Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/47c5fa7e-7660-3fcf-abab-97309822175b.roa
File:                     47c5fa7e-7660-3fcf-abab-97309822175b.roa (raw, json)
Hash identifier:          aWgLJtudGb5YVILoi0K2Mz8zmcN2CmcVg6TAmamqcyc=
Subject key identifier:   63:8B:CF:EC:67:91:2D:04:7B:B3:52:29:D0:26:A7:A4:72:D0:81:D0
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584B21CC379205FBA0F88CEE8240
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/47c5fa7e-7660-3fcf-abab-97309822175b.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     396564
IP address blocks:        2620:74:2c::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Sep 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:37:92:05:fb:a0:f8:8c:ee:82:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=2b073c6c-cb4e-4c67-bd9b-0d4e903b376b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d4:ec:c2:17:cc:8c:1c:11:1c:53:95:f1:65:
                    82:c7:05:6d:80:c9:d2:a4:74:15:b0:20:29:97:92:
                    62:cf:41:9d:4f:d0:d3:fe:40:0d:9a:88:30:ab:8b:
                    34:43:a3:ca:cd:44:80:59:e7:3b:d4:56:b6:7e:ba:
                    a2:8d:79:08:11:4b:a5:5f:c4:50:62:8e:98:1f:8b:
                    a0:bf:c5:4d:fe:d0:61:7a:ed:16:b4:25:a1:a8:03:
                    0c:2a:22:ca:00:65:f9:16:c2:1b:00:9d:4f:99:ab:
                    bf:55:15:61:b7:11:60:37:57:35:a7:5a:77:04:73:
                    2b:50:a6:d2:67:48:5e:b2:c3:6b:38:0b:26:46:47:
                    db:6b:a7:e2:a6:15:66:62:96:8d:fc:f0:51:6a:f5:
                    8a:f5:68:a3:83:90:1e:48:a1:38:ec:85:74:2a:70:
                    47:5e:f2:a3:d1:38:3c:06:ed:af:14:17:4c:68:9b:
                    98:42:10:04:5c:e4:12:85:62:bd:1b:27:76:b2:1a:
                    3e:ca:36:12:74:f8:3f:cd:ad:74:30:bb:21:48:ef:
                    b4:58:14:f4:40:bb:3f:b0:1f:15:59:05:02:74:64:
                    db:bb:9f:5e:01:af:1c:3c:bc:4b:b0:36:1b:8c:e4:
                    8c:34:e8:4e:a1:d8:fc:6b:29:89:fc:d1:52:74:83:
                    ff:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:8B:CF:EC:67:91:2D:04:7B:B3:52:29:D0:26:A7:A4:72:D0:81:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/47c5fa7e-7660-3fcf-abab-97309822175b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:86:73:15:18:ab:46:f0:1a:1f:0b:70:53:51:65:82:85:25:
         45:0e:b3:65:11:3d:07:70:0a:59:3b:70:f9:00:80:48:d0:2d:
         14:15:f4:2b:36:72:b2:cf:e8:ae:9a:fe:99:87:99:92:ad:68:
         68:46:90:34:32:29:d4:cf:81:bf:29:29:5b:e3:13:c7:0f:d1:
         b7:7a:d7:66:92:d3:07:59:1c:0b:80:c0:43:52:df:87:1a:26:
         9b:d4:42:54:7b:2b:89:4c:81:d6:5d:f5:8f:d2:6e:71:a1:68:
         43:d6:96:42:ac:d6:3c:c9:7f:62:f7:43:e7:13:34:51:80:6a:
         04:df:6f:bd:3d:53:82:bb:f7:84:cf:32:4e:ed:1a:8b:0e:cf:
         12:64:fa:f3:9e:39:7a:5a:f2:4b:43:33:85:4c:1a:7a:61:b8:
         7c:c9:ef:05:e3:07:bc:63:72:29:4d:c9:d2:d0:e0:23:76:2b:
         c2:11:a8:5d:a2:5c:99:0d:e4:77:40:75:cb:4f:5c:d9:d9:41:
         23:31:a9:8d:b2:8e:f9:dd:ca:20:12:e8:c9:00:5a:58:f6:57:
         fa:a8:e7:cf:1a:84:85:08:24:e3:58:7e:cc:5f:6e:aa:ee:f2:
         6f:a3:01:ea:8d:27:c8:58:2e:74:ea:f0:ac:ad:4c:4e:38:c7:
         3c:c7:84:ee
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEshzDeSBfug+IzugkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk
MmIwNzNjNmMtY2I0ZS00YzY3LWJkOWItMGQ0ZTkwM2IzNzZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dTswhfMjBwRHFOV8WWCxwVtgMnSpHQVsCAp
l5Jiz0GdT9DT/kANmogwq4s0Q6PKzUSAWec71Fa2frqijXkIEUulX8RQYo6YH4ug
v8VN/tBheu0WtCWhqAMMKiLKAGX5FsIbAJ1Pmau/VRVhtxFgN1c1p1p3BHMrUKbS
Z0hessNrOAsmRkfba6fiphVmYpaN/PBRavWK9Wijg5AeSKE47IV0KnBHXvKj0Tg8
Bu2vFBdMaJuYQhAEXOQShWK9Gyd2sho+yjYSdPg/za10MLshSO+0WBT0QLs/sB8V
WQUCdGTbu59eAa8cPLxLsDYbjOSMNOhOodj8aymJ/NFSdIP/5wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFGOLz+xnkS0Ee7NSKdAmp6Ry0IHQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDdjNWZhN2UtNzY2MC0z
ZmNmLWFiYWItOTczMDk4MjIxNzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCDhnMVGKtG8BofC3BTUWWChSVFDrNlET0HcApZ
O3D5AIBI0C0UFfQrNnKyz+iumv6Zh5mSrWhoRpA0MinUz4G/KSlb4xPHD9G3etdm
ktMHWRwLgMBDUt+HGiab1EJUeyuJTIHWXfWP0m5xoWhD1pZCrNY8yX9i90PnEzRR
gGoE32+9PVOCu/eEzzJO7RqLDs8SZPrznjl6WvJLQzOFTBp6Ybh8ye8F4we8Y3Ip
TcnS0OAjdivCEahdolyZDeR3QHXLT1zZ2UEjMamNso753cogEujJAFpY9lf6qOfP
GoSFCCTjWH7MX26q7vJvowHqjSfIWC506vCsrUxOOMc8x4Tu
-----END CERTIFICATE-----
Generated at Wed Sep 10 22:50:44 2025 by rpki-client