Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/30f79c0f-c845-380b-bb67-19b3a8e8a66f.roa
File:                     30f79c0f-c845-380b-bb67-19b3a8e8a66f.roa (raw, json)
Hash identifier:          +nBtghfU9RFtKXDW+VkPja3g0w7Op2/dwaVhnYxrMcM=
Subject key identifier:   8C:F2:38:3B:1C:22:C6:46:CF:45:E9:DC:0C:54:69:98:A9:87:A2:C7
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584A1193D3254641AF753668FD80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/30f79c0f-c845-380b-bb67-19b3a8e8a66f.roa
Signing time:             Tue 03 Jun 2025 12:47:21 +0000
ROA not before:           Tue 03 Jun 2025 12:47:21 +0000
ROA not after:            Mon 01 Sep 2025 12:47:21 +0000
asID:                     396574
IP address blocks:        2620:74:21::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:93:d3:25:46:41:af:75:36:68:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jun  3 12:47:21 2025 GMT
            Not After : Sep  1 12:47:21 2025 GMT
        Subject: CN=763b506a-ce7a-4bf1-9f97-b34bfc3540cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a4:e9:d4:1b:6e:7b:d1:02:32:5e:6d:16:18:
                    46:7c:34:ff:be:3a:55:24:f0:2a:b9:b8:97:f3:af:
                    af:a1:8d:a4:44:2b:9b:d4:a1:85:00:1c:d5:3e:4e:
                    f8:e7:bf:38:6c:fd:45:48:ff:d7:48:91:1e:ed:2c:
                    13:9b:83:e0:b5:28:10:18:3e:a5:bb:0c:b5:9d:8c:
                    c4:7c:f5:af:30:1f:1d:1b:54:14:62:a8:b3:e2:70:
                    e9:a5:e0:12:e6:bb:38:77:7c:eb:98:38:30:30:8d:
                    0f:fa:78:83:61:da:fc:66:9b:84:07:b2:80:8f:42:
                    0b:7c:99:60:a9:05:76:bb:95:c5:e7:8f:d9:43:8e:
                    57:84:96:cd:79:1b:36:68:ee:78:a1:51:56:50:31:
                    63:24:df:f9:08:ec:9a:3e:68:71:5d:57:5a:57:09:
                    aa:f1:99:6e:e3:08:d4:d3:30:8f:07:51:af:9b:e2:
                    e3:32:d2:c3:4e:c5:84:84:ff:77:58:98:8a:8b:65:
                    58:93:54:f0:c7:7d:6c:9c:7b:e5:13:75:f3:5e:95:
                    ff:61:40:62:5b:b7:bf:ee:58:03:21:ae:e2:fb:bf:
                    97:a4:07:f3:bd:94:cc:40:29:8d:0c:8b:ed:09:7c:
                    41:a6:b9:16:4e:3a:49:1c:4c:51:dc:ae:4d:90:cf:
                    c4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F2:38:3B:1C:22:C6:46:CF:45:E9:DC:0C:54:69:98:A9:87:A2:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/30f79c0f-c845-380b-bb67-19b3a8e8a66f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:7c:6b:5a:88:f0:a5:e0:5e:0a:40:93:e1:56:6f:94:a9:b0:
         c0:67:66:a4:4c:19:d4:2e:ce:56:0a:53:99:50:1f:20:6c:11:
         84:80:8c:15:4c:e7:15:3e:f5:41:57:70:82:8f:b4:cc:f7:59:
         ac:9d:3d:f8:87:39:5c:41:79:92:80:63:cf:39:ee:7b:09:e7:
         65:cb:1e:3d:38:c5:3f:8a:49:35:5e:eb:18:76:85:3a:90:17:
         df:0d:99:a1:73:ca:e4:64:60:7d:0b:81:d0:b7:c8:72:a2:1d:
         c6:46:bd:74:56:cc:dd:c7:99:a0:28:c1:df:87:27:bf:8f:de:
         d3:05:16:a0:86:ca:ff:11:7c:a6:aa:7d:c6:a8:3b:61:40:90:
         f3:b2:83:cb:f0:ae:0b:58:1e:01:68:81:78:c9:c4:6c:73:04:
         99:fe:dc:81:ee:2c:c4:6d:1c:2a:a8:e0:69:58:ab:5f:34:75:
         23:37:28:8a:6f:a7:d3:e9:a7:02:29:a6:0b:68:78:3f:67:0d:
         8e:0a:59:80:56:d0:55:b0:de:7e:66:30:16:d6:8d:67:b5:61:
         f6:09:e1:66:cc:bb:36:8b:74:89:e0:88:a3:33:1c:58:c9:16:
         6d:94:f4:16:eb:3d:4c:85:ac:3e:97:5f:b4:37:3d:58:75:cf:
         f3:c4:b2:ee
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9MlRkGvdTZo/YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDYwMzEyNDcyMVoXDTI1MDkwMTEyNDcyMVowLzEtMCsGA1UEAxMk
NzYzYjUwNmEtY2U3YS00YmYxLTlmOTctYjM0YmZjMzU0MGNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6Tp1Btue9ECMl5tFhhGfDT/vjpVJPAqubiX
86+voY2kRCub1KGFABzVPk745784bP1FSP/XSJEe7SwTm4PgtSgQGD6luwy1nYzE
fPWvMB8dG1QUYqiz4nDppeAS5rs4d3zrmDgwMI0P+niDYdr8ZpuEB7KAj0ILfJlg
qQV2u5XF54/ZQ45XhJbNeRs2aO54oVFWUDFjJN/5COyaPmhxXVdaVwmq8Zlu4wjU
0zCPB1Gvm+LjMtLDTsWEhP93WJiKi2VYk1Twx31snHvlE3XzXpX/YUBiW7e/7lgD
Ia7i+7+XpAfzvZTMQCmNDIvtCXxBprkWTjpJHExR3K5NkM/EKQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIzyODscIsZGz0Xp3AxUaZiph6LHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzBmNzljMGYtYzg0NS0z
ODBiLWJiNjctMTliM2E4ZThhNjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEV8a1qI8KXgXgpAk+FWb5SpsMBnZqRMGdQuzlYKU5lQHyBsEYSA
jBVM5xU+9UFXcIKPtMz3WaydPfiHOVxBeZKAY8857nsJ52XLHj04xT+KSTVe6xh2
hTqQF98NmaFzyuRkYH0LgdC3yHKiHcZGvXRWzN3HmaAowd+HJ7+P3tMFFqCGyv8R
fKaqfcaoO2FAkPOyg8vwrgtYHgFogXjJxGxzBJn+3IHuLMRtHCqo4GlYq180dSM3
KIpvp9PppwIppgtoeD9nDY4KWYBW0FWw3n5mMBbWjWe1YfYJ4WbMuzaLdIngiKMz
HFjJFm2U9BbrPUyFrD6XX7Q3PVh1z/PEsu4=
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:04:45 2025 by rpki-client