Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2880ef4e-bed0-319b-a093-9a3cf6cc57d2.roa
File:                     2880ef4e-bed0-319b-a093-9a3cf6cc57d2.roa (raw, json)
Hash identifier:          YVTeeylfqsntBLCQbq4poP/QI47rt8Xfu5wXGm40cmY=
Subject key identifier:   5F:B5:08:05:18:E9:C4:C1:32:7B:D9:FE:9B:52:F6:14:1F:5F:B0:9F
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285849C4D4DAC545DC1974067FC140
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2880ef4e-bed0-319b-a093-9a3cf6cc57d2.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     396587
IP address blocks:        2620:74:2a::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:da:c5:45:dc:19:74:06:7f:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=7dd13e6f-ddac-454a-bdaf-7b32748fa708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7a:b8:df:53:32:64:e6:1f:9a:8e:7a:fb:78:
                    10:8e:af:ae:d6:8e:36:7e:ad:5c:1b:35:f2:87:71:
                    5e:50:b5:71:ff:9b:2e:14:69:74:e7:1e:eb:f7:73:
                    da:81:93:06:81:7e:df:f5:b0:05:24:89:c8:06:5b:
                    83:f1:13:d2:c4:70:1e:37:71:de:de:b9:64:74:c8:
                    31:59:6e:f5:25:3f:bc:83:c8:cf:4a:d6:ff:7b:bf:
                    e6:75:42:34:45:19:04:18:67:ad:60:01:ca:c4:64:
                    9f:14:97:a8:0e:73:3d:68:ae:3b:80:24:ba:79:fb:
                    77:e5:e2:9d:6f:b2:6f:11:82:6e:b9:f8:3f:bb:dc:
                    67:73:91:17:33:35:14:95:18:e2:c6:21:d2:42:ea:
                    f5:80:3c:ac:90:b5:44:be:42:1f:1f:13:76:ef:e3:
                    76:bb:3c:de:5f:64:c2:2d:86:3b:b8:3a:b4:37:ab:
                    c0:89:6a:35:9d:54:eb:1e:21:f1:ce:14:6f:48:9b:
                    ee:90:05:fa:64:7a:bf:b7:36:b6:10:07:7b:21:12:
                    4e:7d:59:14:a3:65:67:11:66:54:0a:6b:6b:46:7d:
                    e0:71:ee:9e:d1:d5:a9:74:e3:a9:d4:da:c3:81:5c:
                    c4:65:f3:3a:3b:08:b3:a1:86:17:0b:bf:bd:a4:54:
                    95:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B5:08:05:18:E9:C4:C1:32:7B:D9:FE:9B:52:F6:14:1F:5F:B0:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2880ef4e-bed0-319b-a093-9a3cf6cc57d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:83:6c:c5:e8:fb:0d:37:35:f6:ea:1d:f4:ca:91:94:46:da:
         c4:11:2e:12:7b:3e:31:6f:bb:b2:52:67:85:2e:8f:b4:4a:d4:
         c0:98:27:fd:a5:85:e3:29:7f:ac:ef:a7:00:04:1f:f1:be:ad:
         c4:46:01:27:48:e6:a8:f8:cc:c2:90:9a:61:26:7e:fc:c4:21:
         5a:83:21:cf:d2:43:f4:52:66:54:0a:55:8d:79:37:30:c4:d8:
         90:d8:98:84:99:a8:41:a7:ad:a5:1d:56:76:ab:a7:24:3c:c5:
         f8:9a:c7:88:2a:39:f0:9d:d7:15:06:19:80:58:3a:27:f8:aa:
         c6:c3:46:04:a1:ef:12:89:bf:d7:b5:3a:3d:a8:91:97:1e:cd:
         09:a7:e9:9d:55:b3:cc:54:3b:d1:b7:73:93:7f:e9:d2:b7:b6:
         85:e5:f3:c9:3f:5f:37:8e:34:7d:d1:a4:08:2d:4c:ef:55:e8:
         34:04:26:c1:5f:ec:a1:16:20:5a:c8:03:24:55:38:1c:f8:33:
         2a:18:cd:f2:d8:eb:7c:41:96:39:0f:a8:29:ca:2b:61:9d:98:
         6f:44:2a:2a:cb:4c:fe:ec:b5:d7:88:6b:3b:e6:75:e6:e4:1d:
         02:58:a5:9b:93:7f:b6:89:38:13:82:3e:c2:e8:1d:00:e4:33:
         0a:c7:d2:40
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnE1NrFRdwZdAZ/wUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk
N2RkMTNlNmYtZGRhYy00NTRhLWJkYWYtN2IzMjc0OGZhNzA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3q431MyZOYfmo56+3gQjq+u1o42fq1cGzXy
h3FeULVx/5suFGl05x7r93PagZMGgX7f9bAFJInIBluD8RPSxHAeN3He3rlkdMgx
WW71JT+8g8jPStb/e7/mdUI0RRkEGGetYAHKxGSfFJeoDnM9aK47gCS6eft35eKd
b7JvEYJuufg/u9xnc5EXMzUUlRjixiHSQur1gDyskLVEvkIfHxN27+N2uzzeX2TC
LYY7uDq0N6vAiWo1nVTrHiHxzhRvSJvukAX6ZHq/tza2EAd7IRJOfVkUo2VnEWZU
CmtrRn3gce6e0dWpdOOp1NrDgVzEZfM6OwizoYYXC7+9pFSV3QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFF+1CAUY6cTBMnvZ/ptS9hQfX7CfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjg4MGVmNGUtYmVkMC0z
MTliLWEwOTMtOWEzY2Y2Y2M1N2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQADg2zF6PsNNzX26h30ypGURtrEES4Sez4xb7uy
UmeFLo+0StTAmCf9pYXjKX+s76cABB/xvq3ERgEnSOao+MzCkJphJn78xCFagyHP
0kP0UmZUClWNeTcwxNiQ2JiEmahBp62lHVZ2q6ckPMX4mseIKjnwndcVBhmAWDon
+KrGw0YEoe8Sib/XtTo9qJGXHs0Jp+mdVbPMVDvRt3OTf+nSt7aF5fPJP183jjR9
0aQILUzvVeg0BCbBX+yhFiBayAMkVTgc+DMqGM3y2Ot8QZY5D6gpyithnZhvRCoq
y0z+7LXXiGs75nXm5B0CWKWbk3+2iTgTgj7C6B0A5DMKx9JA
-----END CERTIFICATE-----
Generated at Fri Jun 6 19:29:33 2025 by rpki-client