:75:d9:42:6d:85:
         5b:92:9b:ba:0d:ea:da:42:44:fb:3b:dd:d1:30:a4:0a:94:80:
         98:39:c7:8e:63:45:36:0e:58:6b:6a:99:39:70:57:89:a7:fe:
         07:ac:d8:1b:81:33:00:50:95:e7:3b:82:c4:ad:8d:f9:dc:10:
         d8:49:c2:60
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqQoOT7Qet1g8ZoRIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk
OTA1N2Q1YmItMTQ2ZS00MjM3LTk3ZWMtNWUxNTcyMmYxZDAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiXfbXYMTUHsHeC5EAFQIU9sN5qf1TxK4AyS
Q+Ws0i5TOvJQoGsMnROgZWsxOoCrRd29ASGx//Y8Ah/bWcBgSI4zMVVmsPD0BK22
Hq10RtUmTDFBFKgdmi7+mUEDVFmR6fd2qUzIMnJzly8mtmIi3SQnZRA9l+51LwZc
mGbOupAs+4rhJzon7YjjaYdrOQ31q1M1doNY9EEuXfhhGb1MaVWV3TPhjhuHx387
MkpDtBnY9vY7EL2SNL+QnUXpazi41Aue1NH+O4pQE/7TfMvsNTiY4woyjCXh2U/d
1DnFfcdX/YpIDcKW/pelxbH24FzIfSP8hrg8KTzZPsUYSvsu7QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFPGWqt5DhcM7968W++reMS4m6WKoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGE0NjIyY2YtMjA3My0z
Y2ZhLThhZWYtMGFhYjcwMGQ5M2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBC2bCRt4rMu1fGew7oYNcGs8xWZG18HIsxAIye
b0SKFxXlvyNUttlPsJrWGCrLuAUx4KIRMnuJUXnN6/hCPth9Pl09JG7laK6LmuOS
sIEuqC9XiJJ5c+wNz1FpNuPD39Kb7WyTPVzlQN7KypzCEJXRg9A9i6ohkBBhX5ZX
/RWQJwfmx3b/WJWm+tva/eqCUXK95NAaVslyRsd6+YB4z1Hvcu5JfTGwXlwZ+WPO
99XbqN+EVrokzNASrAZbdUSmyVNtddlCbYVbkpu6DeraQkT7O93RMKQKlICYOceO
Y0U2Dlhrapk5cFeJp/4HrNgbgTMAUJXnO4LErY353BDYScJg
-----END CERTIFICATE-----
Generated at Wed Jul 23 11:44:21 2025 by rpki-client