Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/074e835a-3df2-3bae-9d50-3ea5f7af237f.roa
File:                     074e835a-3df2-3bae-9d50-3ea5f7af237f.roa (raw, json)
Hash identifier:          2BAcxruLkWRVkAlKZr0koYRc1wD9KMQaJfLNQ02xHX0=
Subject key identifier:   7E:0D:E0:4B:3E:EA:75:9C:DB:D7:CC:66:7E:6C:7D:36:50:70:27:01
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285849D85FCF902DE34E43B1DF7F00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/074e835a-3df2-3bae-9d50-3ea5f7af237f.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     397210
IP address blocks:        2620:74:21::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:cf:90:2d:e3:4e:43:b1:df:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=aabf2c50-ada1-4426-822f-e85951e948eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:de:32:73:24:5f:59:34:d9:a2:49:60:b6:15:
                    50:dd:fe:d8:21:67:37:ae:85:82:32:36:23:ce:2d:
                    f8:4e:8f:ba:b2:f2:61:d8:03:11:76:d2:be:ab:09:
                    c7:e4:91:79:26:43:3c:d6:92:69:1a:8b:01:96:97:
                    93:14:aa:81:a4:27:82:95:08:0d:64:89:7c:a1:3d:
                    4f:fc:a1:f8:06:ec:bd:81:f9:a3:7c:4a:63:88:ed:
                    40:14:56:6f:5d:0e:5c:b7:8f:a2:23:32:88:0b:b3:
                    e7:dc:b2:2e:8e:3b:9e:ab:21:a9:16:fe:3d:d7:76:
                    0d:3e:27:44:38:ce:73:5e:33:de:32:bb:bd:85:5c:
                    52:44:87:9a:0b:23:f1:98:4f:0d:30:93:a1:b6:3f:
                    cc:57:df:4c:d6:1c:08:a6:2d:84:c3:f7:99:70:66:
                    bb:e8:ad:91:d0:32:6f:cd:e7:ab:b1:64:e4:6d:07:
                    52:c2:5e:c0:27:99:f1:5f:83:22:3e:3b:3c:27:4d:
                    32:c1:e3:61:1f:fa:80:42:55:f2:3f:3a:56:d1:40:
                    80:82:62:cf:b5:f8:b2:f9:d6:28:fb:fa:f5:4c:f9:
                    6d:a7:92:4d:77:91:80:0a:e8:c0:ae:ff:0a:69:9a:
                    27:89:30:8f:f4:0f:24:06:3c:09:a2:f1:55:bb:39:
                    fd:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0D:E0:4B:3E:EA:75:9C:DB:D7:CC:66:7E:6C:7D:36:50:70:27:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/074e835a-3df2-3bae-9d50-3ea5f7af237f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:41:bc:f8:0d:d7:61:f8:03:55:d2:53:d6:8a:85:e1:3a:e9:
         95:93:b6:1c:e4:a9:75:65:c3:24:51:a8:8d:9f:9c:e2:c9:28:
         8c:1b:ff:56:06:1c:7b:2a:94:7b:97:43:ab:90:11:cd:aa:fe:
         70:d5:56:99:09:6a:a3:5f:29:50:f3:bc:ac:d3:59:1a:31:d1:
         31:04:87:cc:fb:92:01:22:1d:b9:4d:9f:10:6c:65:2a:0b:1c:
         29:42:74:c6:08:dd:a0:e9:03:5c:6f:eb:13:9e:c3:c5:9f:ae:
         67:35:00:ec:b0:5d:41:4a:c5:c5:4a:9d:de:ba:61:b9:6c:af:
         fd:76:61:f5:44:0c:43:14:84:43:35:34:6d:97:31:51:56:cc:
         d0:4d:70:91:8c:8d:ae:c7:37:d2:fb:ff:40:ae:bd:f9:c1:a7:
         62:50:f8:c3:b7:5c:6f:af:41:2f:26:fb:9d:39:ad:72:9f:ef:
         93:e4:97:c9:29:3e:e1:e0:80:ec:1c:ee:4a:6e:4a:90:5a:ae:
         df:42:2b:dd:c2:0e:24:58:25:fa:86:05:41:4e:9d:7c:f0:73:
         b0:c9:a6:a9:8e:6d:b3:93:00:84:a4:e4:3b:77:a2:17:1c:22:
         8d:c7:4a:be:10:16:28:a3:47:6a:c2:61:f7:3f:89:14:74:85:
         b8:0c:af:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:09:48 2025 by rpki-client