Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a96d63d-aaeb-3297-91dd-e06edf8350d7.roa
File:                     1a96d63d-aaeb-3297-91dd-e06edf8350d7.roa (raw, json)
Hash identifier:          cD6H2W5MMH1cpp96YgR9MfavrmK6AhpT6MF15bGpOHQ=
Subject key identifier:   98:C9:B7:E2:7B:0F:1B:D3:C0:8A:AB:B1:97:EF:F8:41:DF:19:B0:83
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848E59BDC571AE2777C6B54BC00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a96d63d-aaeb-3297-91dd-e06edf8350d7.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     10515
IP address blocks:        2620:74:2a::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:dc:57:1a:e2:77:7c:6b:54:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=1c13371b-aab3-4dd1-bea0-a36a65e0036f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:e2:52:4f:f7:eb:7d:f7:97:cb:19:ef:61:12:
                    09:67:65:f8:7b:56:a3:fa:92:21:a8:04:23:f4:cc:
                    da:c2:cf:7c:46:e8:a9:f3:86:9a:22:4c:de:7f:7d:
                    44:bc:cf:80:2c:0e:4f:9e:0b:b4:82:33:31:90:d9:
                    6b:cb:d2:38:88:22:2e:ff:32:ee:d9:a4:cf:97:3a:
                    e5:c2:8a:9b:10:18:0b:8c:30:f9:32:70:3c:9c:60:
                    69:4e:c2:52:5f:87:eb:7c:11:4c:86:27:ef:cb:c4:
                    42:00:4b:b6:26:0d:73:fa:21:63:cd:b4:ac:cd:e8:
                    57:c6:a0:f7:75:64:eb:4e:a3:62:03:2b:18:10:f6:
                    98:1d:2c:a0:87:3a:1a:b0:88:84:37:85:6c:69:c9:
                    83:4a:43:9c:32:9e:4e:78:03:a4:de:87:21:59:31:
                    3f:34:2b:e8:4b:85:98:35:34:5d:b7:56:3a:de:ce:
                    6b:49:6d:e6:45:5e:fa:45:c8:55:92:48:e2:1e:12:
                    55:b4:44:25:69:89:8b:b7:f1:3d:ac:cc:8f:35:6b:
                    7e:b0:b7:82:3f:3d:5c:d0:8f:c5:18:a5:28:79:97:
                    c8:d9:a2:a4:fd:ff:18:a4:d5:63:65:31:d1:a9:18:
                    27:f7:d1:49:9e:da:a9:8b:a3:5d:04:0f:c3:50:92:
                    f2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C9:B7:E2:7B:0F:1B:D3:C0:8A:AB:B1:97:EF:F8:41:DF:19:B0:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a96d63d-aaeb-3297-91dd-e06edf8350d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:d6:d6:f1:9e:c7:cc:ad:87:bc:20:b5:6f:76:8f:f1:b5:95:
         76:31:3f:d5:19:dd:2b:c6:6d:54:ba:c1:dc:cd:ef:fd:37:7f:
         a5:69:62:88:db:a9:0b:8c:23:e6:37:40:2e:eb:a9:ba:25:3f:
         81:95:d7:7e:4d:dc:28:d4:af:81:18:14:88:0a:2d:23:60:9a:
         9b:c9:c0:78:34:f0:c3:69:d5:f8:de:17:26:b9:db:72:f7:6f:
         7f:16:2d:cb:dd:41:b9:91:99:83:e0:48:b3:5d:b1:09:b6:4a:
         3b:b7:de:b4:24:9d:6a:3a:ff:c9:35:68:a2:7c:a0:30:b2:93:
         5b:05:4c:85:d9:c5:5b:ef:08:56:7a:6d:ff:a2:b9:dc:d7:20:
         f6:93:a5:48:8b:7f:b1:62:10:67:51:7c:60:5a:f4:fd:27:c0:
         6c:9b:dc:7f:e6:f1:e6:b0:1d:a8:5e:50:e6:2d:9d:37:69:1e:
         eb:27:ef:fa:40:12:87:50:d7:09:04:2b:27:bf:29:53:82:0a:
         6e:cc:8c:7c:11:66:be:dc:40:db:66:c4:2d:87:56:96:f4:01:
         b9:5f:59:ed:e5:1a:6c:fb:59:7d:30:13:28:f4:e0:bd:0e:92:
         3f:35:98:06:6b:10:1b:26:6d:e2:a5:00:c2:25:a4:08:78:10:
         5b:14:7a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:44 2025 by rpki-client