Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e5deceed-f0e2-3522-9119-669b797859a6.roa
File:                     e5deceed-f0e2-3522-9119-669b797859a6.roa (raw, json)
Hash identifier:          0Mzc6a9ElXtwtTctBiUxS6lKmIhwFqK7aj66scV1zUY=
Subject key identifier:   94:45:E4:D9:4B:3A:D4:37:7F:83:26:6C:71:46:BE:3A:21:94:4C:C9
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584A6825F28222FAFC591B7DA480
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e5deceed-f0e2-3522-9119-669b797859a6.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     396594
IP address blocks:        2620:74:2c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:25:f2:82:22:fa:fc:59:1b:7d:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=e1495ffa-8f8d-4a12-868b-140213ebc560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:88:78:42:e8:09:e5:00:99:52:be:19:8e:51:
                    9b:39:04:e2:01:ac:72:39:ae:75:5f:01:39:4c:84:
                    6e:85:59:c4:24:05:dd:e8:82:3b:1f:0c:dd:02:c0:
                    77:24:79:52:ea:f0:77:cd:4e:03:79:03:81:bb:30:
                    e6:bb:0d:82:17:ee:c7:20:bd:7b:c1:ce:36:94:fd:
                    4e:3a:c4:9e:7c:0f:9c:6f:8b:33:5b:72:a6:d9:e2:
                    bd:ac:ea:fe:fa:67:70:36:9f:95:c7:4e:fa:d1:2e:
                    76:22:86:5d:72:b9:70:58:29:fa:84:5d:bd:e5:c7:
                    5b:59:b3:39:3b:90:21:17:75:77:cb:54:77:91:ae:
                    4e:b3:6b:8a:41:6a:ae:40:b3:c3:46:0a:19:ed:33:
                    46:c1:4d:f5:87:51:eb:42:ac:77:0a:24:2e:20:b5:
                    1b:32:af:c6:35:57:aa:a7:2b:74:90:fa:28:04:13:
                    63:83:50:32:65:19:8b:a3:76:7e:ad:3b:76:dc:f0:
                    41:4b:a9:4c:51:d4:5a:7f:5b:d9:10:15:43:0d:e7:
                    66:31:4e:93:c4:40:f2:da:64:34:a0:20:55:26:0b:
                    66:78:e9:7d:1d:93:8b:92:ee:d9:1a:fa:3b:c3:e7:
                    91:62:0d:2e:5b:52:80:4c:15:1a:08:8b:fb:f7:5e:
                    a2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:45:E4:D9:4B:3A:D4:37:7F:83:26:6C:71:46:BE:3A:21:94:4C:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e5deceed-f0e2-3522-9119-669b797859a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:e1:64:99:b1:61:26:f9:c4:43:d6:8c:94:11:77:eb:15:ef:
         49:5d:c2:2d:c9:e1:24:5b:ed:ae:fb:4a:5f:e4:20:8f:0f:63:
         36:a1:b8:8b:d5:86:ae:0e:58:3f:8a:8b:55:b6:50:81:c6:3d:
         89:35:f5:af:e5:b6:8e:d7:83:9c:7c:99:e6:aa:67:63:29:35:
         78:06:96:ff:f5:29:45:80:d4:41:33:4e:f4:0b:14:5c:39:aa:
         08:88:df:82:6e:fe:30:f6:bb:97:4e:7c:d4:3c:e1:77:ee:34:
         cf:cf:f7:a8:5a:c3:4c:e6:dc:47:14:10:ac:ce:16:02:d4:d3:
         0f:b8:a8:14:f9:18:df:76:82:7d:29:54:85:8f:aa:52:9c:f5:
         b0:a9:e6:aa:27:e9:17:3d:e4:fa:48:9e:ed:ee:b5:cc:d2:74:
         4e:d0:3b:b4:e4:69:39:60:d1:cb:5d:da:6f:60:cd:7a:f6:b7:
         f3:fb:ad:57:bd:4f:ae:68:2e:20:dc:b9:31:43:b8:32:8b:91:
         29:5d:b5:79:77:63:08:f3:f9:65:38:85:db:4f:45:91:00:c7:
         b8:02:b6:6e:ca:31:9e:8a:d9:30:cf:b2:ca:38:d0:16:9d:75:
         dc:01:0e:9f:e4:bc:a5:6a:92:26:fd:8a:72:bf:e7:5c:d1:05:
         3a:30:32:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 11:43:41 2025 by rpki-client