Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec742843-d253-3a6b-9952-4646f89e3124.roa
File:                     ec742843-d253-3a6b-9952-4646f89e3124.roa (raw, json)
Hash identifier:          rU5I2U98DU2TeFu7y8k5Q+CmVaDeRUYatOpT59pizLk=
Subject key identifier:   08:ED:3F:9C:D1:88:25:81:98:5D:8F:84:20:F1:2F:A5:4E:D7:36:FB
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285849350EBCAF7E07B2F826469200
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec742843-d253-3a6b-9952-4646f89e3124.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     7342
IP address blocks:        2620:74:41::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:bc:af:7e:07:b2:f8:26:46:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=8d024155-9396-4ee3-9f56-ea96b2deb524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a2:eb:00:b7:1e:7f:1f:09:75:88:36:b7:bf:
                    19:eb:91:ef:ee:84:41:0e:f5:ad:01:ae:9f:bc:c2:
                    83:41:bb:1b:b7:e3:06:18:6b:e8:91:d7:69:66:be:
                    f5:33:1e:74:c9:67:d6:7c:15:91:8a:d6:aa:c4:f3:
                    21:ab:e1:7f:46:d8:33:cf:c6:b0:ab:d4:19:4b:6a:
                    f2:52:c6:0c:98:8d:4b:35:5d:f4:8e:d8:62:6a:68:
                    19:62:cb:21:72:05:7c:05:57:8c:16:52:7b:9a:c0:
                    94:8e:97:b2:56:a7:c2:73:b0:9b:45:f3:98:77:2d:
                    50:63:3e:ce:17:38:42:a3:3c:c0:6b:7a:81:02:dc:
                    b5:73:e8:e0:47:d4:99:fe:8d:73:5b:09:1d:90:19:
                    9e:57:e5:1e:76:43:b0:f7:99:13:0b:2d:dc:35:f8:
                    55:cf:2e:41:41:f8:03:c7:18:89:61:49:b3:c9:da:
                    c3:43:98:78:18:b8:f4:75:73:12:35:2d:c4:30:c9:
                    d8:2b:30:f0:65:1a:20:d6:93:cd:d4:ab:ee:85:b4:
                    19:be:b4:3d:b2:82:bc:13:d8:f3:fa:79:93:43:8d:
                    90:da:58:f9:90:0c:96:e3:89:05:95:26:ae:bd:b2:
                    57:68:a9:b7:f7:73:3c:96:40:3b:b7:36:be:2f:66:
                    79:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:ED:3F:9C:D1:88:25:81:98:5D:8F:84:20:F1:2F:A5:4E:D7:36:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec742843-d253-3a6b-9952-4646f89e3124.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:41::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:5f:f0:9a:95:98:e2:7b:bd:c2:1c:f9:5c:09:48:f6:18:16:
         3e:45:9c:d1:72:96:da:48:af:4f:59:a6:28:65:32:e2:c7:1e:
         b1:b4:28:df:5a:ee:d8:f0:2e:04:85:51:e6:59:5e:8b:09:0a:
         67:e2:73:3d:9c:0b:f6:5c:c5:9f:a4:06:83:3b:2e:e8:75:fd:
         5f:37:f7:68:c6:44:d0:1e:eb:14:01:26:9b:9a:a7:dd:a3:9b:
         e7:0b:28:5c:c4:e4:45:22:f3:0f:c7:af:1c:78:d8:0f:4c:c8:
         50:ed:c7:68:24:0f:1a:61:4e:34:a4:68:70:08:dc:ef:ec:f8:
         a6:2c:1d:f0:a6:e4:8a:db:20:14:df:24:00:4a:3a:82:a2:d6:
         b1:3f:8c:fe:14:6e:fc:db:e3:b7:e3:66:a7:69:c6:3f:24:e3:
         21:1b:a6:46:e6:21:2c:0d:2b:94:f1:de:fd:23:3a:2b:dc:b6:
         c2:65:3f:f7:40:27:22:85:1d:32:30:a0:fc:8b:ff:2b:88:7b:
         de:47:93:58:3b:fc:0e:b7:bd:c5:c6:87:13:b5:60:0b:7f:8d:
         6e:c1:47:ed:3a:89:b7:c7:9b:01:ce:6a:16:d8:32:26:1d:4b:
         80:1f:0a:04:a6:a6:7b:f6:d9:de:9f:5d:68:26:ca:1f:82:bb:
         b2:13:3a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:12:21 2025 by rpki-client